Other Projects ============== There are several open-source file encryption solutions available. This page tries to help to find the right one for your use case: * [gocryptfs](https://nuetzlich.net/gocryptfs/) (this project), aspiring successor of EncFS * [EncFS](https://github.com/vgough/encfs), mature with known security issues * [eCryptFS](http://ecryptfs.org/), integrated into the Linux kernel * [Cryptomator](https://cryptomator.org/), strong cross-platform support through Java and WebDAV If you spot an error or want to see a project added, please [file a ticket](https://github.com/rfjakob/gocryptfs-website)! Overview --------
gocryptfs encfs ecryptfs cryptomator
First release 2015 2003 2006 2014
Language Go C++ C Java
License MIT LGPL/GPL GPL Apache/BSD/MIT
File interface FUSE FUSE in-kernel filesystem WebDAV
Platform support Linux (help wanted for Mac OS X port) Linux, Mac OS X Linux only Linux, Mac OS X, Windows
General Security ---------------- | | gocryptfs | encfs default | encfs paranoia | ecryptfs | cryptomator | | ----------------------- | --------- | ------------- | -------------- | ------------------------------------ | ----------- | | Documentation available | Yes [1] | Yes [2] | Yes [2] | No [4] | Yes [3] | | Password hashing | scrypt | PBKDF2 | PBKDF2 | (none, implemented in external tool) | scrypt | References: [[1]](security.md) [[2]](https://github.com/vgough/encfs/blob/master/DESIGN.md) [[3]](https://cryptomator.org/#security) [[4]](http://ecryptfs.org/documentation.html) actually, there is a lot of documentation, but none of it seems to describe the used crypto. File Contents ------------- | | gocryptfs | encfs default | encfs paranoia | ecryptfs | cryptomator | | ---------- | --------- | ------------------------- | ------------------------- | -------- | ------------------ | | Encryption | GCM | CBC, CFB (last block [1]) | CBC, CFB (last block [1]) | CBC | CTR with random IV | | Integrity | GCM | none | HMAC | none | HMAC | References: [[1]](https://github.com/vgough/encfs/issues/9) File Names ---------- | | gocryptfs | encfs default | encfs paranoia | ecryptfs | cryptomator | | -------------------- | --------------------- | -------------------- | -------------------- | -------- | ----------- | | Encryption | EME | CBC | CBC | CBC | SIV | | Prefix leak | no (EME) | no (HMAC used as IV) | no (HMAC used as IV) | yes [2] | no (SIV) | | Identical names leak | no (per-directory IV) | no (path chaining) | no (path chaining) | yes [1] | yes [3] | | | | | | | | References: [[1]](https://gist.github.com/rfjakob/a04364c55b3ee231078d) [[2]](https://gist.github.com/rfjakob/61a17bf3c7eb9932d791) [[3]](https://github.com/cryptomator/cryptomator/issues/128)