Hacker News new | ask | show | jobs
by sigzero 4274 days ago
Exactly why I love that it is baked into Vim.
1 comments

Just make sure you're using the latest version and set cryptmethod=blowfish2!

Edit: Actually just use gnupg.vim - as nknighthb has explained the UX is just as good as vim's builtin encryption, and then you don't have to worry that this whole thread about vim's builtin encryption was predicated with "...if implemented properly...", which you certainly can't take for granted.

And then reflect on the fact that you're still using a joke of a "KDF". SHA256 1001 times? Really? (And it doesn't even so much as have provision for upping the number of iterations!)

Like TFA says, don't roll your own crypto. GnuPG exists for a reason.

Not to mention that a large set of keys are known to be reflectively weak under Blowfish:

http://iacr.org/archive/fse2007/45930168/45930168.pdf

And of course there's ciphertext malleability attacks as it's not using authenticated encryption