Apr 29, 2018
Add new features to man page
Assets 6

Improvements:

  • Add --allow-filesystem-upgrade option which will upgrade old file systems without asking the user. This will be especially helpful for GUI tools.
  • Add --version option that shows the CryFS version and exits.
  • When CryFS fails to load a file system, the process stops with a helpful error code, which can be used by GUI tools to show detailed messages.
  • Only migrate a file system if the underlying storage format changed

@smessmer smessmer released this Jan 12, 2018 · 19 commits to develop since this release

Assets 6

Note: We don't offer downloads for .deb packages anymore, since CryFS is now in the software sources for Debian and Ubuntu. Just do: sudo apt-get install cryfs

Compatibility

  • Runs on Debian with FreeBSD kernel
  • Runs on FreeBSD 11.1
  • Works with Crypto++ 6.0

Improvements

  • added a man page

Fixed bugs

  • du shows correct file system size
  • Updated spdlog dependency to fix build on newer systems
Feb 18, 2017
Merge from develop

@smessmer smessmer released this Oct 14, 2016 · 68 commits to develop since this release

Assets 14

Fixed bugs:

  • Fix potential deadlock
  • Fix potential crash

Improvements:

  • Allow building with -DCRYFS_UPDATE_CHECKS=off, which will create an executable with disabled update checks (the alternative to disable them in the environment also still works).
  • Automatically disable update checks when running in noninteractive mode.
  • More detailed error reporting if key derivation fails

Compatibility:

  • Compatible with libcurl version >= 7.50.0, and <= 7.21.6 (tested down to 7.19.0)
  • Compatible with Crypto++ 5.6.4
  • Compatible with compilers running under hardening-wrapper
Pre-release

@smessmer smessmer released this Jun 28, 2016 · 110 commits to develop since this release

Assets 12

edit: Please don't use this version, there's a race condition that'll make it crash quite often. Use HEAD of the next branch instead or wait for 0.10-m2.


This is a pre-release of CryFS 0.10.
Feel free to test it, but don't expect everything to work ;)

Based on 0.9.5, this release includes the following additional features:

  • Integrity protection. The file system will deliberately crash and notify you when it notices that an attacker (e.g. a malicious cloud storage provider) tried to modify your data. The protection covers the whole file system (i.e. files, directory structure, symlinks, ...), not only file contents.
  • Conflict resolution: Each entity in the file system (files, directories, symlinks) stores a pointer to the directory containing it. If two clients add a file to the same directory at the same time and this causes a synchronization conflict, the parent pointers can be used to resolve the conflict. Right now, the pointers are only stored. Conflict resolution will come in future versions.

@smessmer smessmer released this Jun 28, 2016 · 110 commits to develop since this release

Assets 14

Fixed Bugs:

  • Fixed a bug that prevented mounting a file system on Mac OS X.
  • File system operations correctly update the timestamps (access time, modification time and status change time).
  • Reacts correctly to fsync() and fdatasync() syscalls by flushing the corresponding data to the disk.

Improvements:

  • When mounting an old file system, CryFS will ask before migrating it to the newest version.
  • Operating system tools like the mount command or /proc/self/mountinfo report correct file system type and also report the base directory.
  • Compatibility with GCC 6

@smessmer smessmer released this Apr 29, 2016 · 166 commits to develop since this release

Assets 14

Improvements:

  • Ciphertext blocks are split into subdirectories (before, all were on top level) to reduce number of files per directory. Some unix tools don't work well with directories with too many entries.

Fixed Bugs:

  • Renaming a file to an existing file (i.e. overwriting an existing file) didn't free the allocated memory for the overwritten file
  • Renaming a file to an existing file could hurt an invariant in the directory layout (directory entries have to be sorted) and doing so could cause files to seemingly disappear.
  • Fix a potential deadlock in the cache

Compatibility:

  • The generated .deb packages work for any Ubuntu/Debian based distribution, but will not install the package source for automatic updates if it's an unsupported operating system.

@smessmer smessmer released this Apr 3, 2016 · 183 commits to develop since this release

Assets 12

New Features:

  • The ciphertext block size is configurable. You can use the "--blocksize" command line argument.
    If not specified, CryFS will ask you for a block size when creating a file system.
  • It's easier for tools and scripts to use CryFS:
    If an environment variable CRYFS_FRONTEND=noninteractive is set, we don't ask for options
    (but take default values for everything that's not specified on command line).
    Furthermore, in noninteractive mode, we won't ask for password confirmation when creating a file system.
    The password only has to be sent once to stdin.
  • You can disable the automatic update check by setting CRYFS_NO_UPDATE_CHECK=true in your environment.

Fixed Bugs:

  • Building CryFS from the GitHub tarball (i.e. when there is no .git directory present) works.
  • A bug in the fstat implementation caused problems with some text editors (e.g. nano) falsely thinking a file changed since they opened it.
  • When trying to rename a file to an already existing file name, a bug deleted it instead.
  • Rename operation allows overwriting existing files, as specified in the rename(2) man page.

Compatibility:

  • The generated .deb packages for Debian also work for the Devuan operating system.