gocryptfs/internal/configfile, branch v1.3 Mirror of gocryptfs source code on Github http://nuetzlich.net/cgit/gocryptfs/atom?h=v1.3 2017-04-23T21:11:56+00:00 Add -forcedecode 2017-04-23T21:11:56+00:00 danim7 2017-04-08T00:09:28+00:00 urn:sha1:f1945c4daae65074cfca8f0ab5b97ac5a50c24a0 Force decode of encrypted files even if the integrity check fails, instead of failing with an IO error. Warning messages are still printed to syslog if corrupted files are encountered. It can be useful to recover files from disks with bad sectors or other corrupted media. Closes https://github.com/rfjakob/gocryptfs/pull/102 . configfile: always validate all scrypt parameters 2017-03-25T18:36:16+00:00 Jakob Unterwurzacher 2017-03-25T18:22:43+00:00 urn:sha1:c815554866f18770114a9bb0605e09f812c53010 This makes sure we cannot get weak parameters passed through a rougue gocryptfs.conf. configfile: HKDF feature flag should also be set for "-plaintextnames" 2017-03-07T20:05:45+00:00 Jakob Unterwurzacher 2017-03-07T20:03:05+00:00 urn:sha1:9a0808b1ee4cca94a3178b14838b558bf03d483b configfile: enable HKDF and Raw64 feature flags by default 2017-03-07T19:56:50+00:00 Jakob Unterwurzacher 2017-03-06T21:20:28+00:00 urn:sha1:9f17a78b4a63d7ab5b7e09c294a483c8b806aa49 Also adds a test to verify that they are set in new config files. tests: configfile: fix spurious test failure II 2017-03-05T22:24:47+00:00 Jakob Unterwurzacher 2017-03-05T22:24:47+00:00 urn:sha1:6e9b6e17c33b4471c30248c11b292468fe4ab912 internal/configfile/config_test.go:67: c declared and not used tests: configfile: fix spurious test failure 2017-03-05T22:15:50+00:00 Jakob Unterwurzacher 2017-03-05T22:15:50+00:00 urn:sha1:b878306d2a3fd18d4114a73febb2caa658f684ad This test fails because Raw64 has been disabled for now. configfile: disable Raw64 for now 2017-03-05T22:04:54+00:00 Jakob Unterwurzacher 2017-03-05T22:04:54+00:00 urn:sha1:a8fd8a251662c538946edfe0fcec8ec89727b3be Raw64 is supported (but was disabled by default) since gocryptfs v1.2. However, the implementation was buggy because it forgot about long names and symlinks. Disable it for now by default and enable it later, together with HKDF. full stack: implement HKDF support 2017-03-05T20:59:55+00:00 Jakob Unterwurzacher 2017-03-05T20:59:55+00:00 urn:sha1:d0bc7970f721cee607d993406d97d32e2c660abe ...but keep it disabled by default for new filesystems. We are still missing an example filesystem and CLI arguments to explicitely enable and disable it. configfile: reject the "HKDF" flag for now 2017-03-05T17:16:49+00:00 Jakob Unterwurzacher 2017-03-05T17:16:49+00:00 urn:sha1:4fadcbaf68ce25dcdc7665059f43226f5f9a4da5 This will be re-enabled once it is implemented. configfile: switch on Raw64 by default 2017-03-05T17:13:56+00:00 Jakob Unterwurzacher 2017-03-05T17:13:56+00:00 urn:sha1:decda6d2559192b09289b5328b9446d2b6fa7ce0 As we have dropped Go 1.4 compatibility already, and will add a new feature flag for gocryptfs v1.3 anyway, this is a good time to enable Raw64 as well.