Hacker News new | past | comments | ask | show | jobs | submit login

why not just use openssl or another command line tool?

To encode: openssl aes-256-cbc -a -salt -in secret.zip -out secret.zip.enc

To decode: openssl aes-256-cbc -d -a -in secret.zip.enc -out secret2.zip

That's essentially what I've automated with transcrypt (which uses Git's clean/smudge filters) to do that for you transparently:


and nevermind. The doc explain why (large teams, key sharing, etc)

Maybe when openssl supports gcm or some other authenticated symmetric cipher mode on the command line?

Why not? Why would you want to? Computers exist to make things easier, not harder.

Guidelines | FAQ | Support | API | Security | Lists | Bookmarklet | Legal | Apply to YC | Contact