TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Age – a simple, modern and secure file encryption tool, format, and Go library

126 点作者 talonx超过 2 年前

11 条评论

upofadown超过 2 年前
Age is great and all but it has a huge footgun. It encourages the user to encrypt material with a public key in a way that is entirely unauthenticated. So an attacker with access to that public key can simply overwrite the file with whatever they want. If ensuring that you end up with the same stuff as you encrypted is important than that can be a big problem. Fixing this involves the use of a separate signing utility and thus introduces an entirely different set of keys for the user to manually manage.<p>By doing the key management for the user, GPG actually ends up being a lot more usable...
评论 #32983995 未加载
评论 #32983455 未加载
评论 #32982993 未加载
评论 #32988042 未加载
评论 #32982175 未加载
评论 #32985753 未加载
评论 #32982691 未加载
评论 #32984522 未加载
vaylian超过 2 年前
The thing that age is missing: A description of how to use it properly. I&#x27;ve looked into age several times and it is supposed to be a GnuPG killer for file encryption. But there is afaik no document or talk that describes how to use age in practice. Afaik there is absolutely no information about how to manage your public keys and what the best practices are for rotating and distributing them. Part of me really wants to use age, but when it comes to crypto, you need to know how use it properly.
评论 #32999433 未加载
bertman超过 2 年前
I&#x27;m eagerly awaiting the Kotlin implementation of age[0] because once that&#x27;s finished, Android Password Store[1] will be able to offer age encryption next to&#x2F; instead of gpg.<p>0: <a href="https:&#x2F;&#x2F;github.com&#x2F;android-password-store&#x2F;kage" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;android-password-store&#x2F;kage</a><p>1: <a href="https:&#x2F;&#x2F;github.com&#x2F;android-password-store&#x2F;Android-Password-Store&#x2F;issues&#x2F;2061" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;android-password-store&#x2F;Android-Password-S...</a>
评论 #32982258 未加载
评论 #32982219 未加载
ianpurton超过 2 年前
There&#x27;s also a rust version. <a href="https:&#x2F;&#x2F;github.com&#x2F;str4d&#x2F;rage" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;str4d&#x2F;rage</a>
twp超过 2 年前
The availability of age as a Go library means that it&#x27;s easy to embed age into other tools. For example chezmoi supports age encryption for your sensitive dotfiles, and you don&#x27;t even have to install age on your machine to use it.<p><a href="https:&#x2F;&#x2F;www.chezmoi.io&#x2F;user-guide&#x2F;encryption&#x2F;age&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.chezmoi.io&#x2F;user-guide&#x2F;encryption&#x2F;age&#x2F;</a><p><a href="https:&#x2F;&#x2F;www.chezmoi.io&#x2F;user-guide&#x2F;encryption&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.chezmoi.io&#x2F;user-guide&#x2F;encryption&#x2F;</a>
eterps超过 2 年前
The (CLI) user experience looks very clear and straightforward.<p>Especially having these small explicit public keys.
aborsy超过 2 年前
Is there a backup tool yet for age?<p>Also, I would like to point out a major foot-gun with Age. I was using age in the symmetric mode, glad that I am getting a cleanly written ChaCha20-Poly1305 symmetric cipher. This is supposed to be 256-bits symmetric encryption, and quantum-resistance.<p>But if I recall, it seems that the age key file itself is 128 bits! Thus in the symmetric mode, Age provides only 128 bits of security. This is substandard, and in particular secure only until 2035 or so.<p>Worse, Age creates by default a 10-word password from BIP-39 list. That’s actually 110 bits, in default configuration. Again, a good deal weakening the security.<p>I reverted back to GPG AES-256. AES-GCM appears in 2.3.<p>Correct me if I’m wrong.<p>————-<p>Update: Here are the links for the security level of 128 bits in Age:<p><a href="https:&#x2F;&#x2F;github.com&#x2F;FiloSottile&#x2F;age&#x2F;discussions&#x2F;423" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;FiloSottile&#x2F;age&#x2F;discussions&#x2F;423</a><p><a href="https:&#x2F;&#x2F;github.com&#x2F;C2SP&#x2F;C2SP&#x2F;blob&#x2F;main&#x2F;age.md" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;C2SP&#x2F;C2SP&#x2F;blob&#x2F;main&#x2F;age.md</a>
评论 #32987622 未加载
评论 #32987328 未加载
codegeek超过 2 年前
The author &quot;filosottile&quot; has built some amazing tools. My favorite is the &quot;mkcert&quot; tool. What a breeze to setup https&#x2F;ssl on localhost within minutes. I guess I should go through his repo. in detail.
napkid超过 2 年前
I use this with Mozilla SOPS to crypt sensible yaml configuration values stored in a Git repo. Works great, fast, and keys and payloads are short.
nodesocket超过 2 年前
How do this compare to @cperciva scrypt[1]? I&#x27;ve used scrypt before and love how simple it is.<p><pre><code> scrypt enc test.txt &gt; test.scrypt Please enter passphrase: Please confirm passphrase: </code></pre> [1] <a href="https:&#x2F;&#x2F;www.tarsnap.com&#x2F;scrypt.html" rel="nofollow">https:&#x2F;&#x2F;www.tarsnap.com&#x2F;scrypt.html</a>
评论 #32985499 未加载
chasil超过 2 年前
OpenSSL has implemented all of this functionality for many, many years.<p><a href="https:&#x2F;&#x2F;www.linuxjournal.com&#x2F;content&#x2F;flat-file-encryption-openssl-and-gpg" rel="nofollow">https:&#x2F;&#x2F;www.linuxjournal.com&#x2F;content&#x2F;flat-file-encryption-op...</a>
评论 #32984843 未加载