mirrors/cryptomator
1
0
Fork 0
mirror of https://github.com/cryptomator/cryptomator.git synced 2026-08-01 12:56:02 +00:00
Code Issues Packages Projects Releases Wiki Activity
261 Commits 31 Branches 215 Tags
18e7dcd91fdf49fb03213f9cf7ae2e8932700af5
Commit Graph
92 Commits
Author SHA1 Message Date
Sebastian Stenzel 18e7dcd91f Beta 0.8.0 2015-08-04 17:44:19 +02:00
Sebastian Stenzel ecb178d5b2 simplified code 2015-08-02 15:13:56 +02:00
Sebastian Stenzel ed7dc60f5e slow start, increasing number of blocks worked on per thread, reusing ciphers for multiple consecutive blocks 2015-08-02 00:37:26 +02:00
Sebastian Stenzel 6bbfacd794 small changes for easier debugging 2015-08-01 21:34:47 +02:00
Sebastian Stenzel 5a06d01ef5 moved to ByteBuffers 2015-07-31 10:56:34 +02:00
Sebastian Stenzel aac9ead633 - mutlithreaded encryption 
- moved to bytebuffer (experimental)
 2015-07-27 22:25:24 +02:00
Sebastian Stenzel cdcc1626ce multithreaded decryption using producer/consumer pattern 2015-07-26 22:22:50 +02:00
Sebastian Stenzel 738d2dfc34 first multithreaded decryption test (PoC quality) 2015-07-25 17:28:00 +02:00
Sebastian Stenzel 9771c6d1e7 don't decrypt file size obfucscation padding 2015-07-25 16:18:02 +02:00
Sebastian Stenzel e8e80f306b WebDAV range request refinements 2015-07-25 01:52:37 +02:00
Sebastian Stenzel e1ce400bcd fixed wrong long-to-bytearray conversion 2015-07-14 15:20:50 +02:00
Sebastian Stenzel 8c4d5a9614 non-interchangable chunks by adding additional data to MACs 2015-07-14 14:34:17 +02:00
Sebastian Stenzel 93a87c86a4 sensitive header data is now encrypted using a single enc_cbc(concat(fileSize, fileKey)) instead of encrypting both data separately 2015-07-13 17:37:06 +02:00
Sebastian Stenzel 685e347524 New MAC authentication warning, preventing CCAs, but allowing to force-decrypt unauthentic files. 2015-07-09 17:16:43 +02:00
Sebastian Stenzel d76154c8d1 - reduced size of chunks, a MAC is calculated for (not final yet) 
- faster range requests due to reduced chunk size, thus faster video playback start
- fixed range requests
- making file locks optional (if not supported by file system)
 2015-07-03 19:30:49 +02:00
Sebastian Stenzel bc76ab285d fixed unit test 2015-06-27 08:09:12 +02:00
Sebastian Stenzel 0d3a5b4e70 - increased vault version 
- Showing "per vault" MAC authentication failure dialogs
 2015-06-26 23:35:24 +02:00
Sebastian Stenzel 48f544ef91 - support for http range requests in new schema 2015-06-21 22:11:15 +02:00
Sebastian Stenzel 45cf87d089 new, more secure encryption scheme 
- fixed flaw reported by Stan Drapkin (SecurityDriven.NET) reducing effective key size to 96 bit
- multiple file content MACs for 1MB blocks, preventing chosen ciphertext attacks, as authentication now happens before decryption
- allowing files bigger than 64GiB
 2015-06-21 18:51:39 +02:00
Sebastian Stenzel 4a754d6a6c Beginning development of 0.8.0 2015-05-31 00:04:26 +02:00
Sebastian Stenzel dd2863da5b 0.7.1 (fixed debian build) 
updated travis script (requires git release tags to be equal to maven version, so starting with this tag we drop the preceeding "v")
 2015-05-30 22:22:50 +02:00
Sebastian Stenzel d43396bcfb updated version 2015-05-30 21:31:26 +02:00
Sebastian Stenzel 8d8fe74d3a restored ability to open vaults with 128 bit keylength 2015-05-30 20:13:11 +02:00
Sebastian Stenzel 0e3513e86d - locking file header during creation, 
- suggesting range request for files > 32MiB only
 2015-05-22 22:26:39 +02:00
Sebastian Stenzel 0d969432c2 some more flat hierarchy fixes 2015-05-15 18:13:34 +02:00
Sebastian Stenzel be369b480b some more destruction... 2015-05-14 21:48:02 +02:00
Sebastian Stenzel 6f9b16a7dc fixes #53 2015-05-10 14:00:00 +02:00
Sebastian Stenzel a07efc5209 Proper error handling for outdated vault formats 2015-05-05 17:29:51 +02:00
Sebastian Stenzel bbeeb79812 reduced max file name size, locking metadata files before read/write. 2015-05-05 06:50:16 +02:00
Sebastian Stenzel 4d08e9d72b cleanup 2015-05-04 22:02:47 +02:00
Sebastian Stenzel 040f260bf0 authenticated file header 2015-05-04 21:31:41 +02:00
Sebastian Stenzel cdf9c28a38 refactored directory structure, so windows (and OneDrive) can handle vaults better 2015-04-28 18:19:05 +02:00
Sebastian Stenzel b9b85a58ac Increased Version to 0.7.0-SNAPSHOT 2015-03-14 22:10:51 +01:00
Sebastian Stenzel 9024465d6c Beta 0.6.0 2015-03-14 22:09:25 +01:00
Sebastian Stenzel 652c4cbafb Using 96 bit of random data and a 32 bit counter (as specified in https://tools.ietf.org/html/rfc3686#section-4). Thus maximum file size supported by Cryptomator is 64GiB, but decreasing risk of IV collisions to 1 : 2^48 2015-03-14 21:58:06 +01:00
Sebastian Stenzel 188a13b202 - better handling of MAC auth fails, providing link to help page 
- use random data as file size obfuscation padding
- fixed osx unmount error
- new attempt to close #41
 2015-03-14 19:11:24 +01:00
Sebastian Stenzel c1dd902a10 Async MAC authentication for HTTP range requests. Fixes #38 2015-03-09 16:32:59 +01:00
Sebastian Stenzel 2849e39e85 on-the-fly MAC calculation for better performance (addresses issue #38) 
we still need to add some kind of warning on the UI and create an async MAC checker for ranged requests
 2015-03-01 22:23:42 +01:00
Sebastian Stenzel 9433c22d7f minor I/O improvements 2015-03-01 20:55:32 +01:00
Sebastian Stenzel 5bd38d31bf Merge branch '0.5.1' 
Conflicts:
	main/core/pom.xml
	main/crypto-aes/pom.xml
	main/crypto-api/pom.xml
	main/pom.xml
	main/ui/pom.xml
 2015-02-23 14:53:31 +01:00
Sebastian Stenzel 63f64fae03 Fixed performance implications due to slow /dev/random. Now seeding PRNG only once per Cryptor. Fixes #36 2015-02-23 14:51:52 +01:00
Sebastian Stenzel f86b27d62f Updated Version to 0.6.0-SNAPSHOT 2015-02-22 22:19:13 +01:00
Sebastian Stenzel cba8bbefc5 Beta Version 0.5.0 2015-02-22 22:18:18 +01:00
Sebastian Stenzel ea3384d189 removed multi user functionality (see #21) 
using fixed masterkey filename now
 2015-02-22 15:15:43 +01:00
Sebastian Stenzel b68cf71494 - always check HMAC before decryption 
- separating AES and CMAC key during SIV mode
 2015-02-20 19:47:45 +01:00
Sebastian Stenzel 5569ecbfc7 fixes #23 2015-02-19 19:50:03 +01:00
Sebastian Stenzel 19bc1ed569 using beginning of long filename instead of checksum 2015-02-19 18:54:31 +01:00
Sebastian Stenzel 5aaee7bbf6 - fixed xorend function 
- SIV implementation now satisfies all official test vectors
 2015-02-15 15:55:49 +01:00
Sebastian Stenzel 3187520797 - fixed special chars in folder names 
- fixed IndexOutOfBoundsException
- removal of no longer existing vault directories (at runtime)
 2015-02-15 00:48:03 +01:00
Sebastian Stenzel bcee1e0d12 Filename padding no longer needed: This was done in order to prevent AES-CTR to switch to a stream mode on the last block, which would be highly exploitable. Now we're using SIV mode, which operates on whole blocks. 2015-02-14 19:21:08 +01:00