I have a file which I edit and encrypt following this guide. I'm a noob as far as security goes and thought that the point of including the line which specifies the cryptographic key to use
-*- mode: org -*- -*- epa-file-encrypt-to: ("[email protected]") -*-
would therefore require me (specified by my email) to enter in my passphrase. However, it seems that I'm doing things wrong as I'm instead doing symmetric encryption instead. I know I'm doing symmetric encryption because I am never prompted for [email protected]'s passphrase. I can list the keys in emacs and my email shows up in the list when I "M-x epa-list-keys"
Can someone point out where I'm going wrong such that I can use my passphrase to encrypt the files? I want to prevent locking myself out by accidentally encrypting the file with a new password, which sadly has happened. :( And from what I've read so far, cracking the file is dang near impossible.
For completeness sake here is my .emacs file
(require 'whitespace)
(setq whitespace-style (quote (spaces tabs newline space-mark tab-mark newline-mark)))
;; EasyPG
(require 'epa)
(epa-file-enable)
(defadvice epg--start (around advice-epg-disable-agent disable)
"Make epg--start not able to find a gpg-agent"
(let ((agent (getenv "GPG_AGENT_INFO")))
(setenv "GPG_AGENT_INFO" nil)
ad-do-it
(setenv "GPG_AGENT_INFO" agent)))
;;(setenv "GPG_AGENT_INFO" pinentry)))
(defun epg-disable-agent ()
"Make EasyPG bypass any gpg-agent"
(interactive)
(ad-enable-advice 'epg--start 'around 'advice-epg-disable-agent)
(ad-activate 'epg--start)
(message "EasyPG gpg-agent bypassed"))
(defun epg-enable-agent ()
"Make EasyPG use a gpg-agent after having been disabled with epg-disable-agent"
(interactive)
(ad-disable-advice 'epg--start 'around 'advice-epg-disable-agent)
(ad-activate 'epg--start)
(message "EasyPG gpg-agent re-enabled"))
;;added to overcome bug in gnupg2 in Arch linux as pointed out here: http://www.emacswiki.org/emacs/EasyPG
(when (file-executable-p "/usr/bin/gpg1")
(setq epg-gpg-program "/usr/bin/gpg1"))
`