gocryptfs - Mirror of gocryptfs source code on Github

Age	Commit message (Collapse)	Author
2017-04-24	forcedecode: tighten checks	Jakob Unterwurzacher
	...and fix a few golint issues and print a scary warning message on mount. Also, force the fs to ro,noexec.
2017-04-23	Add -forcedecode	danim7
	Force decode of encrypted files even if the integrity check fails, instead of failing with an IO error. Warning messages are still printed to syslog if corrupted files are encountered. It can be useful to recover files from disks with bad sectors or other corrupted media. Closes https://github.com/rfjakob/gocryptfs/pull/102 .
2017-03-05	Drop Go 1.4 compatability code everywhere	Jakob Unterwurzacher
	Yields a nice reduction in code size.
2017-02-24	stupidgcm: drop only external dependecy	Jakob Unterwurzacher
	This makes it easier to use the package in external projects. See https://github.com/rfjakob/gocryptfs/issues/79
2017-02-24	speed: add benchmark.bash helper	Jakob Unterwurzacher

2017-02-22	Implement "gocryptfs -speed"	Jakob Unterwurzacher
	A crypto benchmark mode like "openssl speed". Example run: $ ./gocryptfs -speed AES-GCM-256-OpenSSL 180.89 MB/s (selected in auto mode) AES-GCM-256-Go 48.19 MB/s AES-SIV-512-Go 37.40 MB/s
2016-12-10	stupidgcm: Fix without_openssl build failure	Jakob Unterwurzacher
	Also, always call build-without-openssl.bash from test.bash. Failure was: internal/stupidgcm/without_openssl.go:29: missing return at end of function
2016-12-10	Replace all calls to naked panic() with log.Panic()	Jakob Unterwurzacher
	We want all panics to show up in the syslog.
2016-10-04	A few more lint fixes	Jakob Unterwurzacher

2016-10-04	lint fixes	Valient Gough

2016-10-04	without_openssl: support compiling completely without openssl	Jakob Unterwurzacher
	Build helper script: build-without-openssl.bash
2016-09-26	reverse: switch from GCM-SIV to AES-SIVv1.1-beta1	Jakob Unterwurzacher
	GCM-SIV is not yet finalized, and the reference implemenation is painfully slow at about 2 MB/s. Switch to AES-SIV.
2016-09-25	stupidgcm: add GCM-SIV benchmark	Jakob Unterwurzacher
	On a CPU without AES-NI: $ go test -bench . Benchmark4kEncStupidGCM-2 50000 24155 ns/op 169.57 MB/s Benchmark4kEncGoGCM-2 20000 93965 ns/op 43.59 MB/s Benchmark4kEncGCMSIV-2 500 2576193 ns/op 1.59 MB/s
2016-09-25	Implement changes proposed by gosimple.	Jakob Unterwurzacher
	Also delete the unused "dirIVNameStruct", found by deadcode.
2016-07-04	stupidgcm: use __builtin_trap()	Jakob Unterwurzacher
	[...]/stupidgcm/locking.go:16:2: warning: indirection of non-volatile null pointer will be deleted, not trap [-Wnull-dereference] [...]/stupidgcm/locking.go:16:2: note: consider using __builtin_trap() or qualifying pointer with 'volatile' https://github.com/rfjakob/gocryptfs/issues/15
2016-05-22	stupidgcm: add benchmark.bash wrapper	Jakob Unterwurzacher
	Add a simple bash wrapper to make it easier to run the GCM benchmarks.
2016-05-05	stupidgcm: set dummy locking callback.v0.10-rc2	Jakob Unterwurzacher
	In general, OpenSSL is only threadsafe if you provide a locking function through CRYPTO_set_locking_callback. However, the GCM operations that stupidgcm uses never call that function. To guard against that ever changing, set a dummy locking callback that crashes the app.
2016-05-05	stupidgcm: skip tests on Go 1.4 and older	Jakob Unterwurzacher
	Quoting from the patch: We compare against Go's built-in GCM implementation. Since stupidgcm only supports 128-bit IVs and Go only supports that from 1.5 onward, we cannot run these tests on older Go versions.
2016-05-05	Revert "stupidgcm: print openssl error stack before panicing"	Jakob Unterwurzacher
	This did not help in debugging the openssl <= 1.0.1c issue at all and makes the code more complex. Keep it simple.
2016-05-05	stupidgcm: reorder calls to support openssl <= 1.0.1c	Jakob Unterwurzacher
	This fixes the test failures on Travis CI. Quoting from https://github.com/openssl/openssl/commit/07a4ff79d23e45f1a45da717b7c1f41a5e1c7c0c /* Set expected tag value. A restriction in OpenSSL 1.0.1c and earlier * required the tag before any AAD or ciphertext */
2016-05-04	stupidgcm: print openssl error stack before panicing	Jakob Unterwurzacher

2016-05-04	stupidgcm: fix copy-paste error in panic message	Jakob Unterwurzacher
	Also, print the openssl version in Travis CI
2016-05-04	stupidgcm: add our own thin wrapper around openssl gcm	Jakob Unterwurzacher
	...complete with tests and benchmark. This will allow us to get rid of the dependency to spacemonkeygo/openssl that causes problems on Arch Linux ( https://github.com/rfjakob/gocryptfs/issues/21 )