Jakob Unterwurzacher
|
1caa925868
|
Increase GCM IV size from 96 to 128 bits
This pushes back the birthday bound for collisions to make it virtually
irrelevant.
|
2015-12-19 15:02:29 +01:00 |
|
Jakob Unterwurzacher
|
f4ae0304af
|
opensslGCM: preallocate buffer space, improves performance by 11%
Results of cryptfs/openssl_benchmark.bash :
Before:
BenchmarkEnc_OpenSSL_4k_AES256_nonce96-2 50000 31802 ns/op 127.28 MB/s
BenchmarkEnc_OpenSSL_4k_AES256_nonce128-2 50000 32110 ns/op 126.06 MB/s
After:
BenchmarkEnc_OpenSSL_4k_AES256_nonce96-2 50000 28612 ns/op 141.47 MB/s
BenchmarkEnc_OpenSSL_4k_AES256_nonce128-2 50000 28613 ns/op 141.47 MB/s
|
2015-12-08 13:22:57 +01:00 |
|
Jakob Unterwurzacher
|
a3d286069f
|
Use block number as authentication data
|
2015-10-06 22:27:37 +02:00 |
|
Jakob Unterwurzacher
|
5c6df49067
|
Switch to AES-256
AES-256 seems to be becoming the industry standard. While AES-128 is
good enough for tens of years to come, let's follow suit and be extra
safe.
|
2015-10-06 20:51:35 +02:00 |
|
Jakob Unterwurzacher
|
53ecebc71e
|
openssl AEAD wrapper: handle authenticated data
|
2015-10-04 23:58:22 +02:00 |
|
Jakob Unterwurzacher
|
89fef80d32
|
Run go fmt
|
2015-10-04 14:49:47 +02:00 |
|
Jakob Unterwurzacher
|
58d1e24b7c
|
Add OpenSSL support for file content encryption/decryption
This brings streaming read performance from 30MB/s to 81MB/s
(similar improvement for writes)
|
2015-09-06 10:42:34 +02:00 |