gocryptfs - Mirror of gocryptfs source code on Github

Age	Commit message (Collapse)	Author
2018-12-27	Assorted spelling fixes.	Sebastian Lackner
	Mostly detected with the 'codespell' utility, but also includes some manual grammar fixes.
2017-11-22	nametransform: Return error if decrypted name is '.' or '..'	Sebastian Lackner

2017-08-06	nametransform: move diriv cache into it's own package	Jakob Unterwurzacher
	Needs some space to grow. renamed: internal/nametransform/diriv_cache.go -> internal/nametransform/dirivcache/dirivcache.go
2017-05-23	nametransform: harden name decryption against invalid input	Jakob Unterwurzacher
	This fixes a few issues I have found reviewing the code: 1) Limit the amount of data ReadLongName() will read. Previously, you could send gocryptfs into out-of-memory by symlinking gocryptfs.diriv to /dev/zero. 2) Handle the empty input case in unPad16() by returning an error. Previously, it would panic with an out-of-bounds array read. It is unclear to me if this could actually be triggered. 3) Reject empty names after base64-decoding in DecryptName(). An empty name crashes emeCipher.Decrypt(). It is unclear to me if B64.DecodeString() can actually return a non-error empty result, but let's guard against it anyway.
2017-05-07	nametranform, fusefrontend: better errors on invalid names	Jakob Unterwurzacher
	nametransform.DecryptName() now always returns syscall.EBADMSG if the name was invalid. fusefrontend.OpenDir error messages have been normalized.
2017-03-05	nametransform: fix Raw64 not affecting symlink targets	Jakob Unterwurzacher
	The symlink functions incorrectly hardcoded the padded base64 variant.
2017-03-05	Drop Go 1.4 compatability code everywhere	Jakob Unterwurzacher
	Yields a nice reduction in code size.
2017-03-05	cryptocore: use eme v1.1 interface	Jakob Unterwurzacher
	Version 1.1 of the EME package (github.com/rfjakob/eme) added a more convenient interface. Use it. Note that you have to upgrade your EME package (go get -u)!
2016-11-01	Add Go 1.4 compatibility layer for raw64	Jakob Unterwurzacher
	Using raw64 will not work, but at least it will compile.
2016-11-01	Add support for unpadded base64 filenames, "-raw64"	Jakob Unterwurzacher
	Through base64.RawURLEncoding. New command-line parameter "-raw64".
2016-10-04	lint fixes	Valient Gough

2016-09-25	nametransform: downgrade invalid length warning	Jakob Unterwurzacher
	This happens all the time in reverse mode when somebody stats an encrypted symlink target.
2016-09-25	nametransform: delete unused function DecryptPathDirIV	Jakob Unterwurzacher

2016-09-25	reverse: add symlink encryption and Readlink support	Jakob Unterwurzacher

2016-09-25	nametransform: return EINVAL on invalid padding	Jakob Unterwurzacher
	With the generic fmt.Errorf we trigger a warning from go-fuse: 2016/09/21 21:42:31 can't convert error type: Invalid padding
2016-07-06	Add godoc comments to all internal packages	Jakob Unterwurzacher

2016-07-03	nametransform: hide detailed padding error behind the debug flag	Jakob Unterwurzacher
	unPad16 returns detailed errors including the position of the incorrect bytes. Kill a possible padding oracle by lumping everything into a generic error. The detailed error is only logged if debug is active.
2016-06-23	Drop deprecated "-emenames" option	Jakob Unterwurzacher
	The EMENames feature flag is already mandatory, dropping the command line option is the final step.
2016-06-16	Rename nametransform, contentenc source files	Jakob Unterwurzacher
	Let's have shorter names, and merge *_api.go into the "main" file. No code changes.