3 ms·
I was naive about vims encryption. I did not realize that an encryption key is not the same as a password. It is much more feasible to brute force vim's encry
by mongol 3y ago
I was naive about vims encryption. I did not realize that an encryption key is not the same as a password. It is much more feasible to brute force vim's encryption than to brute force a login for example. And if I am not mistaken the feature has been removed from vim now.
- zlg_codes 3y agoOh I see, is this part of Vim's built-in stuff? I had no idea Vim could do that, so I used the vim-gnupg plugin to call out to `gpg` on the command line. It's possible that the plain contents of the file are in RAM while the buffer is being worked on, but I haven't taken a look at memory layouts to see how easy it would be to extract a key or buffer contents.
- mongol 3y agoYes it was called vimcrypt or something like that. The difference compared with gpg is (among other things) that with vimcrypt you could use an arbitrarily short key, say 12 characters, like a password is long. That is much too short to be secure.