Encrypting my TiddlyWiki

[Alex]

Hello everyone, I really need on encrypting my TiddlyWiki. I have
tried using two different plugins, EncryptedVaultPlugin and the
TiddlerEncryptionPlugin. Using the TiddlerEcryptionPlugin, i got it to
somewhat work, but I had to add a DecryptAll button in the sidebar on
the right. I want a way to only be prompted for one "prompt" at a
time, and not all of them. I want to set up a username like system
with my prompts, but I can't seem to get it configured the way I want.
I also tried using the EncryptedVaultPlugin, and I got it to load, but
I cannot find out how to set a password and how to have multiple
passwords on my Tiddly. If anyone is knowledgeable with either of
these plugins, please reply and I can explain more of the specific
difficulties I'm having. Thanks

~Alex

[Mark S.]

With the TEP, if prior plugins have altered your set up, you may have
to add the decryptThis button manually to the "ToolbarCommands"
tiddler, like:

|~ViewToolbar|newHere decryptThis closeTiddler +editTiddler
deleteTiddler > fields syncing permalink references jump|

Of course, your ViewToolbar line may vary from mine, so use
discretion.

[Mike]

I have tried both, I am currently using TiddlerEncryption vs
EncryptedVault (had some problems with the vault, and random
characters appearing inside my tiddlers in TW 2.4.2)

http://visualtw.ouvaton.org/demo/EncryptedVaultPlugin.html (last
update 12/07)
set the password in the plugin (one password protects entire document)
http://www.remotely-helpful.com/TiddlyWiki/TiddlerEncryptionPlugin.html#TiddlerEncryptionPlugin
(last update 10/08)
set the password for a tag or group of tiddlers (one password per
group)
If encryption is not required you could try:
http://www.tiddlytools.com/#TiddlerPasswordPlugin
password via template & user level controls

Mike

[Lyall]

Quoted from a gmail reply, I figure others may be interested in the
answer...



Firstly, as you may have gathered, a tiddler can only be encrypted
with one password.
You can have 2 tiddlers with a password each, or both tiddlers with
the same password - all driven by the prompt - the prompt is simply a
reminder for the password.
However, you cannot have multiple passwords to decrypt the same
tiddler.

However, you could create a group of tiddlers with a prompt of 'Office
Users' and spread the password to that group, and another group of
tiddlers with 'Secret users' and spread the password there as well.
But, you won't be able to give both Office Users and Secret users
access to both groups, unless both groups know both passwords.

Personally, I only encrypt the tiddlers that need encrypting, leaving
the rest of the tiddlers open. After all, when encrypted, you can't
search (at least, until you decrypt them all).

That said, if TiddlerEncryptionPlugin is still for you, feel free to
send me a sanitised version of your tiddlywiki and I can see if I can
spot the problem with the menu bar. I don't need to know the passwords
as I only need to be able to confirm the 'button' appears.

...Lyall

On Nov 11, 7:57 am, Mike <eris...@gmail.com> wrote:
> I have tried both, I am currently using TiddlerEncryption vs
> EncryptedVault (had some problems with the vault, and random
> characters appearing inside my tiddlers in TW 2.4.2)
>
> http://visualtw.ouvaton.org/demo/EncryptedVaultPlugin.html(last
> update 12/07)

> set the password in the plugin (one password protects entire document)http://www.remotely-helpful.com/TiddlyWiki/TiddlerEncryptionPlugin.ht...

[Amzg]

Hoping to catch the opportunity to ask the creator himself;

Mr. Pearce, do I understand this correct;
A tiddler is only encrypted when it is rendered. For a TW on a remote
server (such as tiddlyspot) this means that when I use my local copy,
a tiddler tagged with Encrypt(something) is *not* necessarily
encrypted when I send it *to* that remote server, only later when the
TW is reloaded from there is it encrypted. Correct?

Thank you!

[Lyall]

An encrypted tiddler is tagged with 'Decrypt(prompt)'

A decrypted tiddler, that will be encrypted, on save, is tagged with
'Encrypt(prompt)'

The process of saving the tiddlywiki looks for all tiddlers tagged
Encrypt(prompt), encrypts them and changes the tag to 'Decrypt(tag)'

An encrypted tiddler is loaded, as is, from the tiddlywiki (you can
look at the contents), whether it is from a local file or a remote
server.

When a tiddler is retrieved for display from an already loaded
tiddlywiki, the 'getTiddler' function has been overridden to look for
the 'Decrypt(prompt)' tag. If it finds it, it decrypts the tiddler,
otherwise, it does nothing and simply allows normal tiddler retrieval.

If you have not entered the password for a prompt, then encrypted
tiddlers will not automatically decrypt, you will need to press the
'decrypt' or 'decrypt all' buttons to enter the password. Once a
password is entered, it is not normally asked for again (unless you
configure it that way) - and all encrypted tiddlers will automatically
decrypt, from that point on.

When you hit the 'save changes' button or an auto-save happens,
TiddlerEncryptionPlugin searches for any tiddlers with 'Encrypt
(prompt)' in their tags - for each one, it encrypts and re-tags with
'Decrypt(prompt)'. Once all tiddlers have been checked and encrypted,
the save is handled using the existing save functionality.

So, the only time a tiddler is decrypted is when you display it and
press the decrypt button, or you use 'decrypt all'.

If a tiddler is downloaded from the net with encrypted tiddlers, the
tiddlers are encrypted whilst in transit. They only ever are decrypted
in your browser.

If the UploadPlugin had default upload urls as configuration settings
and overrode the 'save changes' method, like TiddlerEncryptionPlugin,
then the 'saved tiddlywiki', as uploaded, would be encrypted, in
transit, with no changes to the 'server side' - all the encryption is
done on the client.

It is even possible, to have a 'external tiddler' plugin (I think Eric
wrote one, amongst seemingly millions...), that if it overrode the
getTiddler and getTiddlerText functions, then TiddlerEncryptionPlugin
would even process 'external' tiddlers correctly - assuming the
plugins loaded 'external tiddlers' then TiddlerEncryptionPlugin

Note that if you close the tiddlywiki page or press the browser re-
load button, all cached passwords are lost.

Hopefully that answers your question.

:-)

...Lyall

[Alex]

I have tired adding the decruptThis button to my toolbarCommands, but
it still will not show up.

[Alex]

Mike, in the Encrypted Vault Plugin, you said set the password in the
plugin, how would i do that?

On Nov 10, 4:57 pm, Mike <eris...@gmail.com> wrote:
> I have tried both, I am currently using TiddlerEncryption vs

> EncryptedVault (had some problems with thevault, and random

> characters appearing inside my tiddlers in TW 2.4.2)
>
> http://visualtw.ouvaton.org/demo/EncryptedVaultPlugin.html(last
> update 12/07)

> set the password in theplugin(one password protects entire document)http://www.remotely-helpful.com/TiddlyWiki/TiddlerEncryptionPlugin.ht...

[Lyall]

ToolbarCommands, not toolbarCommands.

Here is what mine contains...

|~ViewToolbar|collapseTiddler collapseOthers closeTiddler closeOthers
decryptThis +editTiddler intelliTagsEdit > fields syncing permalink
references jump|
|~EditToolbar|+saveTiddler -cancelTiddler deleteTiddler|

...Lyall

[Lyall]

Of course, the lines don't wrap like shown in the news post.

[Mike]

Sorry, been away from my computer for a few days. ..
if you have vault installed, go to the plugin (under systemConfig tag)
should look like this (http://visualtw.ouvaton.org/demo/
EncryptedVaultPlugin.html#EncryptedVaultPlugin)

The demo version is locked (enter the password demo) under the Usage
heading
After unlocking should see a macro to set the password
I recommend putting the unlock macro in a easy to reach place

Hope that helps,

Mike

[Mike]

. . . also if you are running a custom theme (like mptw) you will need
to look there for the ToolbarCommands when using TiddlerEncryption