Re: Blowfish[2] failed to encrypt big text file of 24MB

Am 2015-02-13 08:48, schrieb might1:
> Because of the interesting vim encryption capability, I tried both vim
> 7.4.608 downloaded from
> http://sourceforge.net/projects/cream/files/Vim/ and vim 7.4
> downloaded from www.vim.org. I tried both of vim 7.4.608's blowfish2
> and vim 7.4's blowfish, all failed to encrypt a large text file(24MB).
> The platform is Windows XP 32bit. At first time, I got an error of
> many lines 'E831： bf_key_init()...empty password' but I really had
> entered password twice. Then I quitted and re-opened that big file,
> the encryption appeared successful without error out. But the
> encrypted file both growed to over 100MB. After decryption, its size
> remained over 100MB, which was nearly entirely different from the
> original except that several head lines are same. When I tried a small
> text file(about 1MB), the encryption and decryption are both ok. So,
> if there is a file size limit for vim to encrypt with blowfish[2]? I
> attached(is that possible?) that compressed big file whose size is now
> about 4MB for you to test.


Can you reproduce this starting from vim -u NONE -N?
I have only a windows plain 7.4 version available, but that did
successfully encrypt using the blowfish cryptmethod your provided file.

> At least one more strong encryption method should be implemented in
> vim. How about encrypting with one strong method an encrypted file
> that has already been encryted with another strong one, in which case
> user must prepare two differrent passwords for those two methods
> respectively? In this way, we can avoid attackers analysing the text
> after decryption to see if it looks like words.

Perhaps you want to use a specialized encryption software like gpg
to reencrypt the file afterwards? Bram has already stated, that there
are not many developers that have the skills to implement that securly.
And since Vim is mainly a text editor, I do not see the sense in adding
another strong encryption method.

Best,
Christian

--
--
You received this message from the "vim_use" maillist.
Do not top-post! Type your reply below the text you are replying to.
For more information, visit http://www.vim.org/maillist.php

---
You received this message because you are subscribed to the Google Groups "vim_use" group.
To unsubscribe from this group and stop receiving emails from it, send an email to vim_use+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.