Am 2015-02-13 08:48, schrieb might1:
Because of the interesting vim encryption capability, I tried both vim
7.4.608 downloaded from
http://sourceforge.net/projects/cream/files/Vim/ and vim 7.4
downloaded from www.vim.org. I tried both of vim 7.4.608's blowfish2
and vim 7.4's blowfish, all failed to encrypt a large text file(24MB).
The platform is Windows XP 32bit. At first time, I got an error of
many lines 'E831： bf_key_init()...empty password' but I really had
entered password twice. Then I quitted and re-opened that big file,
the encryption appeared successful without error out. But the
encrypted file both growed to over 100MB. After decryption, its size
remained over 100MB, which was nearly entirely different from the
original except that several head lines are same. When I tried a small
text file(about 1MB), the encryption and decryption are both ok. So,
if there is a file size limit for vim to encrypt with blowfish[2]? I
attached(is that possible?) that compressed big file whose size is now
about 4MB for you to test.
Can you reproduce this starting from vim -u NONE -N?
I have only a windows plain 7.4 version available, but that did
successfully encrypt using the blowfish cryptmethod your provided file.
At least one more strong encryption method should be implemented in
vim. How about encrypting with one strong method an encrypted file
that has already been encryted with another strong one, in which case
user must prepare two differrent passwords for those two methods
respectively? In this way, we can avoid attackers analysing the text
after decryption to see if it looks like words.
Perhaps you want to use a specialized encryption software like gpg
to reencrypt the file afterwards? Bram has already stated, that there
are not many developers that have the skills to implement that securly.
And since Vim is mainly a text editor, I do not see the sense in adding
another strong encryption method.
Best,
Christian
--
--
You received this message from the "vim_use" maillist.
Do not top-post! Type your reply below the text you are replying to.
For more information, visit http://www.vim.org/maillist.php
---
You received this message because you are subscribed to the Google Groups "vim_use" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
