age — simple, modern file encryption

A simple, modern and secure encryption tool with small explicit keys, no config options, and UNIX-style composability.

[Logseq 🪵 @logseq]

@jur0_o We currently use AWS (us-east-1) and encrypt everything using age (https://t.co/K4J3EYMVDU) before syncing. We plan to offer more regions after the beta test.

[Dan Luhring @danluhring]

Finally started using `age` for encryption, w/ keys stored on yubikeys. 🔒

Love having an encryption tool I can trust, and that I can trust myself to use correctly 😂

https://t.co/KLLVi6IaWz

[Filippo Valsorda @filippo.abyssdomain.expert @FiloSottile]

Big age news! Not only did we cross 10k GitHub stars, the new specification is now live! It's not a Google Doc anymore ✨

https://t.co/1FvkGwwRbm

P.S. The next issue of Cryptography Dispatches will be about age and sender authentication! Subscribe here →https://t.co/9WUF8jHkMQ

[CryptoHack @CryptoHack__]

Thanks to @FiloSottile for the stickers, and more importantly, the cool crypto tool age!

https://t.co/3jOypNY1Ub

[Filippo Valsorda @filippo.abyssdomain.expert @FiloSottile]

age supports encrypting to SSH keys, which is not as straightforwardly safe as using them for signatures.

The original design doc mentions that our reuse of ssh-ed25519 should fine per https://t.co/Hwfcb9eVlZ.

The more recent https://t.co/5WSZqvRkdH confirms that 🎉

[Filippo Valsorda @filippo.abyssdomain.expert @FiloSottile]

📣📣📣📣 It's here! 🥁🥁🥁🥁

💥🍾🏁✨ age v1.0.0 ✨🏁🍾💥

https://t.co/X6KA75DtDO

[Filippo Valsorda @filippo.abyssdomain.expert @FiloSottile]

age is in Debian stable now!

[Filippo Valsorda @filippo.abyssdomain.expert @FiloSottile]

Just realized age can be implemented entirely on top of libsodium APIs!

It just needs ChaCha20Poly1305, HMAC-SHA-256, X25519, scrypt, and a CSPRNG. This wasn't intentional per-se, but the choice of "boring" primitives paid off.

age is arguably way more portable than OpenPGP.

[Stefan Prodan @stefanprodan]

@FiloSottile We've been working on integrating @fluxcd with age as the better alternative to OpenPGP for #GitOps secrets management. The Flux team ❤️ age! Thank you Filippo for this awesome tool.

https://t.co/TJsCbXPaxt

[CryptoHack @CryptoHack__]

Just installed and spent some time playing with @FiloSottile's project age.

Really impressed with the whole thing. Installed without an issue and the man page is clear and concise.

Recommend getting it yourself and playing with it.

https://t.co/3jOypNGqvB

[Filippo Valsorda @filippo.abyssdomain.expert @FiloSottile]

📣 I have just tagged v1.0.0-rc.2, which I hope will become v1.0.0! 🍾

Please test it and send feedback in the release discussion! Data points like "I installed it and it works fine" help, too!

https://t.co/jqT5VqKFN0

[Filippo Valsorda @filippo.abyssdomain.expert @FiloSottile]

Alright, today we are getting to age v1.0.0.

I'd like to have a good man page and maybe a Markdown spec before cutting it, so there's work to do.

Twitter, hold me to it, and tell me if you've been using age for encouragement :)

https://t.co/cM4XQRAaGE

[Filippo Valsorda @filippo.abyssdomain.expert @FiloSottile]

age in Debian Testing and Ubuntu 21.04!

https://t.co/8OvLRhR1Uh
https://t.co/VRLWvkFsWb

[Filippo Valsorda @filippo.abyssdomain.expert @FiloSottile]

Yay! Notably missing is an OpenPGP applet, so it sounds like age will be how you encrypt with a Solo V2 ^^ https://t.co/cXxTGhzYVX

[@[email protected]🛡️ @str4d]

In my quest for rage encryption speed, I'm finally starting to nip at @FiloSottile's heels 🚄

https://t.co/mhhLtTtIwz

[@[email protected]🛡️ @str4d]

After a bit of a break from streaming, I'm back now working on age plugin support in rage! Let's see if we can finish this today and land it 🛬

Live now 🔴 https://t.co/vs7oEoGOpo

[@[email protected]🛡️ @str4d]

rage 0.5.0 is out!

🌍 Translations!
🚄 Encryption is 10% faster (37% faster with AVX2)
🔐 Support for ssh-rsa identities
🛠️ Usability refactor of age library crate

Available where all good crates are stored: cargo install rage

Binaries and Debian here:
https://t.co/fdEjV2bHRc

[Filippo Valsorda @filippo.abyssdomain.expert @FiloSottile]

age ProTip: you can encrypt to SSH host keys!

$ age -r "ssh-ed25519 AAAA..."
$ age -d -i /etc/ssh/ssh_host_ed25519_key

You can take the public key from known_hosts or ssh_host_ed25519_key.pub.

https://t.co/vfTFSnhN0e

[Filippo Valsorda @filippo.abyssdomain.expert @FiloSottile]

Age keys are so small and cheap that each application and task can and should just generate a dedicated keypair.

I added some docs and a function to parse key files with comments to the latest beta.

https://t.co/D3RYFKjOMN