I am looking for a secure way to edit sensitive text data, using Git and Vim in the process.
An ideal solution would be:
- clone the encrypted git repository into memory;
- decrypt into memory;
- do the editing, in-memory;
- encrypt, in-memory;
- push back to the repository;
- remove from memory.
How can this setup be realized with the key requirement that no files ever touch persistent storage?
In my case, I'm using Windows 10, but I'm also interested how one would approach this on Linux.
RAMDisk Solved the in-memory part of the problem.
I'm currently looking into preventing the data from getting on disk, like @StevenUllrich mentioned in the comments, by using an encrypted swap- or page file.