gocryptfs/internal/configfile, branch v1.7Mirror of gocryptfs source code on Githubhttp://nuetzlich.net/cgit/gocryptfs/atom?h=v1.72018-12-28T08:58:46+00:00configfile: Fix a copy&paste error in validateParams method.2018-12-28T08:58:46+00:00Sebastian Lackner2018-12-28T01:43:40+00:00urn:sha1:24594d99bf74e1a4a58577348ab9fb979aa83ee6configfile: Explicitly wipe scrypt derived key after decrypting/encrypting master key.2018-12-27T17:47:14+00:00Sebastian Lackner2018-12-26T20:17:54+00:00urn:sha1:07c486603c42af00c81d9e76e3b0731aa986e881
Further raises the bar for recovering keys from memory.
configfile: add LoadAndDecrypt wrapper2018-09-08T10:40:29+00:00Jakob Unterwurzacher2018-09-08T10:40:29+00:00urn:sha1:2bdf7d5172d3540606f098030e8ede7a3ad1dfdd
Callers that do not want to decrypt the masterkey should
call plain Load().
https://github.com/rfjakob/gocryptfs/issues/258
configfile: split off masterkey decryption2018-09-08T10:19:19+00:00Jakob Unterwurzacher2018-09-08T10:19:19+00:00urn:sha1:09d28c293e2f4142cda8dbfee0741aee7213748d
Preparation for fixing https://github.com/rfjakob/gocryptfs/issues/258
configfile: return specific error on empty input2018-09-08T10:18:26+00:00Jakob Unterwurzacher2018-09-08T10:18:26+00:00urn:sha1:21eaa8f164cba9fe6032a6a15de0c51ae1a16f8b
Report the actual problem instead of a generic
"unexpected end of JSON input".
https://github.com/rfjakob/gocryptfs/issues/258
configfile: drop superflous Printf2018-07-23T20:25:40+00:00Jakob Unterwurzacher2018-07-23T20:24:19+00:00urn:sha1:f4a972ddf1f8002095b1e57bd93bb8894ae745f2
Before:
$ gocryptfs -fsck .
LoadConfFile: ReadFile: &os.PathError{Op:"open", Path:"/var/tmp/check-gocryptfs/scratchdev/gocryptfs.conf", Err:0xd}
Cannot open config file: open /var/tmp/check-gocryptfs/scratchdev/gocryptfs.conf: permission denied
After:
$ gocryptfs -fsck .
Cannot open config file: open /var/tmp/check-gocryptfs/scratchdev/gocryptfs.conf: permission denied
Only print masterkey once on -init2018-07-01T18:56:22+00:00Jakob Unterwurzacher2018-06-26T18:44:10+00:00urn:sha1:6d64dfe8f7acd8e9ca4a659d26318e442c2db85a
It is no longer printed at all when mounting a filesystem,
printing on -init can be disabled with -q.
https://github.com/rfjakob/gocryptfs/issues/76
trezor: add TrezorPayload2018-07-01T18:56:22+00:00Jakob Unterwurzacher2018-06-25T20:27:15+00:00urn:sha1:9a15dfa494c76b5fcadcd32e2e46cbee84218a87
TrezorPayload stores 32 random bytes used for unlocking
the master key using a Trezor security module. The randomness makes sure
that a unique unlock value is used for each gocryptfs filesystem.
configfile: reduce function name stutter2018-07-01T18:56:22+00:00Jakob Unterwurzacher2018-06-25T20:02:05+00:00urn:sha1:91de77943fba3cb993aad4e9756e159c4514764a
configfile.LoadConfFile() -> configfile.Load()
configfile.CreateConfFile() -> configfile.Create()
trezor: add skeleton for Trezor support2018-07-01T18:56:04+00:00Jakob Unterwurzacher2018-06-17T13:25:09+00:00urn:sha1:c6f6e8ec4d71475a24ebbb0e64f19ad94249efd9
readpassword.Trezor() is not implemented yet and returns
a hardcoded dummy key.