gocryptfs - Mirror of gocryptfs source code on Github

Age	Commit message (Collapse)	Author
2015-12-10	Simplify CreateConfFile: do not allow specification of EMENames	Jakob Unterwurzacher

2015-12-08	Add EME filename encryption & enable it by default	Jakob Unterwurzacher

2015-11-29	Add "-scryptn" option that sets the cost parameter for scryptv0.5-rc1	Jakob Unterwurzacher
	Use that option to speed up the automated tests by 7 seconds. Before: ok github.com/rfjakob/gocryptfs/integration_tests 26.667s After: ok github.com/rfjakob/gocryptfs/integration_tests 19.534s
2015-11-28	diriv: use "DirIV" flag to discern and support mounting old filesystems	Jakob Unterwurzacher

2015-11-27	diriv: Define "DirIV" feature flag	Jakob Unterwurzacher
	(unused so far)
2015-11-25	Tighten file permissions on gocryptfs.conf	Jakob Unterwurzacher
	This file should only be readable by the owner and never be written to.
2015-11-14	Run go fmt and go vet	Jakob Unterwurzacher

2015-11-03	config: Introduce ext4-style feature flags	Jakob Unterwurzacher
	// List of feature flags this filesystem has enabled. // If gocryptfs encounters a feature flag it does not support, it will refuse // mounting. This mechanism is analogous to the ext4 feature flags that are // stored in the superblock. FeatureFlags []string
2015-11-03	Implement PlainTextNames mode	Jakob Unterwurzacher
	Also, forbid access to "gocryptfs.conf" in the root dir.
2015-11-02	Add "--plaintextnames" option	Jakob Unterwurzacher
	Also, gather all the command line arguments into an anonymous struct "args".
2015-11-01	Refactor ciphertext <-> plaintext offset translation functions	Jakob Unterwurzacher
	Move all the intelligence into the new file address_translation.go. That the calculations were spread out too much became apparent when adding the file header. This should make the code much easier to modify in the future.
2015-11-01	Add file header (on-disk-format change)	Jakob Unterwurzacher
	Format: [ "Version" uint16 big endian ] [ "Id" 16 random bytes ] Quoting SECURITY.md: * Every file has a header that contains a 16-byte random file id * Each block uses the file id and its block number as GCM authentication data * This means the position of the blocks is protected as well. The blocks can not be reordered or copied between different files without causing an decryption error.
2015-10-11	main: check directories for existence early	Jakob Unterwurzacher
	This prevents that the user enters the password only to get an error later.
2015-10-07	Implement "gocryptfs --passwd" (pasword changing)	Jakob Unterwurzacher

2015-10-06	Use block number as authentication data	Jakob Unterwurzacher

2015-10-04	Run go fmt	Jakob Unterwurzacher

2015-09-14	Use MarshalIndent for JSON generation	Jakob Unterwurzacher

2015-09-13	Encrypt key with scrypt-hashed password	Jakob Unterwurzacher

2015-09-13	Implement json config storage (not yet encrypted)	Jakob Unterwurzacher