package metadata

Get desktop application:
View/edit binary Protocol Buffers messages

Data stored in the config file

• SourceType source = 1

• optional HashingCosts hash_costs = 2

• optional EncryptionOptions options = 4

• bool use_fs_keyring_for_v1_policies = 5

• bool allow_cross_user_metadata = 6

Encryption policy specifics, corresponds to the fscrypt_policy struct

Used in: Config, PolicyData

• int64 padding = 1

• EncryptionOptions.Mode contents = 2

• EncryptionOptions.Mode filenames = 3

• int64 policy_version = 4

Type of encryption; should match declarations of unix.FSCRYPT_MODE

Used in: EncryptionOptions

• default = 0

• AES_256_XTS = 1

• AES_256_GCM = 2

• AES_256_CBC = 3

• AES_256_CTS = 4

• AES_128_CBC = 5

• AES_128_CTS = 6

• Adiantum = 9

• AES_256_HCTR2 = 10

Cost parameters to be used in our hashing functions.

Used in: Config, ProtectorData

• int64 time = 2

• int64 memory = 3

• int64 parallelism = 4

• bool truncation_fixed = 5

  If true, parallelism should no longer be truncated to 8 bits.

The associated data for each policy

• string key_descriptor = 1

• optional EncryptionOptions options = 2

• repeated WrappedPolicyKey wrapped_policy_keys = 3

The associated data for each protector

• string protector_descriptor = 1

• SourceType source = 2

• string name = 3

  These are only used by some of the protector types

• optional HashingCosts costs = 4

• bytes salt = 5

• int64 uid = 6

• optional WrappedKeyData wrapped_key = 7

Specifies the method in which an outside secret is obtained for a Protector

Used in: Config, ProtectorData

• default = 0

• pam_passphrase = 1

• custom_passphrase = 2

• raw_key = 3

This structure is used for our authenticated wrapping/unwrapping of keys.

Used in: ProtectorData, WrappedPolicyKey

• bytes IV = 1

• bytes encrypted_key = 2

• bytes hmac = 3

Used in: PolicyData

• string protector_descriptor = 1

• optional WrappedKeyData wrapped_key = 2