nextcloud-server

Commit Graph

Author	SHA1	Message	Date
jld3103	2f653c8be8	Cleanup signature checking logic in encryption Signed-off-by: jld3103 <jld3103yt@gmail.com>	3 years ago
Côme Chilliet	430009b8e2	Add a test for multiKeyEncrypt/Decrypt methods Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Côme Chilliet	8900d030d1	Adapt code to new encryption system fileKey gets deleted upon save as it’s stored in shareKeys instead now. We use presence of a fileKey to detect if a file is using the legacy system or the new one, because we do not always have access to header data. Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Côme Chilliet	fbe282caeb	Getting rid of openssl_seal and rc4 in server side encryption Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Côme Chilliet	f2912ce8bc	Set functions as private to be able to refactor later Also a few comment fixes Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Côme Chilliet	71482576ad	Move to phpseclib implementation of RC4 Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Côme Chilliet	bd626e3693	Strong type custom openssl_seal implementation Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Côme Chilliet	deed6393fb	Always wrap rc4, and throws on unknown cipher Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Kevin Niehage	81638436e5	introduce wrapped_openssl_seal() and wrapped_openssl_open() to circument RC4 problems with OpenSSL v3 Signed-off-by: Kevin Niehage <k.niehage@syseleven.de>	3 years ago
Côme Chilliet	7ebbb6b2ca	Remove workarounds specific to 7.4 Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
Côme Chilliet	9430899f16	Fix psalm issues related to signature changes from PHP 8.0 Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>	3 years ago
J0WI	71e490090f	Replace getSystemValue in encryption app Signed-off-by: J0WI <J0WI@users.noreply.github.com>	3 years ago
plumbeo	1258caeab7	Save encrypted files in binary format Default to the more space-efficient binary encoding for newly encrypted files instead of the traditional base64 encoding, eliminating the 33% overhead. The new option 'encryption.use_legacy_encoding' allows to force the legacy encoding format if needed. Files encoded in the old format remain readable. Based on https://github.com/owncloud/encryption/pull/224 and https://github.com/owncloud/core/pull/38249 by karakayasemi. Signed-off-by: plumbeo <plumbeo@users.noreply.github.com>	4 years ago
Carl Schwan	aeecb72e96	Fix a few psalm issues and moved back to psalm/phar 4.18 Signed-off-by: Carl Schwan <carl@carlschwan.eu>	4 years ago
J0WI	c694b9d52b	Remember current cipher Signed-off-by: J0WI <J0WI@users.noreply.github.com>	5 years ago
John Molakvoæ (skjnldsv)	215aef3cbd	Update php licenses Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	5 years ago
J0WI	e617361250	Use constant for supported formats Signed-off-by: J0WI <J0WI@users.noreply.github.com>	5 years ago
J0WI	21494a5b7b	Drop OpenSSL 0.9.8 workaround Signed-off-by: J0WI <J0WI@users.noreply.github.com>	5 years ago
Roeland Jago Douma	b3037dee6a	FIXME use default RC4 method * We should pick better default method! Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	5 years ago
Roeland Jago Douma	98eede7f68	Fix encryption test Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	5 years ago
Christoph Wurst	b2de9a6f9e	The encryption decrypt position can be int or string The public API said string, internally we treated it as int. In reality both are used. Let's reflect that in the documented argument type. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	5 years ago
Christoph Wurst	2a054e6c04	Update the license headers for Nextcloud 20 Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	5 years ago
Roeland Jago Douma	8928bbe969	Make legacy cipher opt in * Systems that upgrade have this enabled by default * New systems disable it * We'll have to add some wargning in the setup checks if this is enabled Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	5 years ago
Roeland Jago Douma	9975b80d41	SSE enhancement Do not blind concatenate ints. Lets add a _ between them. So that we can distrinquis them properly Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	5 years ago
Christoph Wurst	cb057829f7	Update license headers for 19 Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	28f8eb5dba	Add visibility to all constants Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	caff1023ea	Format control structures, classes, methods and function To continue this formatting madness, here's a tiny patch that adds unified formatting for control structures like if and loops as well as classes, their methods and anonymous functions. This basically forces the constructs to start on the same line. This is not exactly what PSR2 wants, but I think we can have a few exceptions with "our" style. The starting of braces on the same line is pracrically standard for our code. This also removes and empty lines from method/function bodies at the beginning and end. Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	14c996d982	Use elseif instead of else if Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	41b5e5923a	Use exactly one empty line after the namespace declaration For PSR2 Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Christoph Wurst	5bf3d1bb38	Update license headers Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Roeland Jago Douma	68748d4f85	Some php-cs fixes * Order the imports * No leading slash on imports * Empty line before namespace * One line per import * Empty after imports * Emmpty line at bottom of file Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	6 years ago
Bjoern Schiessle	34d4c2bc16	improve variable naming Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>	7 years ago
Bjoern Schiessle	8796c6bc78	in case 'encryption_skip_signature_check' was set to true we accept if the file doesn't has a signature Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>	7 years ago
Bjoern Schiessle	7a61ffc3dd	Allow to disable the signature check This allows you to recover encryption files even if the signature is broken Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>	7 years ago
Stefan Weiberg	375f167c67	Adding a check to see if keyFileContents is empty: * this fixes a download error and an exception if the data content for encryption is empty * #3958: for recovering encrypted files with a damaged signature this is necessary in addition to turning the signature check off Signed-off-by: Stefan Weiberg <sweiberg@suse.com>	7 years ago
Morris Jobke	e2974f1133	Simplify return statement Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Morris Jobke	464f024fa9	Use stripos instead of strpos(strtolower(), 'something') Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Morris Jobke	0eebff152a	Update license headers Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Joas Schilling	0ebdf871e0	Fix comparisons in encryption app Signed-off-by: Joas Schilling <coding@schilljs.com>	9 years ago
Morris Jobke	1729e4471f	Update comments to Nextcloud * based on PR by @Ardinis * see #4311 Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Bjoern Schiessle	9ce32d9941	always throw a encryption exception Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>	9 years ago
Joas Schilling	813f0a0f40	Fix apps/	10 years ago
Lukas Reschke	aba539703c	Update license headers	10 years ago
Joas Schilling	4a3311f430	Move Encryption app to PSR-4 (#24524 ) * Move Encryption to PSR-4 * Move encryption tests to PSR-4 * Fix the tests	10 years ago
Lukas Reschke	3a5f58c9b0	Fallback for crappy ancient distributions Fixes https://github.com/owncloud/core/issues/23181	10 years ago
Lukas Reschke	c353d51810	Remove Scrutinizer Auto Fixer	10 years ago
Lukas Reschke	3badf5caf5	Use number of chunk for HMAC as well Prevents switching single blocks within the encrypted file.	10 years ago
Lukas Reschke	b5824f024a	Keep track of file version This way it is not possible anymore for an external storage admin to put up old versions of the file.	10 years ago
Lukas Reschke	d5c1596887	Clarify documentation	10 years ago
Lukas Reschke	3b62459c41	Use hash with appended "a" of the original password for the authentication	10 years ago

45 Commits (00d6a6f514b80aac6bdf044cdf71251caff3f46b)