Age | Commit message (Collapse) | Author | |
---|---|---|---|
2015-12-19 | Increase GCM IV size from 96 to 128 bits | Jakob Unterwurzacher | |
This pushes back the birthday bound for collisions to make it virtually irrelevant. | |||
2015-12-10 | Simplify CreateConfFile: do not allow specification of EMENames | Jakob Unterwurzacher | |
2015-12-08 | Add EME filename encryption & enable it by default | Jakob Unterwurzacher | |
2015-11-29 | Add "-scryptn" option that sets the cost parameter for scryptv0.5-rc1 | Jakob Unterwurzacher | |
Use that option to speed up the automated tests by 7 seconds. Before: ok github.com/rfjakob/gocryptfs/integration_tests 26.667s After: ok github.com/rfjakob/gocryptfs/integration_tests 19.534s | |||
2015-11-28 | diriv: use "DirIV" flag to discern and support mounting old filesystems | Jakob Unterwurzacher | |
2015-11-27 | diriv: Define "DirIV" feature flag | Jakob Unterwurzacher | |
(unused so far) | |||
2015-11-25 | Tighten file permissions on gocryptfs.conf | Jakob Unterwurzacher | |
This file should only be readable by the owner and never be written to. | |||
2015-11-14 | Run go fmt and go vet | Jakob Unterwurzacher | |
2015-11-03 | config: Introduce ext4-style feature flags | Jakob Unterwurzacher | |
// List of feature flags this filesystem has enabled. // If gocryptfs encounters a feature flag it does not support, it will refuse // mounting. This mechanism is analogous to the ext4 feature flags that are // stored in the superblock. FeatureFlags []string | |||
2015-11-03 | Implement PlainTextNames mode | Jakob Unterwurzacher | |
Also, forbid access to "gocryptfs.conf" in the root dir. | |||
2015-11-02 | Add "--plaintextnames" option | Jakob Unterwurzacher | |
Also, gather all the command line arguments into an anonymous struct "args". | |||
2015-11-01 | Refactor ciphertext <-> plaintext offset translation functions | Jakob Unterwurzacher | |
Move all the intelligence into the new file address_translation.go. That the calculations were spread out too much became apparent when adding the file header. This should make the code much easier to modify in the future. | |||
2015-11-01 | Add file header (on-disk-format change) | Jakob Unterwurzacher | |
Format: [ "Version" uint16 big endian ] [ "Id" 16 random bytes ] Quoting SECURITY.md: * Every file has a header that contains a 16-byte random *file id* * Each block uses the file id and its block number as GCM *authentication data* * This means the position of the blocks is protected as well. The blocks can not be reordered or copied between different files without causing an decryption error. | |||
2015-10-11 | main: check directories for existence early | Jakob Unterwurzacher | |
This prevents that the user enters the password only to get an error later. | |||
2015-10-07 | Implement "gocryptfs --passwd" (pasword changing) | Jakob Unterwurzacher | |
2015-10-06 | Use block number as authentication data | Jakob Unterwurzacher | |
2015-10-04 | Run go fmt | Jakob Unterwurzacher | |
2015-09-14 | Use MarshalIndent for JSON generation | Jakob Unterwurzacher | |
2015-09-13 | Encrypt key with scrypt-hashed password | Jakob Unterwurzacher | |
2015-09-13 | Implement json config storage (not yet encrypted) | Jakob Unterwurzacher | |