gocryptfs - Mirror of gocryptfs source code on Github

Age	Commit message (Collapse)	Author
2016-10-04	without_openssl: support compiling completely without openssl	Jakob Unterwurzacher
	Build helper script: build-without-openssl.bash
2016-09-26	reverse: switch from GCM-SIV to AES-SIVv1.1-beta1	Jakob Unterwurzacher
	GCM-SIV is not yet finalized, and the reference implemenation is painfully slow at about 2 MB/s. Switch to AES-SIV.
2016-09-25	stupidgcm: add GCM-SIV benchmark	Jakob Unterwurzacher
	On a CPU without AES-NI: $ go test -bench . Benchmark4kEncStupidGCM-2 50000 24155 ns/op 169.57 MB/s Benchmark4kEncGoGCM-2 20000 93965 ns/op 43.59 MB/s Benchmark4kEncGCMSIV-2 500 2576193 ns/op 1.59 MB/s
2016-09-25	Implement changes proposed by gosimple.	Jakob Unterwurzacher
	Also delete the unused "dirIVNameStruct", found by deadcode.
2016-07-04	stupidgcm: use __builtin_trap()	Jakob Unterwurzacher
	[...]/stupidgcm/locking.go:16:2: warning: indirection of non-volatile null pointer will be deleted, not trap [-Wnull-dereference] [...]/stupidgcm/locking.go:16:2: note: consider using __builtin_trap() or qualifying pointer with 'volatile' https://github.com/rfjakob/gocryptfs/issues/15
2016-05-22	stupidgcm: add benchmark.bash wrapper	Jakob Unterwurzacher
	Add a simple bash wrapper to make it easier to run the GCM benchmarks.
2016-05-05	stupidgcm: set dummy locking callback.v0.10-rc2	Jakob Unterwurzacher
	In general, OpenSSL is only threadsafe if you provide a locking function through CRYPTO_set_locking_callback. However, the GCM operations that stupidgcm uses never call that function. To guard against that ever changing, set a dummy locking callback that crashes the app.
2016-05-05	stupidgcm: skip tests on Go 1.4 and older	Jakob Unterwurzacher
	Quoting from the patch: We compare against Go's built-in GCM implementation. Since stupidgcm only supports 128-bit IVs and Go only supports that from 1.5 onward, we cannot run these tests on older Go versions.
2016-05-05	Revert "stupidgcm: print openssl error stack before panicing"	Jakob Unterwurzacher
	This did not help in debugging the openssl <= 1.0.1c issue at all and makes the code more complex. Keep it simple.
2016-05-05	stupidgcm: reorder calls to support openssl <= 1.0.1c	Jakob Unterwurzacher
	This fixes the test failures on Travis CI. Quoting from https://github.com/openssl/openssl/commit/07a4ff79d23e45f1a45da717b7c1f41a5e1c7c0c /* Set expected tag value. A restriction in OpenSSL 1.0.1c and earlier * required the tag before any AAD or ciphertext */
2016-05-04	stupidgcm: print openssl error stack before panicing	Jakob Unterwurzacher

2016-05-04	stupidgcm: fix copy-paste error in panic message	Jakob Unterwurzacher
	Also, print the openssl version in Travis CI
2016-05-04	stupidgcm: add our own thin wrapper around openssl gcm	Jakob Unterwurzacher
	...complete with tests and benchmark. This will allow us to get rid of the dependency to spacemonkeygo/openssl that causes problems on Arch Linux ( https://github.com/rfjakob/gocryptfs/issues/21 )