diff options
| author | Jakob Unterwurzacher | 2017-03-05 21:59:55 +0100 |
|---|---|---|
| committer | Jakob Unterwurzacher | 2017-03-05 21:59:55 +0100 |
| commit | d0bc7970f721cee607d993406d97d32e2c660abe (patch) | |
| tree | 894b016af6e7785bb707e3d2e0f660608ceeea06 /internal/fusefrontend_reverse | |
| parent | 4fadcbaf68ce25dcdc7665059f43226f5f9a4da5 (diff) | |
full stack: implement HKDF support
...but keep it disabled by default for new filesystems.
We are still missing an example filesystem and CLI arguments
to explicitely enable and disable it.
Diffstat (limited to 'internal/fusefrontend_reverse')
| -rw-r--r-- | internal/fusefrontend_reverse/rfs.go | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/internal/fusefrontend_reverse/rfs.go b/internal/fusefrontend_reverse/rfs.go index 55431b6..1bcbe45 100644 --- a/internal/fusefrontend_reverse/rfs.go +++ b/internal/fusefrontend_reverse/rfs.go @@ -57,7 +57,7 @@ func NewFS(args fusefrontend.Args) *ReverseFS { log.Panic("reverse mode must use AES-SIV, everything else is insecure") } initLongnameCache() - cryptoCore := cryptocore.New(args.Masterkey, args.CryptoBackend, contentenc.DefaultIVBits) + cryptoCore := cryptocore.New(args.Masterkey, args.CryptoBackend, contentenc.DefaultIVBits, args.HKDF) contentEnc := contentenc.New(cryptoCore, contentenc.DefaultBS) nameTransform := nametransform.New(cryptoCore.EMECipher, args.LongNames, args.Raw64) |