gocryptfs/Documentation, branch v1.1-beta1 Mirror of gocryptfs source code on Github http://nuetzlich.net/cgit/gocryptfs/atom?h=v1.1-beta1 2016-09-26T21:25:13+00:00 reverse: switch from GCM-SIV to AES-SIV 2016-09-26T21:25:13+00:00 Jakob Unterwurzacher 2016-09-26T21:25:13+00:00 urn:sha1:e9bb8b800c6c724125ccd862f4d20946317b31f5 GCM-SIV is not yet finalized, and the reference implemenation is painfully slow at about 2 MB/s. Switch to AES-SIV. reverse: add gcmsiv flag and associated tests 2016-09-25T14:43:17+00:00 Jakob Unterwurzacher 2016-09-25T13:05:09+00:00 urn:sha1:2050c7f3b3822a4a3329d4ba5b146d269ef05b4d XFSTESTS.md: add output from latest fuse-xfstests 2016-07-03T20:15:59+00:00 Jakob Unterwurzacher 2016-07-03T20:15:59+00:00 urn:sha1:77e7abdf8c1f9e2da3be4edfd0edb0d6ce9cdc67 fuse-xfstests is regularily rebased to xfstests master. MANPAGE: note that "-plaintextnames" disables symlink encryption 2016-06-26T21:08:25+00:00 Jakob Unterwurzacher 2016-06-26T21:07:59+00:00 urn:sha1:a8a0d2d92c2ea98040e144c1a0d1fee4dd4b9d1d This is no change in behavoir, just a clarification in the man page. main: add "-o" option to enable "suid" and "dev" 2016-06-26T21:03:18+00:00 Jakob Unterwurzacher 2016-06-26T21:03:18+00:00 urn:sha1:15b88756add78a065fd81120d9447ca1de80dbfe Device files and suid binaries are often not needed when running gocryptfs as root. As they are potentially dangerous, let the user enable them explicitely via the new "-o" option instead of always enabling them when running as root. Drop deprecated "-gcmiv128" option 2016-06-23T20:10:19+00:00 Jakob Unterwurzacher 2016-06-23T20:10:19+00:00 urn:sha1:b558901e66a5245d067f63f45c5ecada0fffad3f The GCMIV128 feature flag is already mandatory, dropping the command line option is the final step. Completes https://github.com/rfjakob/gocryptfs/issues/29 . Drop deprecated "-emenames" option 2016-06-23T19:56:50+00:00 Jakob Unterwurzacher 2016-06-23T19:56:50+00:00 urn:sha1:3d59a72ba952602ca046df532fe2a3e8e16f1046 The EMENames feature flag is already mandatory, dropping the command line option is the final step. Drop deprecated "-diriv" option 2016-06-23T19:38:59+00:00 Jakob Unterwurzacher 2016-06-23T19:29:00+00:00 urn:sha1:b17f0465c7c38cab2f1f4ad0fc25d64d5cd175e7 The DirIV feature flag is already mandatory, dropping the command line option is the final step. main: drop "on-disk format" from -version output, add Go version 2016-06-19T17:33:15+00:00 Jakob Unterwurzacher 2016-06-19T17:33:15+00:00 urn:sha1:1dcafb99ff91e5389263d6c59b7179fd5abef0a5 As v0.4 introduced ext4-style feature flags, the on-disk format version is unlinkely to change. Drop it from the version output to reduce clutter. Use "gocryptfs -version -debug" to see it. Add the Go version string because only Go 1.6 and newer have an optimized AES-GCM implementation. This will help users to understand the performance of their build. Add "-ro" (read-only) flag 2016-06-16T19:29:22+00:00 Jakob Unterwurzacher 2016-06-16T19:29:22+00:00 urn:sha1:82d87ff8eda1a8e43cda4a5f500fc579477ee606 From the man page: **-ro** : Mount the filesystem read-only Also add a test.