Awesome age
A collection of projects and resources in the age file encryption ecosystem.
For more, explore the age-encryption GitHub topic!
βοΈ Featured or official β π§ͺ Beta or experimental
Implementations
-
βοΈ age (Go docs, man page) β CLI and Go reference implementation.
-
βοΈ rage β Rust implementation, fully interoperable and feature complete.
-
π§ͺ age.ts β TypeScript implementation on top of libsodium.js.
-
pyrage β Python bindings for rage.
-
Jagged - Java library implementation.
-
π§ͺ kage β Work-in-progress implementation for Kotlin/JVM and Android.
-
π§ͺ AgeKit β Work-in-progress Swift implementation on top of CryptoKit.
-
π§ͺ wage β Wasm package powered by rage.
-
rage-wasm β Wasm wrapper of rage.
-
agemobile β gomobile support for age.
-
π§ͺ age_ex - Elixir implementation using libsodium and :crypto.
Plugins
-
βοΈ age-plugin-yubikey β YubiKey (and other PIV tokens) plugin.
-
age-plugin-se β Apple Secure Enclave plugin, supporting native keys.
-
π§ͺ age-plugin-tpm β TPM 2.0 plugin.
-
π§ͺ age-plugin-tkey β Tillitis TKey plugin.
-
age-plugin-trezor β Trezor hardware wallet plugin, supporting native keys.
-
π§ͺ age-plugin-sntrup761x25519 β Post-quantum hybrid plugin mixing NTRU Prime and X25519.
-
π§ͺ age-plugin-fido β Prototype of a symmetric encryption plugin for FIDO2 keys.
GUIs
-
βοΈ Winage β Contextual menu driven Windows GUI.
-
agewasm (live) β Static HTML and Wasm in-browser encryption tool.
-
π§ͺ rage-encry.pt β In-browser encryption/decryption tool powered by wage.
-
age-online (live) β Wasm in-browser encryption/decryption tool for text.
Tools
-
βοΈ passage β Fork of password-store that uses age in place of gpg.
-
PaperAge β Easy and secure paper backups of secrets.
-
pa β A simple password manager, written in portable POSIX shell.
-
agebox β Easy file repository encryption tool, focused on simplicity and gitops.
-
π§ͺ kbs2 β A secret manager backed by age.
-
π§ͺ ciphey β Password and secret manager.
-
age-keygen-deterministic β Deterministically generate age keys from a passphrase with Argon2id.
-
vanity-age β Vanity age public key bruteforcer.
-
age-op β Transparently use age keys stored in 1Password.
Integrations
-
agenix β age-encrypted secrets for NixOS.
-
ragenix β Drop-in replacement for agenix in Rust.
-
homeage β Nix home-manager module for runtime decryption of declarative age files.
-
scalpel β Secret provisioning to Nix-generated service config files.
-
agenix-rekey β agenix extension facilitating automating per-host secret rekeying.
-
age.el β age encryption support for Emacs.
-
passage.el β passage support for Emacs.
-
βοΈ SOPS β Flexible and widely integrated secret manager.
-
kustomize-age β Kustomize plugin for using age encrypted files in Secrets.
-
Kustomizer β Kubernetes configuration as OCI artifacts, natively supports age.
-
chezmoi β Dotfiles manager with native age support.
-
gopass β Password manager with a built-in age backend.
-
tlock β Practical timelock encryption, with an age-based CLI.
-
Logseq β Open-source knowledge base, uses age for its cloud Sync.
-
eldim β A file upload proxy that encrypt files with age.
-
paw β Cross-platform password manager app.
-
Cryptocam β Android app that encrypts video with age as it is recorded.
Articles
-
Len, Julia, Paul Grubbs, and Thomas Ristenpart. "Partitioning Oracle Attacks." USENIX Security Symposium. 2021.
-
Gailly, Nicolas, Kelsey Melissaris, and Yolan Romailler. "tlock: Practical Timelock Encryption from Threshold BLS." Cryptology ePrint Archive. 2023.
-
StΓ€uble, Mirco. "Actually Good Encryption? Confusing Users by Changing Nonces." Semester project. Department of Computer Science, ETH ZΓΌrich. 2022.
-
gitattributes age encrypt β Encrypting and decrypting files with gitattributes.
-
age Encryption in Python with pyrage β Announcement of pyrage with extensive technical details.
Development
-
βοΈ age-encryption.org/v1 β The official file format specification.
-
βοΈ c2sp.org/CCTV/age β Comprehensive implementation-agnostic test suite of over 100 vectors.
-
c2sp.org/age-plugin β Plugin system specification.