2019-10-20 03:33:29 +02:00
Version 0.11.0 (unreleased)
---------------
Build changes:
* Switch to Conan package manager
2020-07-01 06:49:09 +02:00
* Allow an easy way to modify how the dependencies are found. This is mostly helpful for package maintainers.
2019-10-20 03:33:29 +02:00
2020-06-29 11:07:00 +02:00
Other changes:
* Now requires CMake 3.6 or later
2019-10-13 13:29:59 +02:00
New features:
* Add support for atime mount options (noatime, strictatime, relatime, atime, nodiratime). As before, relatime is the default.
2019-10-20 03:33:29 +02:00
2020-02-24 02:42:44 +01:00
Version 0.10.3 (unreleased)
---------------
Fixed bugs:
* A comma in the base directory name would make the file system fail to mount, https://github.com/cryfs/cryfs/issues/326
2019-06-08 22:08:25 +02:00
Version 0.10.2
2019-04-04 03:40:31 +02:00
---------------
2019-05-25 22:35:44 +02:00
Fixed bugs:
* Fix occasional crash in mkdir() on Windows
2019-06-02 04:27:47 +02:00
* Fix a race condition when a file descriptor is closed while there's read/write requests for that file being processed.
2019-05-25 22:35:44 +02:00
2019-05-25 21:27:31 +02:00
Improvements:
* Better logging when local state can't be loaded
2019-04-04 03:40:31 +02:00
2019-06-02 05:34:28 +02:00
Other:
* Updated to crypto++ 8.2
2019-04-04 03:40:31 +02:00
2019-04-04 03:37:11 +02:00
Version 0.10.1
2019-02-09 23:55:16 +01:00
---------------
Fixed bugs:
* If file system migration encounters files or folders with the wrong format in the base directory, it now just ignores them instead of crashing.
2019-02-10 22:07:50 +01:00
* When trying to migrate a file system from CryFS 0.9.3 or older, show an error message suggesting to first open it with 0.9.10 because we can't load that anymore.
2019-02-28 11:29:10 +01:00
* The '--unmount-idle' parameter works again
2019-04-04 03:36:53 +02:00
* Fix building with boost 1.67
2019-02-09 23:55:16 +01:00
2019-03-24 06:02:27 +01:00
Compatibility:
* Fixed some incompatibilities with systems using the musl libc
2019-04-02 04:18:49 +02:00
* Use boost::stacktrace instead of libbacktrace to build stack traces. This fixes a segfault issue with platforms using libexecinfo and is generally more portable.
2019-03-24 06:02:27 +01:00
2019-02-28 03:55:40 +01:00
Other:
* Updated to crypto++ 8.1
2019-03-29 08:35:31 +01:00
* Updated to DokanY 1.2.1
2019-03-24 06:01:26 +01:00
* Unit tests can now be run from any directory
2019-02-28 03:55:40 +01:00
2019-02-09 23:55:16 +01:00
2019-02-09 03:50:13 +01:00
Version 0.10.0
2016-06-27 23:47:31 +02:00
---------------
2017-09-05 01:43:43 +02:00
New Features & Improvements:
2018-09-29 10:07:55 +02:00
* Experimental Windows support
2016-06-27 23:47:31 +02:00
* Integrity checks ensure you notice when someone modifies your file system.
2017-08-23 10:56:03 +02:00
* File system nodes (files, directories, symlinks) store a parent pointer to the directory that contains them. This information can be used in later versions to resolve some synchronization conflicts.
* Allow mounting using system mount tool and /etc/fstab (e.g. mount -t fuse.cryfs basedir mountdir)
2016-07-15 01:20:12 +02:00
* Performance improvements
2017-08-23 21:33:10 +02:00
* Use relatime instead of strictatime (further performance improvement)
2017-08-23 10:56:03 +02:00
* Pass fuse options directly to cryfs (i.e. 'cryfs basedir mountdir -o allow_other' instead of 'cryfs basedir mountdir -- -o allow_other')
2018-09-29 10:07:55 +02:00
* CryFS tells the operating system to lock the encryption key to memory, i.e. not swap it to the disk (note: this is best-effort and cannot be guaranteed. Hibernation, for example, will still write the encryption key to the disk).
2017-09-19 12:20:28 +02:00
* New block size options: 4KB and 16KB
2018-09-29 10:07:55 +02:00
* New default block size: 16KB. This should decrease the size of the ciphertext directory for most users.
2018-05-19 23:33:28 +02:00
* Increased scrypt hardness to (N=1048576, r=4, p=8) to make it harder to crack the key while allowing cryfs to take advantage of multicore machines.
2019-01-19 22:02:41 +01:00
* cryfs-unmount tool to unmount filesystems
2016-07-15 01:20:12 +02:00
2017-09-01 00:48:22 +02:00
Fixed bugs:
* `du` shows correct file system size on Mac OS X.
2018-10-19 20:38:27 +02:00
* On Mac OS X, Finder shows the correct name for the mount directory
2017-09-01 00:48:22 +02:00
2018-01-12 23:17:09 +01:00
2019-06-08 22:33:53 +02:00
Version 0.9.11
2019-06-02 05:01:35 +02:00
--------------
Fixed bugs:
* Fix a race condition when a file descriptor is closed while there's read/write requests for that file being processed.
2019-06-04 04:29:51 +02:00
2019-01-21 04:57:23 +01:00
Version 0.9.10
2018-12-27 10:43:09 +01:00
--------------
Fixed bugs:
* Fixed occasional deadlock (https://github.com/cryfs/cryfs/issues/64)
2019-01-13 08:21:12 +01:00
* Fix for reading empty files out of bounds
2019-01-13 08:26:59 +01:00
* Fixed race condition (https://github.com/cryfs/cryfs/issues/224 and https://github.com/cryfs/cryfs/issues/243)
2018-12-27 10:43:09 +01:00
2018-02-05 04:16:11 +01:00
Version 0.9.9
2018-09-29 10:05:10 +02:00
--------------
2018-02-01 11:04:59 +01:00
Improvements:
* Add --allow-filesystem-upgrade option which will upgrade old file systems without asking the user. This will be especially helpful for GUI tools.
2018-02-01 19:21:47 +01:00
* Add --version option that shows the CryFS version and exits.
2018-02-02 01:08:01 +01:00
* When CryFS fails to load a file system, the process stops with a helpful error code, which can be used by GUI tools to show detailed messages.
2018-02-03 18:57:07 +01:00
* Only migrate a file system if the underlying storage format changed
2018-01-12 23:17:09 +01:00
2018-02-01 20:21:26 +01:00
2018-01-12 23:09:49 +01:00
Version 0.9.8
2017-02-11 13:35:42 +01:00
--------------
2017-08-16 04:00:46 +02:00
Compatibility:
2017-09-25 22:57:01 +02:00
* Runs on Debian with FreeBSD kernel
2017-09-28 19:19:19 +02:00
* Runs on FreeBSD 11.1
2017-08-16 04:00:46 +02:00
* Works with Crypto++ 6.0
2018-01-12 23:16:02 +01:00
Improvements:
* added a man page
2017-02-18 14:21:24 +01:00
Fixed bugs:
* `du` shows correct file system size
2018-01-12 23:16:02 +01:00
* Updated spdlog dependency to fix build on newer systems
2017-02-11 13:35:42 +01:00
2017-02-11 13:34:50 +01:00
Version 0.9.7
2016-10-20 10:35:29 +02:00
--------------
Compatibility:
* Runs on FreeBSD
2016-10-26 01:06:28 +02:00
* Works with Clang++ 3.8 (Debian experimental or newer Ubuntu systems)
2017-02-04 20:31:07 +01:00
* Works with GCC 7
2016-10-20 10:35:29 +02:00
2016-10-13 17:37:03 +02:00
Version 0.9.6
2016-07-23 09:04:50 +02:00
---------------
2016-09-24 10:56:36 +02:00
Fixed bugs:
2016-09-24 19:48:01 +02:00
* Fix potential deadlock
* Fix potential crash
2016-09-24 10:56:36 +02:00
2016-09-24 13:16:26 +02:00
Improvements:
* Allow building with -DCRYFS_UPDATE_CHECKS=off, which will create an executable with disabled update checks (the alternative to disable them in the environment also still works).
2016-09-25 11:42:49 +02:00
* Automatically disable update checks when running in noninteractive mode.
2016-10-02 11:01:14 +02:00
* More detailed error reporting if key derivation fails
2016-09-24 13:16:26 +02:00
2016-07-23 09:04:50 +02:00
Compatibility:
2016-09-01 00:31:53 +02:00
* Compatible with libcurl version >= 7.50.0, and <= 7.21.6 (tested down to 7.19.0)
2016-09-24 09:39:37 +02:00
* Compatible with Crypto++ 5.6.4
2016-10-04 20:45:26 +02:00
* Compatible with compilers running under hardening-wrapper
2016-07-23 09:04:50 +02:00
2016-06-28 11:32:09 +02:00
Version 0.9.5
2016-05-04 09:31:13 +02:00
---------------
Fixed Bugs:
* Fixed a bug that prevented mounting a file system on Mac OS X.
2016-06-08 21:22:17 +02:00
* File system operations correctly update the timestamps (access time, modification time and status change time).
2016-06-08 21:33:42 +02:00
* Reacts correctly to fsync() and fdatasync() syscalls by flushing the corresponding data to the disk.
2016-05-04 09:31:13 +02:00
Improvements:
* When mounting an old file system, CryFS will ask before migrating it to the newest version.
2016-06-04 09:46:07 +02:00
* Operating system tools like the mount command or /proc/self/mountinfo report correct file system type and also report the base directory.
2016-06-27 06:26:08 +02:00
* Compatibility with GCC 6
2016-05-04 09:31:13 +02:00
2016-04-30 00:28:24 +02:00
Version 0.9.4
2016-04-26 02:48:25 +02:00
---------------
2016-04-29 21:21:02 +02:00
Improvements:
* Ciphertext blocks are split into subdirectories (before, all were on top level) to reduce number of files per directory. Some unix tools don't work well with directories with too many entries.
2016-04-26 02:48:25 +02:00
Fixed Bugs:
* Renaming a file to an existing file (i.e. overwriting an existing file) didn't free the allocated memory for the overwritten file
* Renaming a file to an existing file could hurt an invariant in the directory layout (directory entries have to be sorted) and doing so could cause files to seemingly disappear.
2016-04-27 03:09:42 +02:00
* Fix a potential deadlock in the cache
2016-04-26 02:48:25 +02:00
Compatibility:
2016-04-29 21:21:11 +02:00
* The generated .deb packages work for any Ubuntu/Debian based distribution, but will not install the package source for automatic updates if it's an unsupported operating system.
2016-04-26 02:48:25 +02:00
2016-04-03 15:02:39 +02:00
Version 0.9.3
2016-02-21 01:34:21 +01:00
---------------
2016-03-24 07:59:50 +01:00
New Features:
* The ciphertext block size is configurable. You can use the "--blocksize" command line argument.
If not specified, CryFS will ask you for a block size when creating a file system.
2016-02-21 01:34:21 +01:00
* It's easier for tools and scripts to use CryFS:
2016-03-24 07:59:50 +01:00
If an environment variable CRYFS_FRONTEND=noninteractive is set, we don't ask for options
(but take default values for everything that's not specified on command line).
Furthermore, in noninteractive mode, we won't ask for password confirmation when creating a file system.
The password only has to be sent once to stdin.
2016-02-21 22:15:27 +01:00
* You can disable the automatic update check by setting CRYFS_NO_UPDATE_CHECK=true in your environment.
2016-03-24 07:59:50 +01:00
Fixed Bugs:
2016-03-02 14:05:27 +01:00
* Building CryFS from the GitHub tarball (i.e. when there is no .git directory present) works.
2016-03-24 07:59:50 +01:00
* A bug in the fstat implementation caused problems with some text editors (e.g. nano) falsely thinking a file changed since they opened it.
* When trying to rename a file to an already existing file name, a bug deleted it instead.
* Rename operation allows overwriting existing files, as specified in the rename(2) man page.
2016-04-03 14:54:22 +02:00
Compatibility:
* The generated .deb packages for Debian also work for the Devuan operating system.
2016-02-21 01:34:21 +01:00
2016-02-18 01:19:11 +01:00
Version 0.9.2
---------------
* Experimental support for installing CryFS on Mac OS X using homebrew
(0.9.2 is not released for Linux)
2016-02-17 14:22:46 +01:00
Version 0.9.1
2016-02-15 18:10:20 +01:00
---------------
2016-02-17 12:49:33 +01:00
* Report file system usage statistics to the operating system (e.g. amount of space used). This information can be queried using the 'df' tool on linux. See https://github.com/cryfs/cryfs/commit/68acc27e88ff5209ca55ddb4e91f5a449d77fb54
* Use stronger scrypt parameters when generating the config file key from the user password. This makes it a bit more secure, but also takes a bit longer to load a file system. See https://github.com/cryfs/cryfs/commit/7f1493ab9210319cab008e71d4ee8f4d7d920f39
2016-02-17 14:22:46 +01:00
* Fix a bug where deleting a non-empty directory could leave some blocks over. See https://github.com/cryfs/cryfs/commit/df041ac84511e4560c4f099cd8cc089d08e05737
2016-02-15 18:10:20 +01:00
2016-02-15 00:21:23 +01:00
Version 0.9.0
2016-02-09 09:48:26 +01:00
---------------
2016-02-15 00:21:23 +01:00
(warning) file systems created with earlier CryFS versions are incompatible with this release.
2016-02-09 09:48:26 +01:00
* Fully support file access times
2016-02-12 23:26:19 +01:00
* Fix: Password is read from stdin, not from glibc getpass(). This enables external tools (e.g. GUIs) to pass in the password without problems.
2016-02-13 10:46:05 +01:00
* Remove --extpass parameter, because that encourages tool writers to do bad things like storing a password in a file and using --extpass="cat filename".
The password can now be passed in to stdin without problems, so tools should use that.
* Works with zuluMount GUI, https://mhogomchungu.github.io/zuluCrypt/
2016-02-13 15:06:33 +01:00
* Introduce version flags for file system entities to allow future CryFS versions to be backwards-compatible even if the format changes.
2016-02-13 15:17:49 +01:00
* (for developers) New git repository layout. All subrepositories have been merged to one directory.
* (for developers) Using CMake instead of biicode as build system.
2016-02-09 09:48:26 +01:00
2016-02-09 11:55:23 +01:00
Version 0.8.6
2016-02-06 13:21:18 +01:00
---------------
2016-02-09 01:19:18 +01:00
* Fix a deadlock that was caused when a very high load of parallel resize operations was issued, see https://github.com/cryfs/cryfs/issues/3
2016-02-09 09:48:26 +01:00
* Fix a bug that prevented deleting symlinks, see https://github.com/cryfs/cryfs/issues/2
* Gracefully accept modifications to the file access times instead of failing, although they're not stored yet (they will be stored in 0.9.0). This should fix https://github.com/cryfs/cryfs/issues/4
2016-02-06 13:21:18 +01:00
2016-01-12 14:21:57 +01:00
Version 0.8.5
---------------
* Fix package manager warning when installing the .deb package
2016-01-25 14:33:40 +01:00
* Offer a default configuration when creating new filesystems
2016-01-25 15:01:34 +01:00
* If the given base or mount directory doesn't exist, offer to create them
2016-01-12 14:21:57 +01:00
2015-11-25 15:46:44 +01:00
Version 0.8.4
---------------
2015-12-17 19:50:22 +01:00
* Offering .deb packages for Debian and Ubuntu
2015-11-25 15:46:44 +01:00
* Compatibility with 32bit systems
2015-12-11 00:27:26 +01:00
* Support files larger than 4GB
2015-11-25 15:46:44 +01:00
2015-11-19 10:09:00 +01:00
Version 0.8.3
---------------
2016-01-25 14:33:40 +01:00
* Ask for password confirmation when creating new filesystem
2015-11-23 17:44:54 +01:00
* Check for new CryFS versions and ask the user to update if a new version is available
* Implemented a mechanism that can show warnings about security bugs to users of a certain CryFS version. Let's hope this won't be necessary ;)
2015-11-24 14:43:20 +01:00
* Compatibility with GCC 4.8 (that allows compiling on Ubuntu 14.04 for example)
2015-11-19 10:09:00 +01:00
2015-11-17 10:49:35 +01:00
Version 0.8.2
---------------
2016-01-25 14:33:40 +01:00
* Mount directory, base directory, logfile and config file can be specified as relative paths
* Improved error messages
2015-11-17 10:49:35 +01:00
2015-10-24 19:56:19 +02:00
Version 0.8.1
---------------
2015-11-11 10:23:45 +01:00
* Config File Encryption: Configuration files are encrypted with two ciphers. The user specifies a password, which is then used with the scrypt KDF to generate the two encryption keys.
- Inner level: Encrypts the config data using the user specified cipher.
- Outer level: Encrypts the name of the inner cipher and the inner level ciphertext using aes-256-gcm.
The config file is padded to hide the size of the configuration data (including the name of the cipher used).
2015-11-11 20:02:10 +01:00
* No external config file needed: If the configuration file is not specified as command line parameter, it will be put into the base directory. This way, the filesystem can be mounted with the password only, without specifying a config file on command line.
2015-10-28 11:29:36 +01:00
* Logfiles: Added a --logfile option to specify where logs should be written to. If the option is not specified, CryFs logs to syslog.
* Running in Background: Fixed daemonization. When CryFs is run without "-f" flag, it will run in background.
2015-10-30 19:53:15 +01:00
* Better error messages when base directory is not existing, not readable or not writeable.
* Allow --cipher=xxx to specify cipher on command line. If cryfs is creating a new filesystem, it will use this cipher. If it is opening an existing filesystem, it will check whether this is the cipher used by it.
2015-11-03 21:22:35 +01:00
* --show-ciphers shows a list of all supported ciphers
2015-11-11 10:23:45 +01:00
* --extpass allows using an external program for password input
2015-11-13 00:06:53 +01:00
* --unmount-idle x automatically unmounts the filesystem after x minutes without a filesystem operation.
