diff options
author | Jakob Unterwurzacher | 2021-08-20 15:57:40 +0200 |
---|---|---|
committer | Jakob Unterwurzacher | 2021-08-20 15:57:40 +0200 |
commit | 2a9dea2973a6141e8efdf8bd26d8ddb2d2c35fc4 (patch) | |
tree | 3af78126e573b5a9963111c1bdea6f8d1100fbd1 /Documentation | |
parent | 195d9d18a90d88ff2cb0530d832c59d98934fd1f (diff) |
-deterministic-names: accept flag on -init
And store it in gocryptfs.conf (=remove DirIV feature flag).
Diffstat (limited to 'Documentation')
-rw-r--r-- | Documentation/MANPAGE.md | 13 |
1 files changed, 8 insertions, 5 deletions
diff --git a/Documentation/MANPAGE.md b/Documentation/MANPAGE.md index 07f063e..ab9f872 100644 --- a/Documentation/MANPAGE.md +++ b/Documentation/MANPAGE.md @@ -103,6 +103,14 @@ Defaults are fine. Use the AES-SIV encryption mode. This is slower than GCM but is secure with deterministic nonces as used in "-reverse" mode. +#### -deterministic-names +Disable file name randomisation and creation of `gocryptfs.diriv` files. +This can prevent sync conflicts conflicts when synchronising files, but +leaks information about identical file names across directories +("Identical names leak" in https://nuetzlich.net/gocryptfs/comparison/#file-names ). + +The resulting `gocryptfs.conf` has "DirIV" missing from "FeatureFlags". + #### -devrandom Use `/dev/random` for generating the master key instead of the default Go implementation. This is especially useful on embedded systems with Go versions @@ -545,11 +553,6 @@ useful in regression testing. Applies to: all actions. -#### -zerodiriv -Create diriv as all-zero files - -Applies to: all actions without `-plaintextnames`. - #### \-\- Stop option parsing. Helpful when CIPHERDIR may start with a dash "-". |