encfs icon indicating copy to clipboard operation
encfs copied to clipboard

question: is it safe that save encrypt data and .encfs6.xml in a place that other can get

Open askgh opened this issue 3 years ago • 1 comments

if i save encrypt data and .encfs6.xml in a place that other can get. and the other can't get my password key

is it safe?

thanks

askgh avatar Jan 13 '22 12:01 askgh

@askgh Read the EncFS security audit. The known security issue related to the configuration file is that an adversary can disable the validation of MACs, allowing them to overwrite ciphertext without user knowledge. An adversary would not be able to read the decrypted data as the key is still protected by your password, but they could change (almost certainly randomly) the file contents without your knowledge.

hrunting avatar Nov 11 '22 17:11 hrunting