mirrors/cryptomator
1
0
Fork 0
mirror of https://github.com/cryptomator/cryptomator.git synced 2026-09-13 03:24:36 +00:00
Code Issues Packages Projects Releases Wiki Activity
292 Commits 30 Branches 215 Tags
55d1ffe70366ffe184a265e863732a6709ac8d28
Commit Graph
77 Commits
Author SHA1 Message Date
Sebastian Stenzel 55d1ffe703 improved smoothing, stricter IO impl during encryption 2015-10-28 17:55:28 +01:00
Sebastian Stenzel c1f32105d8 last byte in request range inclusive (!!) 2015-10-03 14:07:41 +02:00
Sebastian Stenzel 09b4130c3e - fixed size obfuscation padding 
- fixed behaviour when serving invalid content ranges, thus improving random access performance (thats why we created the 0.8.2 workaround)
- reduced loglevels of some frequent messages
 2015-10-03 13:10:28 +02:00
Sebastian Stenzel 6b073c1499 small I/O tweaks 2015-08-25 10:55:46 +02:00
Sebastian Stenzel db2297d2f1 fixed unit test 2015-08-15 23:19:34 +02:00
Sebastian Stenzel ecb178d5b2 simplified code 2015-08-02 15:13:56 +02:00
Sebastian Stenzel ed7dc60f5e slow start, increasing number of blocks worked on per thread, reusing ciphers for multiple consecutive blocks 2015-08-02 00:37:26 +02:00
Sebastian Stenzel 6bbfacd794 small changes for easier debugging 2015-08-01 21:34:47 +02:00
Sebastian Stenzel 5a06d01ef5 moved to ByteBuffers 2015-07-31 10:56:34 +02:00
Sebastian Stenzel aac9ead633 - mutlithreaded encryption 
- moved to bytebuffer (experimental)
 2015-07-27 22:25:24 +02:00
Sebastian Stenzel cdcc1626ce multithreaded decryption using producer/consumer pattern 2015-07-26 22:22:50 +02:00
Sebastian Stenzel 738d2dfc34 first multithreaded decryption test (PoC quality) 2015-07-25 17:28:00 +02:00
Sebastian Stenzel 9771c6d1e7 don't decrypt file size obfucscation padding 2015-07-25 16:18:02 +02:00
Sebastian Stenzel e8e80f306b WebDAV range request refinements 2015-07-25 01:52:37 +02:00
Sebastian Stenzel e1ce400bcd fixed wrong long-to-bytearray conversion 2015-07-14 15:20:50 +02:00
Sebastian Stenzel 8c4d5a9614 non-interchangable chunks by adding additional data to MACs 2015-07-14 14:34:17 +02:00
Sebastian Stenzel 93a87c86a4 sensitive header data is now encrypted using a single enc_cbc(concat(fileSize, fileKey)) instead of encrypting both data separately 2015-07-13 17:37:06 +02:00
Sebastian Stenzel 685e347524 New MAC authentication warning, preventing CCAs, but allowing to force-decrypt unauthentic files. 2015-07-09 17:16:43 +02:00
Sebastian Stenzel d76154c8d1 - reduced size of chunks, a MAC is calculated for (not final yet) 
- faster range requests due to reduced chunk size, thus faster video playback start
- fixed range requests
- making file locks optional (if not supported by file system)
 2015-07-03 19:30:49 +02:00
Sebastian Stenzel bc76ab285d fixed unit test 2015-06-27 08:09:12 +02:00
Sebastian Stenzel 0d3a5b4e70 - increased vault version 
- Showing "per vault" MAC authentication failure dialogs
 2015-06-26 23:35:24 +02:00
Sebastian Stenzel 48f544ef91 - support for http range requests in new schema 2015-06-21 22:11:15 +02:00
Sebastian Stenzel 45cf87d089 new, more secure encryption scheme 
- fixed flaw reported by Stan Drapkin (SecurityDriven.NET) reducing effective key size to 96 bit
- multiple file content MACs for 1MB blocks, preventing chosen ciphertext attacks, as authentication now happens before decryption
- allowing files bigger than 64GiB
 2015-06-21 18:51:39 +02:00
Sebastian Stenzel 8d8fe74d3a restored ability to open vaults with 128 bit keylength 2015-05-30 20:13:11 +02:00
Sebastian Stenzel 0e3513e86d - locking file header during creation, 
- suggesting range request for files > 32MiB only
 2015-05-22 22:26:39 +02:00
Sebastian Stenzel 0d969432c2 some more flat hierarchy fixes 2015-05-15 18:13:34 +02:00
Sebastian Stenzel be369b480b some more destruction... 2015-05-14 21:48:02 +02:00
Sebastian Stenzel 6f9b16a7dc fixes #53 2015-05-10 14:00:00 +02:00
Sebastian Stenzel a07efc5209 Proper error handling for outdated vault formats 2015-05-05 17:29:51 +02:00
Sebastian Stenzel bbeeb79812 reduced max file name size, locking metadata files before read/write. 2015-05-05 06:50:16 +02:00
Sebastian Stenzel 4d08e9d72b cleanup 2015-05-04 22:02:47 +02:00
Sebastian Stenzel 040f260bf0 authenticated file header 2015-05-04 21:31:41 +02:00
Sebastian Stenzel cdf9c28a38 refactored directory structure, so windows (and OneDrive) can handle vaults better 2015-04-28 18:19:05 +02:00
Sebastian Stenzel 652c4cbafb Using 96 bit of random data and a 32 bit counter (as specified in https://tools.ietf.org/html/rfc3686#section-4). Thus maximum file size supported by Cryptomator is 64GiB, but decreasing risk of IV collisions to 1 : 2^48 2015-03-14 21:58:06 +01:00
Sebastian Stenzel 188a13b202 - better handling of MAC auth fails, providing link to help page 
- use random data as file size obfuscation padding
- fixed osx unmount error
- new attempt to close #41
 2015-03-14 19:11:24 +01:00
Sebastian Stenzel c1dd902a10 Async MAC authentication for HTTP range requests. Fixes #38 2015-03-09 16:32:59 +01:00
Sebastian Stenzel 2849e39e85 on-the-fly MAC calculation for better performance (addresses issue #38) 
we still need to add some kind of warning on the UI and create an async MAC checker for ranged requests
 2015-03-01 22:23:42 +01:00
Sebastian Stenzel 9433c22d7f minor I/O improvements 2015-03-01 20:55:32 +01:00
Sebastian Stenzel 63f64fae03 Fixed performance implications due to slow /dev/random. Now seeding PRNG only once per Cryptor. Fixes #36 2015-02-23 14:51:52 +01:00
Sebastian Stenzel ea3384d189 removed multi user functionality (see #21) 
using fixed masterkey filename now
 2015-02-22 15:15:43 +01:00
Sebastian Stenzel b68cf71494 - always check HMAC before decryption 
- separating AES and CMAC key during SIV mode
 2015-02-20 19:47:45 +01:00
Sebastian Stenzel 5569ecbfc7 fixes #23 2015-02-19 19:50:03 +01:00
Sebastian Stenzel 19bc1ed569 using beginning of long filename instead of checksum 2015-02-19 18:54:31 +01:00
Sebastian Stenzel 5aaee7bbf6 - fixed xorend function 
- SIV implementation now satisfies all official test vectors
 2015-02-15 15:55:49 +01:00
Sebastian Stenzel 3187520797 - fixed special chars in folder names 
- fixed IndexOutOfBoundsException
- removal of no longer existing vault directories (at runtime)
 2015-02-15 00:48:03 +01:00
Sebastian Stenzel bcee1e0d12 Filename padding no longer needed: This was done in order to prevent AES-CTR to switch to a stream mode on the last block, which would be highly exploitable. Now we're using SIV mode, which operates on whole blocks. 2015-02-14 19:21:08 +01:00
Sebastian Stenzel 9fdd2f339c - changed file name encryption to SIV mode 
- vastly improved exception handling, if decryption of a path name fails
 2015-02-14 18:55:33 +01:00
Sebastian Stenzel ebdf37ed63 RFC 5297 AEAD_AES_SIV_CMAC_256 2015-02-14 18:20:17 +01:00
Sebastian Stenzel 5e0ebab587 refactored "add vault" functionality, which fixes #14 
removed some dependencies
refactored Main/MainApplication, which fixes #16
 2015-02-13 19:46:07 +01:00
Tillmann Gaida 0cfc3fb7f7 Prevents starting a second instance of the GUI and forwards 
main-method-arguments to the running instance. Command line arguments
are treated by showing the corresponding folder in the GUI.

If an argument is a folder, it is shown directly. If an argument is a
.masterkey.json file, the parent directory is shown. If an argument does
not exist, but the folder can be created, the newly created folder is
shown.

It was necessary to move the main function away from the MainApplication
class because running the main method of a class, which extends the
javafx Application class, will start a non-daemon thread. This prevents
the VM from exiting naturally.

OSX needs its own mechanism, which is implemented in OS-specific code.
It is vital that the required handler is added in the main thread of the
application, not the Java FX thread, which is a bit awkward to
implement. Since it is possible to open .cryptomator packages on OSX,
this extension is now hidden in the folder list.
 2015-01-21 17:35:25 +01:00