Age | Commit message (Collapse) | Author | |
---|---|---|---|
2015-12-20 | Link to official website; move security document | Jakob Unterwurzacher | |
2015-12-20 | Make build.bash work when called from outside the gocryptfs directory | Jakob Unterwurzacher | |
2015-12-20 | Make build.bash version bake-in compatible with Go 1.3 and 1.4 | Jakob Unterwurzacher | |
2015-12-20 | travis: also build using build.bash | Jakob Unterwurzacher | |
2015-12-20 | travis: also build on Go 1.3.3 | Jakob Unterwurzacher | |
2015-12-20 | Add logo, update README for v0.7v0.7 | Jakob Unterwurzacher | |
2015-12-20 | Update performance data for v0.7 | Jakob Unterwurzacher | |
2015-12-19 | Colorize output | Jakob Unterwurzacher | |
2015-12-19 | Use NewGCMWithNonceSize only through goGCMWrapper to support Go 1.4 | Jakob Unterwurzacher | |
2015-12-19 | Increase GCM IV size from 96 to 128 bits | Jakob Unterwurzacher | |
This pushes back the birthday bound for collisions to make it virtually irrelevant. | |||
2015-12-19 | diriv: handle directory rename over directory | Jakob Unterwurzacher | |
If an empty directory is overwritten we will always get ENOTEMPTY as the "empty" directory will still contain gocryptfs.diriv. Handle that case by removing the target directory and trying again. Fixes issue #10 | |||
2015-12-13 | go fmt | Jakob Unterwurzacher | |
...and minimal comment changes. | |||
2015-12-13 | Handle EINTR returned by Fallocate | Jakob Unterwurzacher | |
Fallocate can return EINTR (interrupted system call) and does so quite often when cpu profiling is enabled. | |||
2015-12-11 | tests: overwrite directory with another directory | Jakob Unterwurzacher | |
Testcase for issue #10 (currently failing) | |||
2015-12-11 | tests: add "gocryptfs -init -plaintextnames" cli testcase | Jakob Unterwurzacher | |
2015-12-11 | Rmdir: handle creating and removing unreadable directories | Jakob Unterwurzacher | |
This patch also splits off Mkdir and Rmdir into its own file. Fixes issue #8, thanks to @diseq for the bug report. | |||
2015-12-10 | Wrap NewGCMWithNonceSize() to enable compilation on Go 1.4 | Jakob Unterwurzacher | |
2015-12-10 | tests: test read-write directory operations on all example filesystems | Jakob Unterwurzacher | |
2015-12-10 | tests: add v0.6-plaintextnames example filesystem | Jakob Unterwurzacher | |
2015-12-10 | Simplify CreateConfFile: do not allow specification of EMENames | Jakob Unterwurzacher | |
2015-12-10 | Add missing PlaintextNames checks in OpenDir, Mkdir, Rmdir, initDir | Jakob Unterwurzacher | |
Plaintextnames support has bitrotted during the DirIV additions, this needs test cases. Will be added in a future patch. Fixes issue #9. | |||
2015-12-08 | travis ci: do not build on go 1.4.3 | Jakob Unterwurzacher | |
Go 1.4.3 seems to be missing cipher.NewGCMWithNonceSize. Error: cryptfs/openssl_test.go:23: undefined: cipher.NewGCMWithNonceSize | |||
2015-12-08 | README: fix typo | Jakob Unterwurzacher | |
2015-12-08 | Update README + docs for v0.6 releasev0.6 | Jakob Unterwurzacher | |
2015-12-08 | tests: add v0.6 example filesystem with EME | Jakob Unterwurzacher | |
2015-12-08 | Add EME filename encryption & enable it by default | Jakob Unterwurzacher | |
2015-12-08 | go fmt | Jakob Unterwurzacher | |
2015-12-08 | opensslGCM: preallocate buffer space, improves performance by 11% | Jakob Unterwurzacher | |
Results of cryptfs/openssl_benchmark.bash : Before: BenchmarkEnc_OpenSSL_4k_AES256_nonce96-2 50000 31802 ns/op 127.28 MB/s BenchmarkEnc_OpenSSL_4k_AES256_nonce128-2 50000 32110 ns/op 126.06 MB/s After: BenchmarkEnc_OpenSSL_4k_AES256_nonce96-2 50000 28612 ns/op 141.47 MB/s BenchmarkEnc_OpenSSL_4k_AES256_nonce128-2 50000 28613 ns/op 141.47 MB/s | |||
2015-12-08 | tests: add encryption benchmarks to cryptfs | Jakob Unterwurzacher | |
2015-12-06 | Update READMEv0.5.1 | Jakob Unterwurzacher | |
gocryptfs is no longer developed in gocryptfs because of the inconvenience that you cannot mount a FUSE filesystem inside a FUSE mount | |||
2015-12-06 | tests: add TestRename | Jakob Unterwurzacher | |
2015-12-06 | fallocate the space needed for the file header beforehand | Jakob Unterwurzacher | |
This makes sure writing to a file fails early if the underlying filesystem does not support fallocate. It also prevents partial header write due to ENOSPC. | |||
2015-12-06 | Fix rename, was broken broken by DirIV introduction | Jakob Unterwurzacher | |
As it was, CIPHERDIR was prepended twice, causing every rename to fail with ENOENT. | |||
2015-12-06 | tests: recreate v0.5 example filesystems with -scryptn=10 | Jakob Unterwurzacher | |
Cuts the mount time in half, from 0.788s to 0.321s. | |||
2015-12-06 | init: create gocryptfs.diriv after creating gocryptfs.conf | Jakob Unterwurzacher | |
Creating the config file can fail easily, for example if the password is not entered the same twice. This would leave an orphaned gocryptfs.diriv behind. | |||
2015-12-04 | performance.txt: link to linux-3.0.tar.gz | Jakob Unterwurzacher | |
2015-12-04 | Update manpage with -diriv and -scryptnv0.5 | Jakob Unterwurzacher | |
2015-12-04 | Show base64 encoding in filename encryption svg | Jakob Unterwurzacher | |
2015-12-02 | svg: add colored annotations | Jakob Unterwurzacher | |
Also, show the IV in the master key decryption process | |||
2015-12-01 | Cut down the text in SECURITY.md, add graphs | Jakob Unterwurzacher | |
2015-12-01 | Add svgs explaining the encryption steps | Jakob Unterwurzacher | |
2015-12-01 | Make sure MANPAGE-render.bash works when called from outside Documentation | Jakob Unterwurzacher | |
2015-12-01 | Move docs to Documentation folder | Jakob Unterwurzacher | |
2015-11-29 | Update README and SECURITY documents | Jakob Unterwurzacher | |
2015-11-29 | Run go fmt | Jakob Unterwurzacher | |
2015-11-29 | Add single-element cache for DirIV lookup | Jakob Unterwurzacher | |
Another 3x performance boost for applications that walk the directory tree. Excerpt from performance.txt: VERSION UNTAR LS RM v0.4 48 1.5 5 v0.5-rc1 56 7 19 v0.5-rc1-1 54 4.1 9 v0.5-rc1-2 45 1.7 3.4 <---- THIS VERSION | |||
2015-11-29 | OpenDir performance: Read DirIV once and reuse it for all names | Jakob Unterwurzacher | |
Formerly, we called decryptPath for every name. That resulted in a directory walk that reads in all diriv files on the way. Massive improvement for RM and LS (check performance.txt for details) VERSION UNTAR RM LS v0.4 48 5 1.5 v0.5-rc1 56 19 7 v0.5-rc1-1 54 9 4.1 <---- THIS VERSION | |||
2015-11-29 | Handle all operations except mounting without forking a child | Jakob Unterwurzacher | |
This saves 170ms for each start (why do we take 170ms to start up?) and cuts down test time by 2 seconds. | |||
2015-11-29 | Add "-scryptn" option that sets the cost parameter for scryptv0.5-rc1 | Jakob Unterwurzacher | |
Use that option to speed up the automated tests by 7 seconds. Before: ok github.com/rfjakob/gocryptfs/integration_tests 26.667s After: ok github.com/rfjakob/gocryptfs/integration_tests 19.534s | |||
2015-11-29 | tests: add scrypt benchmark | Jakob Unterwurzacher | |
Times the impact of the parameter "N" to scrypt. Results on a 2.7GHz Pentium G630: gocryptfs/cryptfs$ go test -bench=. PASS BenchmarkScrypt10-2 300 6021435 ns/op ... 6ms BenchmarkScrypt11-2 100 11861460 ns/op BenchmarkScrypt12-2 100 23420822 ns/op BenchmarkScrypt13-2 30 47666518 ns/op BenchmarkScrypt14-2 20 92561590 ns/op ... 92ms BenchmarkScrypt15-2 10 183971593 ns/op BenchmarkScrypt16-2 3 368506365 ns/op BenchmarkScrypt17-2 2 755502608 ns/op ... 755ms ok github.com/rfjakob/gocryptfs/cryptfs 18.772s |