EncFS Security Audit

EncFS Security Audit: This report is the result of a paid 10-hour security audit of EncFS. It has been posted to the EncFS mailing list, so check there for follow-up. I feel that full disclosure is the best approach for disclosing these vulnerabilities, since some of the issues have already been disclosed but haven’t been fixed, and by disclosing them, users can immediately re-evaluate their use of EncFS.