gocryptfs/internal/contentenc, branch v1.4.2 Mirror of gocryptfs source code on Github http://nuetzlich.net/cgit/gocryptfs/atom?h=v1.4.2 2017-10-19T07:23:10+00:00 contentenc: reserve one additional block in CReqPool 2017-10-19T07:23:10+00:00 Jakob Unterwurzacher 2017-10-19T07:23:10+00:00 urn:sha1:29445c976d200f6e734eae56d9665fd4098f0a43 ...to account for unaligned reads. I have not seen this happen in the wild because the kernel always seems to issue 4k-aligned requests. But the cost of the additional block in the pool is low and prevents a buffer overrun panic when an unaligned read does happen. fusefrontend: clamp oversized reads 2017-10-17T19:48:29+00:00 Jakob Unterwurzacher 2017-10-17T19:47:32+00:00 urn:sha1:3009ec9852316c3c696f77f476390ab5a6d8d6d7 Our byte cache pools are sized acc. to MAX_KERNEL_WRITE, but the running kernel may have a higher limit set. Clamp to what we can handle. Fixes a panic on a Synology NAS reported at https://github.com/rfjakob/gocryptfs/issues/145 contentenc: deduplicate AD packing into new concatAD() func 2017-09-17T09:21:48+00:00 Jakob Unterwurzacher 2017-09-17T09:21:48+00:00 urn:sha1:885fdcabdacb2d53829e7f96f4c600df0a3e282d The encrypt and decrypt path both had a copy that were equivalent but ordered differently, which was confusing. Consolidate it in a new dedicated function. contentenc: DecryptBlocks: give block number counter a clearer name 2017-09-17T08:59:04+00:00 Jakob Unterwurzacher 2017-09-17T08:59:04+00:00 urn:sha1:4bd2c6736afbe20d6aa7d94758082d8c8752af4b Using firstBlockNo as the counter is confusing, create a copy named "blockNo" and use that. Fix misspellings reported by goreportcard.com 2017-08-21T19:06:05+00:00 Jakob Unterwurzacher 2017-08-21T19:06:05+00:00 urn:sha1:ed046aa35978c835d79f9cb3ee359349ee9145c5 https://goreportcard.com/report/github.com/rfjakob/gocryptfs#misspell macos: make testing without openssl work properly 2017-07-14T21:22:15+00:00 Jakob Unterwurzacher 2017-07-14T21:22:15+00:00 urn:sha1:ccf1a84e417e9f7d83f31c61c44cf3851703b1e4 On MacOS, building and testing without openssl is much easier. The tests should skip tests that fail because of missing openssl instead of aborting. Fixes https://github.com/rfjakob/gocryptfs/issues/123 contentenc: MergeBlocks: short-circuit the trivial case 2017-07-02T14:23:24+00:00 Jakob Unterwurzacher 2017-07-02T14:07:20+00:00 urn:sha1:b6bda01c33d27afa1df6bdc2dc9f3e352cc8d16d Saves 3% for the tar extract benchmark because we skip the allocation. contentenc: add PReqPool and use it in DecryptBlocks 2017-06-30T21:30:57+00:00 Jakob Unterwurzacher 2017-06-30T21:30:57+00:00 urn:sha1:12c0101a232928e8969f23235ca45506e743d547 This gets us a massive speed boost in streaming reads. contentenc: add safer "bPool" pool variant; add pBlockPool 2017-06-29T21:44:32+00:00 Jakob Unterwurzacher 2017-06-29T20:05:23+00:00 urn:sha1:80676c685fe2b52ce0c48a7d9d922895d0c583b8 bPool verifies the lengths of slices going in and out. Also, add a plaintext block pool - pBlockPool - and use it for decryption. contentenc: use sync.Pool memory pools for encryption 2017-06-20T19:22:00+00:00 Jakob Unterwurzacher 2017-06-20T19:22:00+00:00 urn:sha1:3c6fe98eb1e5dada2613664182ead18be9e68819 We use two levels of buffers: 1) 4kiB+overhead for each ciphertext block 2) 128kiB+overhead for each FUSE write (32 ciphertext blocks) This commit adds a sync.Pool for both levels. The memory-efficiency for small writes could be improved, as we now always use a 128kiB buffer.