Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The state of things isn't great IMHO. Im not sure I trust any of EncFS, CryFS, and gocryptfs.

Many leak metadata and/or have serious security concerns.





Metadata leakage is a fundamental issue when you go from block to object. I can think of some schemes that would help but they’re all kinda nasty lol

Of course, and I didnt intend to downplay the efforts of those projects. Just pointing out that they don't meet the requirements of most threat models.

Can you detail the current metadata and security problems with CryFS? Do they also extend/apply to securefs?



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: