Cryfs Versions Save

Fixed bugs:

• If file system migration encounters files or folders with the wrong format in the base directory, it now just ignores them instead of crashing.
• When trying to migrate a file system from CryFS 0.9.3 or older, show an error message suggesting to first open it with 0.9.10 because we can't load that anymore.
• The '--unmount-idle' parameter works again
• Fix building with boost 1.67

Compatibility:

• Fixed some incompatibilities with systems using the musl libc
• Use boost::stacktrace instead of libbacktrace to build stack traces. This fixes a segfault issue with platforms using libexecinfo and is generally more portable.

Other:

• Updated to crypto++ 8.1
• Updated to DokanY 1.2.1
• Unit tests can now be run from any directory

New in the 0.10 release series (changes since version 0.9.10)

New Features & Improvements:

• Experimental Windows support
• Integrity checks ensure you notice when someone modifies your file system.
• File system nodes (files, directories, symlinks) store a parent pointer to the directory that contains them. This information can be used in later versions to resolve some synchronization conflicts.
• Allow mounting using system mount tool and /etc/fstab (e.g. mount -t fuse.cryfs basedir mountdir)
• Performance improvements
• Use relatime instead of strictatime (further performance improvement)
• Pass fuse options directly to cryfs (i.e. 'cryfs basedir mountdir -o allow_other' instead of 'cryfs basedir mountdir -- -o allow_other')
• CryFS tells the operating system to lock the encryption key to memory, i.e. not swap it to the disk (note: this is best-effort and cannot be guaranteed. Hibernation, for example, will still write the encryption key to the disk).
• New block size options: 4KB and 16KB
• New default block size: 16KB. This should decrease the size of the ciphertext directory for most users.
• Increased scrypt hardness to (N=1048576, r=4, p=8) to make it harder to crack the key while allowing cryfs to take advantage of multicore machines.
• cryfs-unmount tool to unmount filesystems

Fixed bugs:

• du shows correct file system size on Mac OS X.
• On Mac OS X, Finder shows the correct name for the mount directory

Fixes since 0.10-rc2

• OpenMP for scrypt works now on Windows. This means that the time to mount a file system on Windows is much shorter.
• Release builds don't depend on debug versions of Microsoft Visual C++ libraries anymore
• File system migrations show a progress bar so it's now possible to estimate how long it'll take to finish.
• If a file system migration fails or is interrupted, it will be retried when the file system is mounted the next time.
• Fixed an issue where non-ascii characters in a cryfs file system sometimes were displayed wrongly

New Features & Improvements for the 0.10 release series:

• Experimental Windows support
• Integrity checks ensure you notice when someone modifies your file system.
• File system nodes (files, directories, symlinks) store a parent pointer to the directory that contains them. This information can be used in later versions to resolve some synchronization conflicts.
• Allow mounting using system mount tool and /etc/fstab (e.g. mount -t fuse.cryfs basedir mountdir)
• Performance improvements
• Use relatime instead of strictatime (further performance improvement)
• Pass fuse options directly to cryfs (i.e. 'cryfs basedir mountdir -o allow_other' instead of 'cryfs basedir mountdir -- -o allow_other')
• CryFS tells the operating system to lock the encryption key to memory, i.e. not swap it to the disk (note: this is best-effort and cannot be guaranteed. Hibernation, for example, will still write the encryption key to the disk).
• New block size options: 4KB and 16KB
• New default block size: 16KB. This should decrease the size of the ciphertext directory for most users.
• Increased scrypt hardness to (N=1048576, r=4, p=8) to make it harder to crack the key while allowing cryfs to take advantage of multicore machines.
• cryfs-unmount tool to unmount filesystems

Fixed bugs:

• du shows correct file system size on Mac OS X.
• On Mac OS X, Finder shows the correct name for the mount directory

Fixes since 0.10-rc1

• Implement cryfs-unmount for unmounting filesystems
• Compatible with older Windows versions back to Windows 7
• When an error happens, print the numeric error code to the console
• Exit with correct error code when an integrity violation happens while the file system is already running
• Fixed occasional deadlock (https://github.com/cryfs/cryfs/issues/64)
• Fix for reading empty files out of bounds
• Fixed race condition (https://github.com/cryfs/cryfs/issues/224 and https://github.com/cryfs/cryfs/issues/243)
• Improve exception safety (i.e. try to unmount cleanly even if things go awry)
• Update to crypto++ 8.0. This fixes an bug where non-AESNI CPUs on Windows decrypted incorrectly
• Fix creation of relative symlinks ( https://github.com/cryfs/cryfs/issues/244 )
• Windows: Allow mounting to drive letters instead of existing folders

Note: Please prefer the .deb included in your linux distributions to the .deb packages offered here. Just do:

sudo apt-get install cryfs

Fixed bugs:

• Fixed occasional deadlock (https://github.com/cryfs/cryfs/issues/64)
• Fix for reading empty files out of bounds
• Fixed race condition (https://github.com/cryfs/cryfs/issues/224 and https://github.com/cryfs/cryfs/issues/243)

Note: Please prefer the .deb included in your linux distributions to the .deb packages offered here. Just do:

sudo apt-get install cryfs

Improvements:

• Add --allow-filesystem-upgrade option which will upgrade old file systems without asking the user. This will be especially helpful for GUI tools.
• Add --version option that shows the CryFS version and exits.
• When CryFS fails to load a file system, the process stops with a helpful error code, which can be used by GUI tools to show detailed messages.
• Only migrate a file system if the underlying storage format changed

Note: Please prefer the .deb included in your linux distributions to the .deb packages offered here. Just do:

sudo apt-get install cryfs

Compatibility

• Runs on Debian with FreeBSD kernel
• Runs on FreeBSD 11.1
• Works with Crypto++ 6.0

Improvements

• added a man page

Fixed bugs

• du shows correct file system size
• Updated spdlog dependency to fix build on newer systems

Compatibility:

• Runs on FreeBSD
• Works with Clang++ 3.8 (Debian experimental or newer Ubuntu systems)
• Works with GCC 7

Fixed bugs:

• Fix potential deadlock
• Fix potential crash

Improvements:

• Allow building with -DCRYFS_UPDATE_CHECKS=off, which will create an executable with disabled update checks (the alternative to disable them in the environment also still works).
• Automatically disable update checks when running in noninteractive mode.
• More detailed error reporting if key derivation fails

Compatibility:

• Compatible with libcurl version >= 7.50.0, and <= 7.21.6 (tested down to 7.19.0)
• Compatible with Crypto++ 5.6.4
• Compatible with compilers running under hardening-wrapper