Age | Commit message (Collapse) | Author | |
---|---|---|---|
2017-03-05 | full stack: implement HKDF support | Jakob Unterwurzacher | |
...but keep it disabled by default for new filesystems. We are still missing an example filesystem and CLI arguments to explicitely enable and disable it. | |||
2017-03-05 | configfile: switch to 128-bit IVs for master key encryption | Jakob Unterwurzacher | |
There is no security reason for doing this, but it will allow to consolidate the code once we drop compatibility with gocryptfs v1.2 (and earlier) filesystems. | |||
2017-03-05 | Drop Go 1.4 compatability code everywhere | Jakob Unterwurzacher | |
Yields a nice reduction in code size. | |||
2017-03-05 | cryptocore: rename "BackendTypeEnum" -> "AEADTypeEnum" | Jakob Unterwurzacher | |
There are two independent backends, one for name encryption, the other one, AEAD, for file content. "BackendTypeEnum" only applies to AEAD (file content), so make that clear in the name. | |||
2017-03-05 | cryptocore: use eme v1.1 interface | Jakob Unterwurzacher | |
Version 1.1 of the EME package (github.com/rfjakob/eme) added a more convenient interface. Use it. Note that you have to upgrade your EME package (go get -u)! | |||
2016-12-10 | Replace all calls to naked panic() with log.Panic() | Jakob Unterwurzacher | |
We want all panics to show up in the syslog. | |||
2016-10-09 | reverse: add panics against API abuse | Jakob Unterwurzacher | |
These should help prevent later programming errors. | |||
2016-10-04 | lint fixes | Valient Gough | |
2016-10-04 | cryptocore: rename "gcm" variable to generic "aeadCipher" | Jakob Unterwurzacher | |
As we now also support AES-SIV the old name is no longer correct. | |||
2016-10-04 | cryptocore: derive 512-bit key for AES-SIV | Jakob Unterwurzacher | |
AES-SIV uses 1/2 of the key for authentication, 1/2 for encryption, so we need a 64-byte key for AES-256. Derive it from the master key by hashing it with SHA-512. | |||
2016-09-26 | reverse: switch from GCM-SIV to AES-SIVv1.1-beta1 | Jakob Unterwurzacher | |
GCM-SIV is not yet finalized, and the reference implemenation is painfully slow at about 2 MB/s. Switch to AES-SIV. | |||
2016-09-25 | contentenc: add GCM-SIV support | Jakob Unterwurzacher | |
Also add ReverseDummyNonce nonce generation. | |||
2016-09-25 | cryptocore: add support for GCM-SIV | Jakob Unterwurzacher | |
2016-07-31 | cryptocore: comment why 96-bit IVs are still supported | Jakob Unterwurzacher | |
2016-07-06 | Add godoc comments to all internal packages | Jakob Unterwurzacher | |
2016-05-04 | stupidgcm: completely replace spacemonkeygo/openssl | Jakob Unterwurzacher | |
2016-05-04 | cryptocore: add API tests | Jakob Unterwurzacher | |