libgocryptfs/Documentation/file-format.md

File Format
===========

Header

	 2 bytes header version (big endian uint16, currently 2)
	16 bytes file id

Data block, default AES-GCM mode

	16 bytes GCM IV (nonce)
	1-4096 bytes encrypted data
	16 bytes GHASH

Data block, AES-SIV mode (used in reverse mode, or when explicitly enabled with `-init -aessiv`)

	16 bytes nonce
	16 bytes SIV
	1-4096 bytes encrypted data

Data block, XChaCha20-Poly1305 (enabled via `-init -xchacha`)

	24 bytes nonce
	1-4096 bytes encrypted data
	16 bytes Poly1305 tag

Full block overhead (AES-GCM and AES-SIV mode) = 32/4096 = 1/128 = 0.78125 %

Full block overhead (XChaCha20-Poly1305 mode) = 40/4096 = \~1 %

Example: 1-byte file, AES-GCM and AES-SIV mode
----------------------------------------------

	Header     18 bytes
	Data block 33 bytes

Total: 51 bytes

Example: 5000-byte file, , AES-GCM and AES-SIV mode
---------------------------------------------------

	Header       18 bytes
	Data block 4128 bytes
	Data block  936 bytes

Total: 5082 bytes

Example: 1-byte file, XChaCha20-Poly1305 mode
----------------------------------------------

	Header     18 bytes
	Data block 41 bytes

Total: 59 bytes

Example: 5000-byte file, XChaCha20-Poly1305 mode
----------------------------------------------

	Header       18 bytes
	Data block 4136 bytes
	Data block  944 bytes

Total: 5098 bytes