Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I used to use Apple's Keychain to store passwords, but I got tired of trying to figure out how to transfer them when I changed computers, so I switched to using a text file encrypted with gpg symmetric encryption:

$ gpg --symmetric my_passwords.txt

Is this any less secure than the Keychain app?

The file has 0600 permissions, and it seems like even if I was using gpg w/ a public/private key, if someone got access to the my_passwords.txt file they'd have access to my private key anyway.

share|improve this question
add comment

2 Answers

up vote 2 down vote accepted

As far as I know, PGP encryption has never been broken.

So my answer would be: PGP is as least as pretty good as Apple's Keychain.

share|improve this answer
    
ha! funny pun :) –  Michael Pryor Jun 25 '10 at 12:58
    
    
@Johannes Rössel: Sorry - will try to improve in the future. –  harrymc Jun 25 '10 at 13:38
    
Tropes aren't bad ;-) –  Јοеу Jun 25 '10 at 20:07
add comment

The default symmetric cipher used by gpg is CAST5 while Mac OS X encryption tools (File Vault) use 128-bit AES cipher.

Both ciphers are considered secure against "cryptographic breaks" so their security for encription is related only to the security of the password.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.