Other Projects
==============
There are several open-source file encryption solutions available.
This page tries to help to find the right one for your use case:
* [gocryptfs](https://nuetzlich.net/gocryptfs/) (this project), aspiring successor of EncFS
* [EncFS](https://github.com/vgough/encfs), mature with known security issues
* [eCryptFS](http://ecryptfs.org/), integrated into the Linux kernel
* [Cryptomator](https://cryptomator.org/), strong cross-platform support through Java and WebDAV
If you spot an error or want to see a project added, please
[file a ticket](https://github.com/rfjakob/gocryptfs-website)!
Overview
--------
|
gocryptfs |
encfs |
ecryptfs |
cryptomator |
First release |
2015 |
2003 |
2006 |
2014 |
Language |
Go |
C++ |
C |
Java |
License |
MIT |
LGPL/GPL |
GPL |
Apache/BSD/MIT |
File interface |
FUSE |
FUSE |
in-kernel filesystem |
WebDAV |
Platform support |
Linux (help wanted for Mac OS X port) |
Linux, Mac OS X |
Linux only |
Linux, Mac OS X, Windows |
General Security
----------------
| | gocryptfs | encfs default | encfs paranoia | ecryptfs | cryptomator |
| ----------------------- | --------- | ------------- | -------------- | ------------------------------------ | ----------- |
| Documentation available | Yes [1] | Yes [2] | Yes [2] | No [4] | Yes [3] |
| Password hashing | scrypt | PBKDF2 | PBKDF2 | (none, implemented in external tool) | scrypt |
References:
[[1]](security.md)
[[2]](https://github.com/vgough/encfs/blob/master/DESIGN.md)
[[3]](https://cryptomator.org/#security)
[[4]](http://ecryptfs.org/documentation.html) actually, there is a lot of documentation, but none of
it seems to describe the used crypto.
File Contents
-------------
| | gocryptfs | encfs default | encfs paranoia | ecryptfs | cryptomator |
| ---------- | --------- | ------------------------- | ------------------------- | -------- | ------------------ |
| Encryption | GCM | CBC, CFB (last block [1]) | CBC, CFB (last block [1]) | CBC | CTR with random IV |
| Integrity | GCM | none | HMAC | none | HMAC |
References:
[[1]](https://github.com/vgough/encfs/issues/9)
File Names
----------
| | gocryptfs | encfs default | encfs paranoia | ecryptfs | cryptomator |
| -------------------- | --------------------- | -------------------- | -------------------- | -------- | ----------- |
| Encryption | EME | CBC | CBC | CBC | SIV |
| Prefix leak | no (EME) | no (HMAC used as IV) | no (HMAC used as IV) | yes [2] | no (SIV) |
| Identical names leak | no (per-directory IV) | no (path chaining) | no (path chaining) | yes [1] | yes [3] |
| | | | | | |
References:
[[1]](https://gist.github.com/rfjakob/a04364c55b3ee231078d)
[[2]](https://gist.github.com/rfjakob/61a17bf3c7eb9932d791)
[[3]](https://github.com/cryptomator/cryptomator/issues/128)