Environment

x86 Linux

Description

PGP had a feature where you could put your passphrase in an environment variable and then you could decrypt files without being prompted. Of course this was dangerous on a multi-user machine, because other users could conceivably see your passphrase through the mechanisms used by the "ps" command; also, the shell could leave the env var in swap space, etc. But in a single-user machine with swap space turned off, it is perfectly safe.

If you have 100 files that you want to decrypt in a batch, this is the most convenient way to do it. Far less safe is to create a temporary copy of the secret key with passphrase removed, since after deletion the data from that file might still be recoverably left on the disk.

So I'd like to ask that GnuPG implement this feature or something comparable.

Fix

Unknown