gocryptfs/internal/configfile, branch v1.4.3 Mirror of gocryptfs source code on Github http://nuetzlich.net/cgit/gocryptfs/atom?h=v1.4.3 2017-11-21T22:37:06+00:00 main: Add '-devrandom' commandline option 2017-11-21T22:37:06+00:00 Sebastian Lackner 2017-11-19T12:30:04+00:00 urn:sha1:f3c777d5eaa682d878c638192311e52f9c204294 Allows to use /dev/random for generating the master key instead of the default Go implementation. When the kernel random generator has been properly initialized both are considered equally secure, however: * Versions of Go prior to 1.9 just fall back to /dev/urandom if the getrandom() syscall would be blocking (Go Bug #19274) * Kernel versions prior to 3.17 do not support getrandom(), and there is no check if the random generator has been properly initialized before reading from /dev/urandom This is especially useful for embedded hardware with low-entroy. Please note that generation of the master key might block indefinitely if the kernel cannot harvest enough entropy. exitcodes: specific codes for failure to read or write gocryptfs.conf 2017-05-14T12:30:50+00:00 Jakob Unterwurzacher 2017-05-14T12:30:50+00:00 urn:sha1:c44389d9422f31e0b462d1bcd47f80e95913cb60 New codes: * OpenConf = 23 * WriteConf = 24 exitcodes: pull all exit code definitions into the package 2017-05-07T20:16:22+00:00 Jakob Unterwurzacher 2017-05-07T20:15:01+00:00 urn:sha1:d5adde1eeb13ba377f7c05b9f21893c01f61ec16 This commit defines all exit codes in one place in the exitcodes package. Also, it adds a test to verify the exit code on incorrect password, which is what SiriKali cares about the most. Fixes https://github.com/rfjakob/gocryptfs/issues/77 . Fix typos found by Misspell 2017-05-07T10:22:15+00:00 Jakob Unterwurzacher 2017-05-07T10:22:15+00:00 urn:sha1:68387b470c0d6d2896cc6b927a6e3097389d66ab Misspell Finds commonly misspelled English words gocryptfs/internal/configfile/scrypt.go Line 41: warning: "paramter" is a misspelling of "parameter" (misspell) gocryptfs/internal/ctlsock/ctlsock_serve.go Line 1: warning: "implementes" is a misspelling of "implements" (misspell) gocryptfs/tests/test_helpers/helpers.go Line 27: warning: "compatability" is a misspelling of "compatibility" (misspell) Add -forcedecode 2017-04-23T21:11:56+00:00 danim7 2017-04-08T00:09:28+00:00 urn:sha1:f1945c4daae65074cfca8f0ab5b97ac5a50c24a0 Force decode of encrypted files even if the integrity check fails, instead of failing with an IO error. Warning messages are still printed to syslog if corrupted files are encountered. It can be useful to recover files from disks with bad sectors or other corrupted media. Closes https://github.com/rfjakob/gocryptfs/pull/102 . configfile: always validate all scrypt parameters 2017-03-25T18:36:16+00:00 Jakob Unterwurzacher 2017-03-25T18:22:43+00:00 urn:sha1:c815554866f18770114a9bb0605e09f812c53010 This makes sure we cannot get weak parameters passed through a rougue gocryptfs.conf. configfile: HKDF feature flag should also be set for "-plaintextnames" 2017-03-07T20:05:45+00:00 Jakob Unterwurzacher 2017-03-07T20:03:05+00:00 urn:sha1:9a0808b1ee4cca94a3178b14838b558bf03d483b configfile: enable HKDF and Raw64 feature flags by default 2017-03-07T19:56:50+00:00 Jakob Unterwurzacher 2017-03-06T21:20:28+00:00 urn:sha1:9f17a78b4a63d7ab5b7e09c294a483c8b806aa49 Also adds a test to verify that they are set in new config files. tests: configfile: fix spurious test failure II 2017-03-05T22:24:47+00:00 Jakob Unterwurzacher 2017-03-05T22:24:47+00:00 urn:sha1:6e9b6e17c33b4471c30248c11b292468fe4ab912 internal/configfile/config_test.go:67: c declared and not used tests: configfile: fix spurious test failure 2017-03-05T22:15:50+00:00 Jakob Unterwurzacher 2017-03-05T22:15:50+00:00 urn:sha1:b878306d2a3fd18d4114a73febb2caa658f684ad This test fails because Raw64 has been disabled for now.