github cryfs/cryfs 0.10-rc1

New Features & Improvements for the 0.10 release series:

  • Experimental Windows support
  • Integrity checks ensure you notice when someone modifies your file system.
  • File system nodes (files, directories, symlinks) store a parent pointer to the directory that contains them. This information can be used in later versions to resolve some synchronization conflicts.
  • Allow mounting using system mount tool and /etc/fstab (e.g. mount -t fuse.cryfs basedir mountdir)
  • Performance improvements
  • Use relatime instead of strictatime (further performance improvement)
  • Pass fuse options directly to cryfs (i.e. 'cryfs basedir mountdir -o allow_other' instead of 'cryfs basedir mountdir -- -o allow_other')
  • CryFS tells the operating system to lock the encryption key to memory, i.e. not swap it to the disk (note: this is best-effort and cannot be guaranteed. Hibernation, for example, will still write the encryption key to the disk).
  • New block size options: 4KB and 16KB
  • New default block size: 16KB. This should decrease the size of the ciphertext directory for most users.
  • Increased scrypt hardness to (N=1048576, r=4, p=8) to make it harder to crack the key while allowing cryfs to take advantage of multicore machines.
  • cryfs-unmount tool to unmount filesystems

Fixed bugs:

  • du shows correct file system size on Mac OS X.
  • On Mac OS X, Finder shows the correct name for the mount directory
latest releases: 0.11.0, 0.10.4, 0.11.0-rc1...
pre-release2 years ago