CreateConfFile - create a new config with a random key encrypted with "password" and write it to "filename".

LoadConfFile - read config file from disk and decrypt the contained key using password.

ParseHeader - parse "buf" into fileHeader object.

Get "n" random bytes from /dev/urandom or panic.

RandomHeader - create new fileHeader object with random Id.

Return a secure random uint64.

WriteDirIV - create diriv file inside "dir" (absolute ciphertext path) This function is exported because it is used from pathfs_frontend, main, and also the automated tests.

The dot "." is not used in base64url (RFC4648), hence we can never clash with an encrypted file.

identical to AES block size.

Understood Feature Flags.

Current on-disk-format version.

128 bit random file id.

Total header length.

uint16.

AES-256.

1 << 16 uses 64MB of memory, takes 4 seconds on my Atom Z3735F netbook.

Debug messages.

Informational message e.g.

A warning, meaning nothing serious by itself but might indicate problems.

A simple one-entry DirIV cache.