A simple, modern, and secure file encryption tool and Go library with small explicit keys and UNIX-style composability.
age is a simple, modern, and secure file encryption tool, format, and Go library. It provides a robust alternative to complex encryption tools by focusing on explicit keys, strong security, and seamless integration into UNIX-style workflows.
System administrators, developers, and security-conscious users who need a straightforward command-line tool for encrypting files and data streams, especially those working in UNIX-like environments.
Developers choose age for its simplicity with no configuration options, strong security features like post-quantum support, and excellent composability with pipes and existing tools, making it easier to integrate into automated workflows than traditional encryption software.
A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Uses compact public keys (e.g., 'age1...') that are easy to generate, share, and manage, as demonstrated by age-keygen output in the README.
Offers hybrid post-quantum encryption with the -pq flag, providing future-proof protection against quantum computer attacks, a feature built into v1.3.0+.
Designed for seamless integration with pipes and command-line tools, enabling easy use in scripts and automated workflows, as shown in tar and encryption examples.
Supports encryption and decryption using existing SSH keys (ssh-ed25519, ssh-rsa), adding convenience without requiring separate key management for some users.
Cannot use ssh-agent for SSH key decryption, requiring direct access to private key files, which may be less secure or inconvenient for key management workflows.
Post-quantum recipients are approximately 2000 characters long, making them cumbersome to handle and share compared to standard keys, as noted in the README.
The 'no config options' philosophy means users cannot customize encryption parameters, which might be restrictive for advanced or niche security requirements.