Hacker News new | ask | show | jobs
by tptacek 2362 days ago
It's so weird hearing what people are doing instead of PGP, and how bad it is. I had no idea vim even had this feature, but from what I've discovered in about 3 minutes of Googling, vim's "blowfish2" is the 64-bit-block Blowfish cipher in unauthenticated CFB mode. Just awful: Blowfish is weak, and attackers can manipulate the ciphertext of your files. This is why you want `age`.
2 comments

Trying to unfuck vim's encryption spawned a very interesting Github thread, if anyone is interested: https://github.com/vim/vim/issues/638
Damn, the Vim developers seem to be a particularly unpleasant group of people.
Welp, I'm switching to neovim.
Just… wow.
I learned about this vi feature the hard way—by accidentally encrypting something important with no idea about what I had typed in as the key.

Luckily for me, vi defaulted to Enigma encryption back then…