summaryrefslogtreecommitdiff
path: root/SECURITY.md
diff options
context:
space:
mode:
authorJakob Unterwurzacher2015-11-29 22:36:25 +0100
committerJakob Unterwurzacher2015-11-29 22:36:25 +0100
commitcbb18380bee538f3b1f26e3588857bcdf8a1b964 (patch)
tree1a6ac3a5ea5146ad29a6a7890b81da3fea2d5a7c /SECURITY.md
parentce42a6f23d9fd50ddf2e66a68e6ec57cad80c018 (diff)
Update README and SECURITY documents
Diffstat (limited to 'SECURITY.md')
-rw-r--r--SECURITY.md13
1 files changed, 6 insertions, 7 deletions
diff --git a/SECURITY.md b/SECURITY.md
index 2e6f3f4..4db4c24 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -22,21 +22,20 @@ encrypted data unless you know the key.
### File Names
-* File names are encrypted using AES-256-CBC because it is robust even
- without using an IV
-* The file names are padded to multiples of 16 bytes
+* File names are encrypted using AES-256-CBC with a per-directory IV
+* Each directory get a random 128 bit IV on creation
+ * Files with the same name in different directories are encrypted to
+ different filenames and can not be identified
+* File names are padded to multiples of 16 bytes
* This means that the exact length of the name is hidden, only length
ranges (1-16 bytes, 17-32 bytes etc.) can be determined from the encrypted
files
-* For technical reasons, no IV is used
- * This means that files with the same name within one gocryptfs filesystem
- always get the same encrypted name
### Metadata
* The size of the file is not hidden. The exact file size can be calculated
from the size of the encrypted file.
-* File owner, file permissions and timestamps are not hidden either
+* File owner, file permissions and timestamps are not hidden.
Integrity
---------