I'm looking for an alternative to GnuPG for symmetric encryption. Specifically, I want to encrypt short, secret files using a passphrase using Linux, and have them secured against modern attacks, such as parallelized brute-force attacks
The algorithms in GnuPG are not designed to withstand mentioned attacks, and parameters improve on this, like the
--s2k-count are intentionally limited on a software level (see this answer).
It also has some other rather insecure defaults, like this one (from the docs)
gpg caches the passphrase used for symmetric encryption so that a decrypt operation may not require that the user needs to enter the passphrase
Meaning, that by default anyone with access to the shell can decrypt the file without knowing the passphrase while the password is still in cache from the encryption process.
What software is there that can encrypt a file with a passphrase and
- is readily available for linux distributions
- provides modern encryption mechanism (brute-force resistant)
- doesn't have insecure defaults?