Christian Brabandt wrote:
> On So, 10 Aug 2014, Bram Moolenaar wrote:
>
> > Patch 7.4.399
> > Problem: Encryption implementation is messy. Blowfish encryption has a
> > weakness.
> > Solution: Refactor the encryption, store the state in an allocated struct
> > instead of using a save/restore mechanism. Introduce the
> > "blowfish2" method, which does not have the weakness and encrypts
> > the whole undo file. (largely by David Leadbeater)
>
> Perhaps, we should disallow to set the encryption method to the old/weak
> blowfish algorithm (or at least issue an error message here)? That
> should allow to still read old files, but should encourage users to use
> the new method.
It's a bit tricky. When sharing a file between different computers some
may not have the new Vim version yet. Perhaps after a year or so we
could discourage writing with the old blowfish method.
We also still support the very old "zip" encryption, should we disable
writing with that now? Or discourage it, e.g. by prompting for
confirmation (would break scripts though).
--
In many of the more relaxed civilizations on the Outer Eastern Rim of the
Galaxy, "The Hitchhiker's Guide to the Galaxy" has already supplanted the
great "Encyclopedia Galactica" as the standard repository of all knowledge
and wisdom, for though it has many omissions and contains much that is
apocryphal, or at least wildly inaccurate, it scores over the older, more
pedestrian work in two important respects.
First, it is slightly cheaper; and second, it has the words "DON'T PANIC"
inscribed in large friendly letters on its cover.
-- Douglas Adams, "The Hitchhiker's Guide to the Galaxy"
/// Bram Moolenaar -- [email protected] -- http://www.Moolenaar.net \\\
/// sponsor Vim, vote for features -- http://www.Vim.org/sponsor/ \\\
\\\ an exciting new programming language -- http://www.Zimbu.org ///
\\\ help me help AIDS victims -- http://ICCF-Holland.org ///
--
--
You received this message from the "vim_dev" maillist.
Do not top-post! Type your reply below the text you are replying to.
For more information, visit http://www.vim.org/maillist.php
---
You received this message because you are subscribed to the Google Groups
"vim_dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
