gocryptfs/internal/nametransform, branch aegis Mirror of gocryptfs source code on Github http://nuetzlich.net/cgit/gocryptfs/atom?h=aegis 2025-03-12T19:43:23+00:00 Do what @rfjakob asked me to do 2025-03-12T19:43:23+00:00 Frank Denis 2025-03-11T23:32:04+00:00 urn:sha1:3e852eb354f99fb95b399c68d950298b33ed88ab Add optional support for AEGIS encryption 2025-03-12T19:43:23+00:00 Frank Denis 2025-02-25T14:03:50+00:00 urn:sha1:779a850e0fb967aac79124c7e18b14706d5f2652 AEGIS is a new family of authenticated encryption algorithms that offers stronger security, higher usage limits, and better performance than AES-GCM. This pull request adds support for a new `-aegis` command-line flag, allowing AEGIS-128X2 to be used as an alternative to AES-GCM on CPUs with AES acceleration. It also introduces the ability to use ciphers with different key sizes. More information on AEGIS is available here: - https://cfrg.github.io/draft-irtf-cfrg-aegis-aead/draft-irtf-cfrg-aegis-aead.html - https://github.com/cfrg/draft-irtf-cfrg-aegis-aead gocryptfs -speed speed on Apple M1: AES-GCM-256-OpenSSL 3718.79 MB/s AES-GCM-256-Go 5083.43 MB/s (selected in auto mode) AES-SIV-512-Go 625.20 MB/s XChaCha20-Poly1305-OpenSSL 1358.63 MB/s (selected in auto mode) XChaCha20-Poly1305-Go 832.11 MB/s Aegis128X2-Go 11818.73 MB/s gocryptfs -speed speed on AMD Zen 4: AES-GCM-256-OpenSSL 5215.86 MB/s AES-GCM-256-Go 6918.01 MB/s (selected in auto mode) AES-SIV-512-Go 449.61 MB/s XChaCha20-Poly1305-OpenSSL 2643.48 MB/s XChaCha20-Poly1305-Go 3727.46 MB/s (selected in auto mode) Aegis128X2-Go 28109.92 MB/s nametransform: reject non-canonical base64 2023-09-15T20:29:07+00:00 Jakob Unterwurzacher 2023-07-21T17:31:38+00:00 urn:sha1:7fff33a1e2560c8f4eb1f477c1e220eeb14291ab The test added in the earlier commit passes with this change. make format 2022-08-28T09:11:36+00:00 Jakob Unterwurzacher 2022-08-28T09:11:36+00:00 urn:sha1:003a7fa2e53ac15d2c94a34102ae12b69b23c586 Add comment to pass Codacy Static Code Analysis 2022-08-28T09:09:06+00:00 NekoGirlSAIKOU 2022-04-25T13:27:08+00:00 urn:sha1:4808adc761783e93d6b6d91a9ed4727089f66688 Fix invalid -longnamemax for reverse mode 2022-08-28T09:09:01+00:00 NekoGirlSAIKOU 2022-04-24T17:35:30+00:00 urn:sha1:1bff80b46cf3cdd2d6934ebf905fca96dde7af97 Fix typos 2022-06-26T08:59:06+00:00 Yuta Hayashibe 2022-05-04T09:06:20+00:00 urn:sha1:e9ecff7f07aeb1efe0edec7b4b050ce3c0ef75f8 nametransform: fix oversight in comment 2021-12-19T13:50:52+00:00 Jakob Unterwurzacher 2021-12-19T13:50:52+00:00 urn:sha1:5749e70c7cc4365d6de6a4d5afb73d71d0c10003 fusefrontend: allow slashes in xattr names 2021-12-19T13:43:56+00:00 Jakob Unterwurzacher 2021-12-19T13:43:56+00:00 urn:sha1:64be5de75f42e415198ff5e77de509680b69e0e1 xattr names have fewer restrictions than file names, relax the validation. Fixes https://github.com/rfjakob/gocryptfs/issues/627 nametransform: fix math.MaxInt build failure on older Go 2021-10-21T14:44:05+00:00 Jakob Unterwurzacher 2021-10-21T14:42:00+00:00 urn:sha1:87a6bb370acc3690e89a8b0d5109fcb0dab0a374 Failure is: # github.com/rfjakob/gocryptfs/v2/internal/nametransform internal/nametransform/names.go:47:33: undefined: math.MaxInt math.MaxInt was only introduced in Go 1.17. Use MaxInt32 instead, which is good enough, even on amd64. It only has to be larger than any name we might encounter.