use GPGME

[nullobsi]

Using pass directly as a subprocess feels fragile and prone to error (#2)

Pros:

• direct support for encrypting/decrypting
• error handling
• less hacky

Cons:

• git commit would not be made
• have to manually support .gpg-id

[Thaodan]

Have you looked into use QGPGME or LibKleo (more high lvl)? Plus would be a higher lvl API suited for C++ rather than using the C API.

I think this should be probably an item split into different points:

• Replace pass by doing the pass functionality manually
  • Indexing - Traverse password-store to find password
  • Decrypt password
  • Write password and encrypt
• Call either gpg or gpgme. I would first go by calling gpg and then gpgme since you can't really avoid calling external processes until you also use libgit for git commit.

[nullobsi]

I haven't looked into other options, no. But definitely a higher level API would be better to use :)