gocryptfs - Mirror of gocryptfs source code on Github

Age	Commit message (Collapse)	Author
8 days	Do what @rfjakob asked me to do	Frank Denis

8 days	Add optional support for AEGIS encryption	Frank Denis
	AEGIS is a new family of authenticated encryption algorithms that offers stronger security, higher usage limits, and better performance than AES-GCM. This pull request adds support for a new `-aegis` command-line flag, allowing AEGIS-128X2 to be used as an alternative to AES-GCM on CPUs with AES acceleration. It also introduces the ability to use ciphers with different key sizes. More information on AEGIS is available here: - https://cfrg.github.io/draft-irtf-cfrg-aegis-aead/draft-irtf-cfrg-aegis-aead.html - https://github.com/cfrg/draft-irtf-cfrg-aegis-aead gocryptfs -speed speed on Apple M1: AES-GCM-256-OpenSSL 3718.79 MB/s AES-GCM-256-Go 5083.43 MB/s (selected in auto mode) AES-SIV-512-Go 625.20 MB/s XChaCha20-Poly1305-OpenSSL 1358.63 MB/s (selected in auto mode) XChaCha20-Poly1305-Go 832.11 MB/s Aegis128X2-Go 11818.73 MB/s gocryptfs -speed speed on AMD Zen 4: AES-GCM-256-OpenSSL 5215.86 MB/s AES-GCM-256-Go 6918.01 MB/s (selected in auto mode) AES-SIV-512-Go 449.61 MB/s XChaCha20-Poly1305-OpenSSL 2643.48 MB/s XChaCha20-Poly1305-Go 3727.46 MB/s (selected in auto mode) Aegis128X2-Go 28109.92 MB/s
2021-10-21	nametransform: add longNameMax parameter	Jakob Unterwurzacher
	Determines when to start hashing long names instead of hardcoded 255. Will be used to alleviate "name too long" issues some users see on cloud storage. https://github.com/rfjakob/gocryptfs/issues/499
2021-09-10	cli: drop -forcedecode flag	Jakob Unterwurzacher
	The rewritten openssl backend does not support this flag anymore, and it was inherently dangerour. Drop it (ignored for compatibility)
2021-08-23	go mod: declare module version v2	Jakob Unterwurzacher
	Our git version is v2+ for some time now, but go.mod still declared v1. Hopefully making both match makes https://pkg.go.dev/github.com/rfjakob/gocryptfs/v2 work. All the import paths have been fixed like this: find . -name \*.go \| xargs sed -i s%github.com/rfjakob/gocryptfs/%github.com/rfjakob/gocryptfs/v2/%
2021-08-20	Implement -deterministic-names: extended -zerodiriv	Jakob Unterwurzacher
	-deterministc-names uses all-zero dirivs but does not write them to disk anymore.
2021-06-20	nametransform: pass badname patterns via New	Jakob Unterwurzacher
	This means we can unexport the field.
2021-06-02	nametransform: check name validity on encryption	Jakob Unterwurzacher
	xfstests generic/523 discovered that we allowed to set xattrs with "/" in the name, but did not allow to read them later. With this change we do not allow to set them in the first place.
2020-07-14	v2api: implement Getxattr, Setxattr, Removexattr, Listxattr	Jakob Unterwurzacher
	gocryptfs/tests/xattr passes.
2020-07-11	v2api: fix TestOpenBackingDir	Jakob Unterwurzacher

2019-01-01	fusefrontend: make openBackingDir() symlink-safe	Jakob Unterwurzacher
	openBackingDir() used encryptPath(), which is not symlink-safe itself. Drop encryptPath() and implement our own directory walk. Adds three seconds to untar and two seconds to rm: $ ./benchmark.bash Testing gocryptfs at /tmp/benchmark.bash.MzG: gocryptfs v1.6-36-g8fb3c2f-dirty; go-fuse v20170619-66-g6df8ddc; 2018-10-14 go1.11 WRITE: 262144000 bytes (262 MB, 250 MiB) copied, 1.25078 s, 210 MB/s READ: 262144000 bytes (262 MB, 250 MiB) copied, 1.0318 s, 254 MB/s UNTAR: 20.941 MD5: 11.568 LS: 1.638 RM: 5.337
2018-04-17	Improved xattr handling on non-linux systems (#227)	bolshevik
	* Fixed xattr filtering for MacOS. "system." and "user." prefixes are only relevant for Linux. * Small cleanup and additional tests.
2018-03-25	fusefrontend: add xattr support	Jakob Unterwurzacher
	At the moment, only for reverse mode. https://github.com/rfjakob/gocryptfs/issues/217