gocryptfs/internal/configfile, branch v2.1
Mirror of gocryptfs source code on Github
http://nuetzlich.net/cgit/gocryptfs/atom?h=v2.1
2021-06-20T16:09:21+00:00
fido2: hide "FIDO2" in gocryptfs.conf if not used
2021-06-20T16:09:21+00:00
Jakob Unterwurzacher
2021-06-20T10:59:45+00:00
urn:sha1:50630e9f3d7f649e41ab6f1102b40a1e4ec99686
Result of:
$ gocryptfs -init foo
$ cat foo/gocryptfs.conf
Before:
{
"Creator": "gocryptfs v2.0.1",
"EncryptedKey": "FodEdNHD/cCwv1n5BuyAkbIOnJ/O5gfdCh3YssUCJ2DUr0A8DrQ5NH2SLhREeWRL3V8EMiPO2Ncr5IVwE4SSxQ==",
"ScryptObject": {
"Salt": "brGaw9Jg1kbPuSXFiwoxqK2oXFTgbniSgpiB+cu+67Y=",
"N": 65536,
"R": 8,
"P": 1,
"KeyLen": 32
},
"Version": 2,
"FeatureFlags": [
"GCMIV128",
"HKDF",
"DirIV",
"EMENames",
"LongNames",
"Raw64"
],
"FIDO2": {
"CredentialID": null,
"HMACSalt": null
}
}
After:
{
"Creator": "gocryptfs v2.0.1-5-gf9718eb-dirty.DerDonut-badnamecontent",
"EncryptedKey": "oFMj1lS1ZsM/vEfanNMeCTPw3PZr5VWeL7ap8Jd8YQm6evy2BAhtQ/pd6RzDx84wlCz9TpxqHRihuwSEMnOWWg==",
"ScryptObject": {
"Salt": "JZ/5mhy4a8EAQ/wDF1POIEe4/Ss38cfJgXgj26DuA4M=",
"N": 65536,
"R": 8,
"P": 1,
"KeyLen": 32
},
"Version": 2,
"FeatureFlags": [
"GCMIV128",
"HKDF",
"DirIV",
"EMENames",
"LongNames",
"Raw64"
]
}
Add support for FIDO2 tokens
2020-09-12T16:06:54+00:00
Pavol Rusnak
2020-09-05T20:42:15+00:00
urn:sha1:1e624a4cc3aafa57b5fa213c88bcd3689cefd1c3
remove Trezor support
2019-12-28T18:50:49+00:00
Pavol Rusnak
2019-12-27T21:27:57+00:00
urn:sha1:1364b44ae356da31e24e5605fe73a307e9d6fb03
configfile: fall back to sync() if fsync() fails
2019-04-08T17:54:54+00:00
Jakob Unterwurzacher
2019-04-07T20:04:21+00:00
urn:sha1:8459bb15c1a32561c250a8b688ab4a7ecda0a4aa
This can happen on network drives: FRITZ.NAS mounted on MacOS returns
"operation not supported": https://github.com/rfjakob/gocryptfs/issues/390
configfile: Fix a copy&paste error in validateParams method.
2018-12-28T08:58:46+00:00
Sebastian Lackner
2018-12-28T01:43:40+00:00
urn:sha1:24594d99bf74e1a4a58577348ab9fb979aa83ee6
configfile: Explicitly wipe scrypt derived key after decrypting/encrypting master key.
2018-12-27T17:47:14+00:00
Sebastian Lackner
2018-12-26T20:17:54+00:00
urn:sha1:07c486603c42af00c81d9e76e3b0731aa986e881
Further raises the bar for recovering keys from memory.
configfile: add LoadAndDecrypt wrapper
2018-09-08T10:40:29+00:00
Jakob Unterwurzacher
2018-09-08T10:40:29+00:00
urn:sha1:2bdf7d5172d3540606f098030e8ede7a3ad1dfdd
Callers that do not want to decrypt the masterkey should
call plain Load().
https://github.com/rfjakob/gocryptfs/issues/258
configfile: split off masterkey decryption
2018-09-08T10:19:19+00:00
Jakob Unterwurzacher
2018-09-08T10:19:19+00:00
urn:sha1:09d28c293e2f4142cda8dbfee0741aee7213748d
Preparation for fixing https://github.com/rfjakob/gocryptfs/issues/258
configfile: return specific error on empty input
2018-09-08T10:18:26+00:00
Jakob Unterwurzacher
2018-09-08T10:18:26+00:00
urn:sha1:21eaa8f164cba9fe6032a6a15de0c51ae1a16f8b
Report the actual problem instead of a generic
"unexpected end of JSON input".
https://github.com/rfjakob/gocryptfs/issues/258
configfile: drop superflous Printf
2018-07-23T20:25:40+00:00
Jakob Unterwurzacher
2018-07-23T20:24:19+00:00
urn:sha1:f4a972ddf1f8002095b1e57bd93bb8894ae745f2
Before:
$ gocryptfs -fsck .
LoadConfFile: ReadFile: &os.PathError{Op:"open", Path:"/var/tmp/check-gocryptfs/scratchdev/gocryptfs.conf", Err:0xd}
Cannot open config file: open /var/tmp/check-gocryptfs/scratchdev/gocryptfs.conf: permission denied
After:
$ gocryptfs -fsck .
Cannot open config file: open /var/tmp/check-gocryptfs/scratchdev/gocryptfs.conf: permission denied