Initial work on Ocrypt integration

Open waywardgeek opened this issue 6 months ago • 1 comments

I'll need feedback on this PR to get it to the point that it is acceptable to the VeraCrypt authors. This version works in --text mode on Linux when creating and mounting volumes encrypted via Ocrypt. OpenSSL dependency. VeraCrtypt is missing bignum, AES-GCM, HKDF, and elliptic curve support for ed25519. How should I resolve this? E.g. is libnacl acceptably lightweight?

Ocrypt requires network access, making non-compatible with full-disk encryption, and it also has clear metadata I currently store in the header after address 512, defeating plausible deniability. Ocrypt must remember the URLs used to register its secret, so I see no way around this limitation.

The code is currently sloppy. However, it works and is a nice PoC. How should we proceed?

Jul 05 '25 00:07 waywardgeek

@idrassi; Have you seen this @waywardgeek PR?

Nov 14 '25 20:11 Neustradamus