gocryptfs/internal, branch aegis Mirror of gocryptfs source code on Github http://nuetzlich.net/cgit/gocryptfs/atom?h=aegis 2025-03-12T19:43:23+00:00 Allow 256-bit nonces even if is not useful 2025-03-12T19:43:23+00:00 Frank Denis 2025-03-12T00:09:42+00:00 urn:sha1:11cf965026bff5763f5a425719daa82053cdd8e6 Fix aegis available checks 2025-03-12T19:43:23+00:00 Frank Denis 2025-03-12T00:05:33+00:00 urn:sha1:48c8538a70e7904df0b17685bb2b277fbd92a7ae Rmeove aegis from internal/stupidgcm/doc.go 2025-03-12T19:43:23+00:00 Frank Denis 2025-03-11T23:55:48+00:00 urn:sha1:10e489eca31f631fb68e53f3049de000946f65f6 Move aegis out of stupidgcm 2025-03-12T19:43:23+00:00 Frank Denis 2025-03-11T23:54:35+00:00 urn:sha1:d5d26d75247d4fcc269cd0494cb85c7e62618c89 Revert a few more things 2025-03-12T19:43:23+00:00 Frank Denis 2025-03-11T23:44:56+00:00 urn:sha1:e3e76e275d8edf294a4a64897f44a5ef0b70bfeb Do what @rfjakob asked me to do 2025-03-12T19:43:23+00:00 Frank Denis 2025-03-11T23:32:04+00:00 urn:sha1:3e852eb354f99fb95b399c68d950298b33ed88ab Introduce the EMEKeyLen constant 2025-03-12T19:43:23+00:00 Frank Denis 2025-02-27T23:06:32+00:00 urn:sha1:e9d6fb4b3f16d04fa56a66acad46eafad4f8aba1 Add optional support for AEGIS encryption 2025-03-12T19:43:23+00:00 Frank Denis 2025-02-25T14:03:50+00:00 urn:sha1:779a850e0fb967aac79124c7e18b14706d5f2652 AEGIS is a new family of authenticated encryption algorithms that offers stronger security, higher usage limits, and better performance than AES-GCM. This pull request adds support for a new `-aegis` command-line flag, allowing AEGIS-128X2 to be used as an alternative to AES-GCM on CPUs with AES acceleration. It also introduces the ability to use ciphers with different key sizes. More information on AEGIS is available here: - https://cfrg.github.io/draft-irtf-cfrg-aegis-aead/draft-irtf-cfrg-aegis-aead.html - https://github.com/cfrg/draft-irtf-cfrg-aegis-aead gocryptfs -speed speed on Apple M1: AES-GCM-256-OpenSSL 3718.79 MB/s AES-GCM-256-Go 5083.43 MB/s (selected in auto mode) AES-SIV-512-Go 625.20 MB/s XChaCha20-Poly1305-OpenSSL 1358.63 MB/s (selected in auto mode) XChaCha20-Poly1305-Go 832.11 MB/s Aegis128X2-Go 11818.73 MB/s gocryptfs -speed speed on AMD Zen 4: AES-GCM-256-OpenSSL 5215.86 MB/s AES-GCM-256-Go 6918.01 MB/s (selected in auto mode) AES-SIV-512-Go 449.61 MB/s XChaCha20-Poly1305-OpenSSL 2643.48 MB/s XChaCha20-Poly1305-Go 3727.46 MB/s (selected in auto mode) Aegis128X2-Go 28109.92 MB/s syscallcompat: use our own Setgroups/Setregid/Setreuid wrappers 2025-02-26T20:38:36+00:00 Jakob Unterwurzacher 2025-02-26T20:38:36+00:00 urn:sha1:6b1ba5846b17eec710a70cb6c6bf23e3f2024289 x/sys v0.1.0 (https://github.com/golang/sys/commit/d0df966e6959f00dc1c74363e537872647352d51) breaks our usecase. Switch to our own wrappers. Relates-to: https://github.com/rfjakob/gocryptfs/issues/892 Relates-to: https://github.com/rfjakob/gocryptfs/issues/893 syscallcompat: add docs for Setreuid/Setregid/Setgroups 2025-02-26T20:33:06+00:00 Jakob Unterwurzacher 2025-02-26T20:32:53+00:00 urn:sha1:07b1bd7ce810c83ed622885b65dbba3dab0f7fbb