Con Kolivas
|
fd9bbfe64a
|
One last check on limit.
|
2011-03-21 07:33:35 +11:00 |
|
Con Kolivas
|
738cde54ed
|
More BE fixes.
|
2011-03-20 22:31:38 +11:00 |
|
Con Kolivas
|
77d44ce108
|
Disable output when it's not known. More endian fixes.
|
2011-03-20 22:22:54 +11:00 |
|
Con Kolivas
|
f87528d14d
|
Forgot to include salt length for next head.
|
2011-03-20 17:01:33 +11:00 |
|
Con Kolivas
|
30b70dc884
|
Fixes for non little endian machines.
|
2011-03-20 16:16:38 +11:00 |
|
Con Kolivas
|
1ade3bcc2f
|
Update file format information for encrypted files.
|
2011-03-20 15:55:09 +11:00 |
|
Con Kolivas
|
0dad7dcc5a
|
Modify the encrypted version to not write down the rzip chunk size, then keep track of where each block header is written, go back and write 8 bytes of salt before it and encrypt the headers in place.
|
2011-03-20 15:45:44 +11:00 |
|
Con Kolivas
|
e7d33e82d0
|
Make read_1g able to read from the tmp outbuf if we decide to read from fd_out.
|
2011-03-19 14:46:06 +11:00 |
|
Con Kolivas
|
ff5a5ed054
|
Use separate lrz_encrypt and lrz_decrypt wrappers to lrz_crypt.
|
2011-03-19 14:04:22 +11:00 |
|
Con Kolivas
|
0b1db75a44
|
Cleanups.
|
2011-03-19 13:53:43 +11:00 |
|
Con Kolivas
|
b11b5a0b5d
|
Need to memset magic to zero to prevent garbage beign written to fields not written.
|
2011-03-19 01:16:21 +11:00 |
|
Con Kolivas
|
1b05ad0750
|
Update READMEs.
|
2011-03-19 00:31:17 +11:00 |
|
Con Kolivas
|
53a6dfd723
|
Add manpage entry for encryption option.
|
2011-03-18 23:38:02 +11:00 |
|
Con Kolivas
|
63fb1bafea
|
Modify the file format further to make all block header information only encode the number of bytes determined in chunk_bytes instead of 8 full bytes all the time.
|
2011-03-18 23:18:36 +11:00 |
|
ckolivas
|
5005c2dff5
|
Get rid of extra data in new header and stick to old header size, compacting extra info into existing space.
|
2011-03-18 17:32:47 +11:00 |
|
ckolivas
|
b8d8ecfe33
|
Fix warnings.
Patch ~ by Serge Belyshev.
|
2011-03-18 10:37:09 +11:00 |
|
ckolivas
|
e856d481bf
|
Discard hash_iv entirely, using passphrase hash and centralise key generation.
Patch by Serge Belyshev.
|
2011-03-18 10:22:58 +11:00 |
|
Con Kolivas
|
a3e80871c2
|
Add 8 bytes of random data to the start of every encrypted compressed block and use it along with 8 bytes from the stored salt to make a unique key and IV for encryption.
|
2011-03-18 00:06:11 +11:00 |
|
ckolivas
|
9049263f6f
|
Make fd_out read/write in preparation for reading, encrypting, and then writing header data back.
|
2011-03-17 17:36:52 +11:00 |
|
ckolivas
|
7cbf870679
|
fdout_seekto will not always be seeking to zero.
|
2011-03-17 17:25:23 +11:00 |
|
ckolivas
|
e78069c0d7
|
Consolidate magic writing to be able to seek to read and encrypt block header data later.
|
2011-03-17 16:59:27 +11:00 |
|
ckolivas
|
d63a9a02ff
|
Use a separate IV for when it is sequentially updated in preparation for encrypting the headers as well.
|
2011-03-17 16:00:57 +11:00 |
|
ckolivas
|
4bc23ee001
|
Centralise where all encryption/decryption is done, and whether to carry over the IV or not.
|
2011-03-17 14:10:58 +11:00 |
|
ckolivas
|
9d496236c5
|
Read remainder of magic information for ver06 files when reading from STDIN.
Refuse to decompress encrypted files from STDIN as well.
|
2011-03-17 13:08:36 +11:00 |
|
ckolivas
|
ae63349e3c
|
We do need to seek to read the MD5 correctly on very small files so support seeking to end and then seek to the md5 start.
|
2011-03-17 11:53:29 +11:00 |
|
ckolivas
|
660243b8dc
|
Pad out first block if less than CBC_LEN and encrypting or else encryption will fail.
|
2011-03-17 11:19:34 +11:00 |
|
ckolivas
|
0fd18f27f5
|
Remove redundant code and check return value of fgets.
|
2011-03-17 09:54:50 +11:00 |
|
Con Kolivas
|
4d72e6d765
|
Apply fixes so that ciphertext matches. Patch courtesy of Serge Belyshev.
|
2011-03-17 07:03:40 +11:00 |
|
Con Kolivas
|
76280ffec5
|
Mlock ivec for it will hold the injection vector.
|
2011-03-17 00:25:15 +11:00 |
|
Con Kolivas
|
a7468ce6e4
|
Fail if block to encrypt ends up being less than one full block for now, and tidy up code.
|
2011-03-16 23:13:09 +11:00 |
|
Con Kolivas
|
c41cfe9e83
|
Some decompression code needs more room so simply allocate u_len for s_buf.
|
2011-03-16 21:48:21 +11:00 |
|
Con Kolivas
|
5fd7c82e1f
|
Implement ciphertext stealing to not have to pad compressed blocks courtesy of Serge Belyshev who saved me hours of debugging thanks!
|
2011-03-16 21:24:05 +11:00 |
|
Con Kolivas
|
f758773cd0
|
Fix one minor leak.
|
2011-03-16 13:29:47 +11:00 |
|
Con Kolivas
|
57944b1d5c
|
Zero, unlock and free ram more strictly.
|
2011-03-16 12:38:10 +11:00 |
|
Con Kolivas
|
b302e6b9ad
|
Better make length a long long int in aes_crypt_cbc just in case.
|
2011-03-16 12:11:22 +11:00 |
|
Con Kolivas
|
7e71d8689f
|
Put carriage returns in right place after password prompts.
|
2011-03-16 11:10:46 +11:00 |
|
Con Kolivas
|
928a0a098a
|
Consolidate padded length throughout.
|
2011-03-16 10:29:16 +11:00 |
|
Con Kolivas
|
bedea4dbec
|
Consolidate cbc padding into a macro.
|
2011-03-16 10:17:48 +11:00 |
|
Con Kolivas
|
ddcc45ebf0
|
Revert "aes_crypt_cbc always returns zero so ignore its return value."
This reverts commit 4314970b0d.
Oops, it can return invalid length.
|
2011-03-16 10:00:20 +11:00 |
|
Con Kolivas
|
2d2a9bc1e9
|
We're freeing the wrong buffer by mistake should decompression fail.
|
2011-03-16 09:50:30 +11:00 |
|
Con Kolivas
|
4314970b0d
|
aes_crypt_cbc always returns zero so ignore its return value.
|
2011-03-16 08:39:05 +11:00 |
|
Con Kolivas
|
519123966a
|
total_read field is no longer used.
|
2011-03-16 08:32:16 +11:00 |
|
Con Kolivas
|
e1af8fb0c0
|
Remove unused functions from aes.c and sha4.c
|
2011-03-16 00:51:28 +11:00 |
|
Con Kolivas
|
5da0633893
|
aes_crypt_cbc will allow you to work on the same buffer, so don't bother allocating a separate buffer.
Allocate slightly more on the buffer that might be used for encryption rather than reallocing.
|
2011-03-16 00:46:39 +11:00 |
|
Con Kolivas
|
f61632670e
|
Encrypt the md5 value as well to make the file unidentifiable.
|
2011-03-16 00:29:10 +11:00 |
|
Con Kolivas
|
bf1c1ababc
|
Support correct seeking when doing get_fileinfo on encrypted archives.
|
2011-03-16 00:04:44 +11:00 |
|
Con Kolivas
|
c5938c6a8b
|
Implement the actual aes cbc encryption and decryption.
|
2011-03-15 23:52:39 +11:00 |
|
Con Kolivas
|
acb023988f
|
Generate sha512 hash and hash iv required to encrypt based on password, timestamp, loops and random salt.
|
2011-03-15 21:18:29 +11:00 |
|
Con Kolivas
|
bc86829763
|
Modify aes and sha from polar to build into lrzip.
|
2011-03-15 20:22:26 +11:00 |
|
Con Kolivas
|
ff4b8303a7
|
Import aes and sha2 libraries from polarssl code.
|
2011-03-15 20:07:15 +11:00 |
|