gocryptfs - Mirror of gocryptfs source code on Github

Age	Commit message (Collapse)	Author
2018-02-18	stupidgcm: create private copy of the key	Jakob Unterwurzacher
	Relieves the caller from worrying about whether they can overwrite the key.
2018-02-18	main: try to wipe cryptocore's secret keys on unmount	Jakob Unterwurzacher
	Raise the bar for recovering keys from memory. https://github.com/rfjakob/gocryptfs/issues/211
2018-02-17	stupidgcm: implement key wipe	Jakob Unterwurzacher
	Not bulletproof due to possible GC copies, but still raises to bar for extracting the key. https://github.com/rfjakob/gocryptfs/issues/211
2018-02-17	stupidgcm: switch to pointer receivers	Jakob Unterwurzacher
	What the key slice does not get copied around will make it possible to check if the key has been wiped.
2017-06-30	stupidgcm: Open: if "dst" is big enough, use it as the output buffer	Jakob Unterwurzacher
	This means we won't need any allocation for the plaintext.
2017-06-29	stupidgcm: use "dst" as the output buffer it is big enough	Jakob Unterwurzacher
	This saves an allocation of the ciphertext block.
2017-04-24	forcedecode: tighten checks	Jakob Unterwurzacher
	...and fix a few golint issues and print a scary warning message on mount. Also, force the fs to ro,noexec.
2017-04-23	Add -forcedecode	danim7
	Force decode of encrypted files even if the integrity check fails, instead of failing with an IO error. Warning messages are still printed to syslog if corrupted files are encountered. It can be useful to recover files from disks with bad sectors or other corrupted media. Closes https://github.com/rfjakob/gocryptfs/pull/102 .
2016-12-10	Replace all calls to naked panic() with log.Panic()	Jakob Unterwurzacher
	We want all panics to show up in the syslog.
2016-10-04	A few more lint fixes	Jakob Unterwurzacher

2016-10-04	lint fixes	Valient Gough

2016-10-04	without_openssl: support compiling completely without openssl	Jakob Unterwurzacher
	Build helper script: build-without-openssl.bash
2016-05-05	Revert "stupidgcm: print openssl error stack before panicing"	Jakob Unterwurzacher
	This did not help in debugging the openssl <= 1.0.1c issue at all and makes the code more complex. Keep it simple.
2016-05-05	stupidgcm: reorder calls to support openssl <= 1.0.1c	Jakob Unterwurzacher
	This fixes the test failures on Travis CI. Quoting from https://github.com/openssl/openssl/commit/07a4ff79d23e45f1a45da717b7c1f41a5e1c7c0c /* Set expected tag value. A restriction in OpenSSL 1.0.1c and earlier * required the tag before any AAD or ciphertext */
2016-05-04	stupidgcm: print openssl error stack before panicing	Jakob Unterwurzacher

2016-05-04	stupidgcm: fix copy-paste error in panic message	Jakob Unterwurzacher
	Also, print the openssl version in Travis CI
2016-05-04	stupidgcm: add our own thin wrapper around openssl gcm	Jakob Unterwurzacher
	...complete with tests and benchmark. This will allow us to get rid of the dependency to spacemonkeygo/openssl that causes problems on Arch Linux ( https://github.com/rfjakob/gocryptfs/issues/21 )