From b5b528603d3bba7b37b5fc247e36307a8512ee0e Mon Sep 17 00:00:00 2001
From: Fernando Schauenburg <dev@schauenburg.me>
Date: Fri, 7 Mar 2025 20:57:18 +0100
Subject: [PATCH] lock: use `openssl` instead of `gpg`

---
 bin/lock | 8 ++------
 1 file changed, 2 insertions(+), 6 deletions(-)

diff --git a/bin/lock b/bin/lock
index 91d759e..dd0f3bf 100755
--- a/bin/lock
+++ b/bin/lock
@@ -9,11 +9,7 @@ error() {
 [ -n "$1" ] || error "input file missing"
 [ -r "$1" ] || error "can't read input file"
 
-# shellcheck disable=SC2016 # I don't want $(tty) to be expanded
 printf '#!/bin/sh
-GPG_TTY=$(tty)
-export GPG_TTY
-base64 -d <<EOF | gpg -d
+openssl enc -d -aes256 -pbkdf2 -base64 <<EOF
 %s
-EOF
-'   "$(gpg -c --cipher-algo AES256 -o - -- "$1" | base64)"
+EOF' "$(openssl enc -aes256 -pbkdf2 -base64 -in "$1")"