EncFS Security Audit

This report is the result of a paid 10-hour security audit of EncFS. It has been posted to the EncFS mailing list, so check there for follow-up. I feel that full disclosure is the best approach for disclosing these vulnerabilities, since some of the issues have already been disclosed but haven't been fixed, and by disclosing them, users can immediately re-evaluate their use of EncFS. Thanks to Igo

[kasumani]

EncFS Security Audit This report is the result of a paid 10-hour security audit of EncFS. It has been posted to the EncFS mailing list, so check there for follow-up. Tags: from Pocket March 18, 2014 at 03:29PM via IFTTT

[tmatsuu]

暗号化ファイルシステムEncFSは、現在の暗号理論の標準的な手法を使っておらず、条件が重なれば脆弱な実装と言える。現在実装中の次期バージョン2.0に期待。