3 ms·

Exactly why I love that it is baked into Vim.

• agwa 12y ago
  Just make sure you're using the latest version and set cryptmethod=blowfish2! Edit: Actually just use gnupg.vim - as nknighthb has explained the UX is just as good as vim's builtin encryption, and then you don't have to worry that this whole thread about vim's builtin encryption was predicated with "...if implemented properly...", which you certainly can't take for granted.
  • nknighthb 12y ago
    And then reflect on the fact that you're still using a joke of a "KDF". SHA256 1001 times? Really? (And it doesn't even so much as have provision for upping the number of iterations!) Like TFA says, don't roll your own crypto. GnuPG exists for a reason.
    • bascule 12y ago
      Not to mention that a large set of keys are known to be reflectively weak under Blowfish: http://iacr.org/archive/fse2007/45930168/45930168.pdf http://iacr.org/archive/fse2007/45930168/45930168.pdf And of course there's ciphertext malleability attacks as it's not using authenticated encryption