Org-Crypt usage questions

Org-Crypt usage questions

[David Masterson]

I've gotten org-crypt working, but I have some questions:

+ the setup in the manual only automatically *encrypts* on save, not
decrypts on read, correct?
+ decryption is done via org-decrypt-* -- is there another way?
+ after org-decrypt-*, will the entries be automatically encrypted
again or do I have to use org-encrypt-*?
+ after decrypting, can I re-encrypt with a new symmetric password?
+ if I use a symmetric password on org-encrypt-entry, does the password
apply to the whole file or just the entry?
+ The manual needs the above information on org-[de|en]crypt or did I
miss it?

-- 
David Masterson

Re: Org-Crypt usage questions

[Ihor Radchenko]

David Masterson <dsmasterson@gmail.com> writes:

> I've gotten org-crypt working, but I have some questions:
>
> + the setup in the manual only automatically *encrypts* on save, not
> decrypts on read, correct?

Yes. 

> + decryption is done via org-decrypt-* -- is there another way?

M-x org-reveal (C-c C-r)

> + after org-decrypt-*, will the entries be automatically encrypted
> again or do I have to use org-encrypt-*?

They will be encrypted on save as long as they are marked with "crypt"
(or `org-crypt-tag-matcher', if you alter it).

> + after decrypting, can I re-encrypt with a new symmetric password?

Yes. AFAIK, the symmetric password is never reused. Though it may depend
on your gpg settings.

> + if I use a symmetric password on org-encrypt-entry, does the password
> apply to the whole file or just the entry?

Just the entry.

> + The manual needs the above information on org-[de|en]crypt or did I
> miss it?

You are right. Patches are welcome!

-- 
Ihor Radchenko,
Org mode contributor,
Learn more about Org mode at https://orgmode.org/.
Support Org development at https://liberapay.com/org-mode,
or support my work at https://liberapay.com/yantar92

Re: Org-Crypt usage questions

[David Masterson]

Ihor Radchenko <yantar92@gmail.com> writes:

> David Masterson <dsmasterson@gmail.com> writes:
>
>> I've gotten org-crypt working, but I have some questions:
>>
>> + after decrypting, can I re-encrypt with a new symmetric password?
>
> Yes. AFAIK, the symmetric password is never reused. Though it may depend
> on your gpg settings.

Hmm.  During the save of a file with an entry with "crypt" tag, I was
asked for a symmetric passwd.  The file was saved okay and the entry was
encrypted properly.  After reading the file back in, org-decrypt-entry
asked for the symmetric passwd and decrypted properly.  Later,
org-encrypt-entry did *not* ask for the passwd -- it just encrypted with
the previous passwd.  Then org-decrypt-entry also did *not* ask for the
passwd and decrypted properly.

What GPG settings would cause this?

-- 
David Masterson

Re: Org-Crypt usage questions

[Ihor Radchenko]

David Masterson <dsmasterson@gmail.com> writes:

>> Yes. AFAIK, the symmetric password is never reused. Though it may depend
>> on your gpg settings.
>
> Hmm.  During the save of a file with an entry with "crypt" tag, I was
> asked for a symmetric passwd.  The file was saved okay and the entry was
> encrypted properly.  After reading the file back in, org-decrypt-entry
> asked for the symmetric passwd and decrypted properly.  Later,
> org-encrypt-entry did *not* ask for the passwd -- it just encrypted with
> the previous passwd.  Then org-decrypt-entry also did *not* ask for the
> passwd and decrypted properly.
>
> What GPG settings would cause this?

Probably https://www.gnu.org/software/emacs/manual/html_node/pgg/Caching-passphrase.html


-- 
Ihor Radchenko,
Org mode contributor,
Learn more about Org mode at https://orgmode.org/.
Support Org development at https://liberapay.com/org-mode,
or support my work at https://liberapay.com/yantar92