gocryptfs/internal/contentenc, branch v1.3 Mirror of gocryptfs source code on Github http://nuetzlich.net/cgit/gocryptfs/atom?h=v1.3 2017-04-23T22:25:02+00:00 forcedecode: tighten checks 2017-04-23T22:25:02+00:00 Jakob Unterwurzacher 2017-04-23T22:25:02+00:00 urn:sha1:3409ade2723d931097560fbbe35e461553c5912c ...and fix a few golint issues and print a scary warning message on mount. Also, force the fs to ro,noexec. Add -forcedecode 2017-04-23T21:11:56+00:00 danim7 2017-04-08T00:09:28+00:00 urn:sha1:f1945c4daae65074cfca8f0ab5b97ac5a50c24a0 Force decode of encrypted files even if the integrity check fails, instead of failing with an IO error. Warning messages are still printed to syslog if corrupted files are encountered. It can be useful to recover files from disks with bad sectors or other corrupted media. Closes https://github.com/rfjakob/gocryptfs/pull/102 . contentenc: catch integer underflow in file size calculation 2017-03-07T19:56:50+00:00 Jakob Unterwurzacher 2017-03-06T22:50:17+00:00 urn:sha1:2f953fdb95f44078895fec9bc4d542cd371126be If you truncate a ciphertext file to 19 bytes, you could get the impression that the plaintext is 18446744073709551585 bytes long, as reported by "ls -l". Fix it by clamping the value to zero. full stack: implement HKDF support 2017-03-05T20:59:55+00:00 Jakob Unterwurzacher 2017-03-05T20:59:55+00:00 urn:sha1:d0bc7970f721cee607d993406d97d32e2c660abe ...but keep it disabled by default for new filesystems. We are still missing an example filesystem and CLI arguments to explicitely enable and disable it. configfile: switch to 128-bit IVs for master key encryption 2017-03-05T17:03:03+00:00 Jakob Unterwurzacher 2017-03-05T17:03:03+00:00 urn:sha1:b7328815183b7a4ff37156085fb78e8e86aff165 There is no security reason for doing this, but it will allow to consolidate the code once we drop compatibility with gocryptfs v1.2 (and earlier) filesystems. Replace all calls to naked panic() with log.Panic() 2016-12-10T10:54:36+00:00 Jakob Unterwurzacher 2016-12-10T10:50:16+00:00 urn:sha1:c9f4400e6dc71a36df5dc9725f52a8968f5f9803 We want all panics to show up in the syslog. fusefrontend: I/O error instead of panic on all-zero nonce 2016-10-28T19:18:36+00:00 Jakob Unterwurzacher 2016-10-28T18:05:57+00:00 urn:sha1:012152f3d1f111541f2fbb4c1e65c91243cd6bde Running xfstests generic/075 on tmpfs often triggered a panic for what seems to be a tmpfs bug. Quoting from the email to lkml, http://www.spinics.net/lists/kernel/msg2370127.html : tmpfs seems to be incorrectly returning 0-bytes when reading from a file that is concurrently being truncated. lint fixes 2016-10-04T21:18:33+00:00 Valient Gough 2016-10-02T04:14:18+00:00 urn:sha1:b764917cd5c1b1d61b8ce08e7af0b29793fbbb80 reverse: use per-purpose nonce generation 2016-09-29T19:56:49+00:00 Jakob Unterwurzacher 2016-09-29T19:29:45+00:00 urn:sha1:a2510efe12d2720399afcd8baea0c6634d4779e6 Also pull all the deterministic nonce code into fusefrontend_reverse to greatly simplify the normal code path. reverse: switch from GCM-SIV to AES-SIV 2016-09-26T21:25:13+00:00 Jakob Unterwurzacher 2016-09-26T21:25:13+00:00 urn:sha1:e9bb8b800c6c724125ccd862f4d20946317b31f5 GCM-SIV is not yet finalized, and the reference implemenation is painfully slow at about 2 MB/s. Switch to AES-SIV.