Transparent Git Encryption

#1

Post by shadowhand » Thu, Mar 17, 2011, 5:39 AM UTC

Transparent Git Encryption
github.com

Re: Transparent Git Encryption

#2

Post by js2 » Thu, Mar 17, 2011, 6:07 AM UTC

Please see the discussion on the git list where Junio recommends against this technique:

http://thread.gmane.org/gmane.comp.version-control.git/11312...

Also, I notice you're using ECB. Shouldn't CBC be used?

Re: Transparent Git Encryption

#3

Post by shadowhand » Thu, Mar 17, 2011, 6:06 PM UTC

js2 wrote: post #2

Please see the discussion on the git list where Junio recommends against this technique: http://thread.gmane.org/gmane.comp.version-control.git/11312... Also, I notice you're using ECB. Shouldn't CBC be used?

I have read that post and agree with him in principle, but it should be up the end user to decide if they want to use this.

As for ECB vs CBC, I recommend reading https://github.com/shadowhand/git-encrypt/issues/2 which cover both ECB and fixed salts in depth.