gocryptfs - Mirror of gocryptfs source code on Github

Age	Commit message (Collapse)	Author
2018-02-18	main: overwrite keys and let them run out of scope	Jakob Unterwurzacher
	As soon as we don't need them anymore, overwrite keys with zeros. Make sure they run out of scope so we don't create a risk of inadvertedly using all-zero keys for encryption. https://github.com/rfjakob/gocryptfs/issues/211
2017-11-29	fusefrontend: allow_other: close race between mkdir and chown	Sebastian Lackner
	Fixes the same problem as described in 72b975867a3b9bdf53fc2da62e2ba4a328d7e4ab, except for directories instead of device nodes.
2017-11-21	main: Add '-devrandom' commandline option	Sebastian Lackner
	Allows to use /dev/random for generating the master key instead of the default Go implementation. When the kernel random generator has been properly initialized both are considered equally secure, however: * Versions of Go prior to 1.9 just fall back to /dev/urandom if the getrandom() syscall would be blocking (Go Bug #19274) * Kernel versions prior to 3.17 do not support getrandom(), and there is no check if the random generator has been properly initialized before reading from /dev/urandom This is especially useful for embedded hardware with low-entroy. Please note that generation of the master key might block indefinitely if the kernel cannot harvest enough entropy.
2017-05-14	exitcodes: specific codes for failure to read or write gocryptfs.conf	Jakob Unterwurzacher
	New codes: * OpenConf = 23 * WriteConf = 24
2017-05-07	exitcodes: pull all exit code definitions into the package	Jakob Unterwurzacher
	This commit defines all exit codes in one place in the exitcodes package. Also, it adds a test to verify the exit code on incorrect password, which is what SiriKali cares about the most. Fixes https://github.com/rfjakob/gocryptfs/issues/77 .
2017-03-05	configfile: switch on Raw64 by default	Jakob Unterwurzacher
	As we have dropped Go 1.4 compatibility already, and will add a new feature flag for gocryptfs v1.3 anyway, this is a good time to enable Raw64 as well.
2017-02-12	Check for trailing garbage after the password	Jakob Unterwurzacher
	From the comment: // CheckTrailingGarbage tries to read one byte from stdin and exits with a // fatal error if the read returns any data. // This is meant to be called after reading the password, when there is no more // data expected. This helps to catch problems with third-party tools that // interface with gocryptfs.
2016-11-01	Add support for unpadded base64 filenames, "-raw64"	Jakob Unterwurzacher
	Through base64.RawURLEncoding. New command-line parameter "-raw64".
2016-10-09	main: init: handle spaces in mount suggestion message	Jakob Unterwurzacher
	Before: You can now mount it using: gocryptfs a x MOUNTPOINT After: You can now mount it using: gocryptfs "a x" MOUNTPOINT This is still not bulletproof but should handle the common case of having a space in the directory name. After all, it's only a suggestion.
2016-10-04	lint fixes	Valient Gough

2016-09-28	main: get rid of duplicate "extpass" message	Jakob Unterwurzacher
	$ gocryptfs -init -extpass "echo test" a Using password provided via -extpass. <<< DUPLICATE Reading password from extpass program The gocryptfs filesystem has been created successfully. You can now mount it using: gocryptfs a MOUNTPOINT
2016-09-26	reverse: switch from GCM-SIV to AES-SIVv1.1-beta1	Jakob Unterwurzacher
	GCM-SIV is not yet finalized, and the reference implemenation is painfully slow at about 2 MB/s. Switch to AES-SIV.
2016-09-25	reverse: add gcmsiv flag and associated tests	Jakob Unterwurzacher

2016-09-25	contentenc: add GCM-SIV support	Jakob Unterwurzacher
	Also add ReverseDummyNonce nonce generation.
2016-09-25	main: init: refuse overwriting .gocryptfs.reverse.conf	Jakob Unterwurzacher

2016-09-25	reverse: enable init functionality	Jakob Unterwurzacher

2016-09-25	main: move initDir into its own file	Jakob Unterwurzacher