As for ECB vs CBC, I recommend reading https://github.com/shadowhand/git-encrypt/issues/2 which cover both ECB and fixed salts in depth.