rage

> trusts this specless tool will be maintained forever As per the third sentence of the readme there indeed is a spec[0]. There is also an alternative implementation in the form of rage[1], as well as numerous others listed on the awesome-age page[2]. [0]: https://github.com/C2SP/C2SP/blob/main/age.md [1]: https://github.com/str4d/rage [2]: https://github.com/FiloSottile/awesome-age

_o/ hi all, age author here! age is the one of my projects that grew most organically into an ecosystem. It's always great to see what people build with it. Happy to answer any questions. Here are some previous discussions 132 points on Feb 26, 2023 | 77 comments | https://news.ycombinator.com/item?id=34936504 126 points on Sept 26, 2022 | 54 comments | https://news.ycombinator.com/item?id=32980141 113 points on June 11, 2022 | 33 comments | https://news.ycombinator.com/item?id=31705670 494 points on Sept 6, 2021 | 88 comments | https://news.ycombinator.com/item?id=28435613 466 points on Dec 27, 2019 | 199 comments | https://news.ycombinator.com/item?id=21895671 and here some related resources - a list of age ecosystem projects https://github.com/FiloSottile/awesome-age - the format specification https://c2sp.org/age - the Go library docs

Rust version: https://github.com/str4d/rage

_o/ hi all, age author here! The OP link is the spec, here's a few other things you might find interesting - the Go reference implementation https://age-encryption.org - the Go library docs https://pkg.go.dev/filippo.io/age - the CLI man page https://filippo.io/age/age.1 - the large reusable test suite (which I should write about!) https://c2sp.org/CCTV/age - an interoperable Rust implementation by @str4d https://github.com/str4d/rage - a YubiKey plugin by @str4d https://github.com/str4d/age-plugin-yubikey - the draft plugin protocol specification (which we should really merge) https://github.com/C2SP/C2SP/pull/5/files?short_path=07bf8cc... - a Windows GUI by @spieglt https://github.com/spieglt/winage - a discussion of the authentication properties of age https://words.filippo.io/dispatches/age-authentication/ - a discussion of a potentia

I'm not convinced that whole-disk encryption is sensible for most threat models, but I use the built-in FileVault on macOS (under the reasoning that, at the very least, it can't really hurt). On Linux, I use age[1] (specifically, rage[2]) to encrypt sensitive files. I wrote a secret manager that uses the latter as an encryption backend[3], and I use `rage-mount` to mount (read-only) views of encrypted archives. [1]: https://github.com/FiloSottile/age [2]: https://github.com/str4d/rage [3]: https://github.com/woodruffw/kbs2

There's also a rust version. https://github.com/str4d/rage

Yes! That’s what the plugin system is designed for. https://github.com/str4d/age-plugin-yubikey is fairly mature and I use it every day. Currently it's only compatible with https://github.com/str4d/rage, because age only supports plugins in a branch, but I'm hoping to land support this week!

https://github.com/str4d/age-plugin-yubikey is very much trying to beat GnuPG for ease of use and performance in that setup :) Currently it's only compatible with https://github.com/str4d/rage, because age only supports plugins in a branch, but I'm hoping to land support this week!

Hello! age (https://age-encryption.org) author here. Different tools can definitely be better for different use cases (for example I am a fan of restic [0] for backups, although age is designed to compose well with tar, if that's your thing), but do you mind me asking what made that tool feel more well defined than age? age has a stable spec [1] and an alternative implementation in Rust [2] based on the spec with extensive interop tests. If that’s just not visible, I’d be interested in how to fix that appearance, too! [0]: https://words.filippo.io/restic-cryptography/ [1]: https://age-encryption.org/v1 [2]: https://github.com/str4d/rage

I'd generally look at anything like this as a code smell. If you're looking for simple file encryption in Rust, and you'd consider doing something as bespoke as this, just use `rage` (and its `age` crate). As a bonus, you get interop with Go (the reference implementation of age is in Go). https://github.com/str4d/rage Having said this, I want to put a word in for a design change I think all of these tools should consider: don't accept user-provided passphrases by default. Instead, generate passphrases for the user, with a wordlist and entropy target. Encrypting programs can still accept a (bad) passphrase with an option! But it shouldn't be the default behavior.

No, Thomas was talking about rage. https://github.com/str4d/rage

As yepguy mentioned AGE is simpler. I can also mention few things: - It works smoothly with SSH keys (generated from ssh-keygen), which are perfectly recognized by possibly any developer. - No need for external client, such as GpgWin/Kleopatra for Windows. - Embed-able in Rust[0] and Go[1] (there are libraries), no need to call `gpg --decrypt ...` from the command line. - Encrypted files by pass and keys are smaller. I guess it is thanks to ecliptic-curve encryption. [0]: https://github.com/str4d/rage [1]: https://github.com/FiloSottile/age

This whole thread is off-topic (talking about AEAD in a post about signing), but: You can use age's AEAD encryption with Yubikeys. Yubikeys can do ECDHE in PIV mode. I wrote https://github.com/tv42/yubage as a subprocess plugin to https://github.com/str4d/rage (and hopefully https://github.com/FiloSottile/age once they think plugins are stable in enough to go in the reference implementation). The rage author also wrote their https://github.com/str4d/age-plugin-yubikey

(r)age https://news.ycombinator.com/item?id=21895671 https://github.com/str4d/rage

> kbs2 uses the rage[1] implementation of age[2]. Symmetric encryption with an actually comprehensible CLI; thank you! [1]: https://github.com/str4d/rage [2]: https://github.com/FiloSottile/age