FiloSottile/awesome-age

Awesome age

A collection of projects and resources in the age file encryption ecosystem.

• Implementations
• Plugins
• GUIs
• Tools
• Integrations
• Articles
• Development

For more, explore the age-encryption GitHub topic!

⭐️ Featured or official — 🧪 Beta or experimental

Implementations

• ⭐️ age (Go docs, man page) — CLI and Go reference implementation.

• ⭐️ rage — Rust implementation, fully interoperable and feature complete.

• ⭐️ typage (npm package) — TypeScript implementation for the JavaScript ecosystem.

• pyrage — Python bindings for rage.

• Jagged - Java library implementation.

• 🧪 kage — Work-in-progress implementation for Kotlin/JVM and Android.

• 🧪 AgeKit — Work-in-progress Swift implementation on top of CryptoKit.

• 🧪 wage — Wasm package powered by rage.

• rage-wasm — Wasm wrapper of rage.

• agemobile — gomobile support for age.

• 🧪 age_ex - Elixir implementation using libsodium and :crypto.

• 🧪 dage - Dart implementation.

Plugins

• ⭐️ age-plugin-yubikey — YubiKey (and other PIV tokens) plugin.

• age-plugin-se — Apple Secure Enclave plugin.

• 🧪 age-plugin-tpm — TPM 2.0 plugin.

• 🧪 age-plugin-tkey — Tillitis TKey plugin.

• age-plugin-fido2prf — FIDO2 symmetric encryption plugin compatible with WebAuthn.

• age-plugin-trezor — Hardware wallet plugin (TREZOR, Ledger, ...), supporting native keys.

• 🧪 age-plugin-sntrup761x25519 — Post-quantum hybrid plugin mixing NTRU Prime and X25519.

• 🧪 age-plugin-fido2-hmac — Plugin for wrapping software native identities with FIDO2.

• 🧪 age-plugin-sss — Plugin for splitting encryption keys using Shamir's Secret Sharing (SSS).

• 🧪 age-plugin-amnesia — Wraps identities with a set of questions and answers.

• age-plugin-batchpass — Plugin for non-interactive passphrase encryption.

The Go package filippo.io/age/plugin and the Rust crate age_plugin provide frameworks for implementing plugins.

GUIs

• ⭐️ Winage — Contextual menu driven Windows GUI.

• agewasm (live) — Static HTML and Wasm in-browser encryption tool.

• 🧪 rage-encry.pt — In-browser encryption/decryption tool powered by wage.

• age-online (live) — Wasm in-browser encryption/decryption tool for text.

Tools

• ⭐️ passage — Fork of password-store that uses age in place of gpg.

• PaperAge — Easy and secure paper backups of secrets.

• pa — A simple password manager, written in portable POSIX shell.

• agebox — Easy file repository encryption tool, focused on simplicity and gitops.

• 🧪 kbs2 — A secret manager backed by age.

• 🧪 ciphey — Password and secret manager.

• age-keygen-deterministic — Deterministically generate age keys from a passphrase with Argon2id.

• age-vanity-keygen — Fast vanity age X25519 identity generator.

• vanity-rage — Faster rage-based reimplementation of vanity-age.

• age-op — Transparently use age keys stored in 1Password.

Integrations

• agenix — age-encrypted secrets for NixOS.

• ragenix — Drop-in replacement for agenix in Rust.

• homeage — Nix home-manager module for runtime decryption of declarative age files.

• scalpel — Secret provisioning to Nix-generated service config files.

• agenix-rekey — agenix extension facilitating automating per-host secret rekeying.

• age.el — age encryption support for Emacs.

• passage.el — passage support for Emacs.

• age.nvim — Neovim utility for loading encrypted secrets.

• ⭐️ SOPS — Flexible and widely integrated secret manager.

• kustomize-age — Kustomize plugin for using age encrypted files in Secrets.

• Kustomizer — Kubernetes configuration as OCI artifacts, natively supports age.

• chezmoi — Dotfiles manager with native age support.

• gopass — Password manager with a built-in age backend.

• tlock — Practical timelock encryption, with an age-based CLI.

• Logseq — Open-source knowledge base, uses age for its cloud Sync.

• eldim — A file upload proxy that encrypt files with age.

• paw — Cross-platform password manager app.

• Cryptocam — Android app that encrypts video with age as it is recorded.

Articles

• age and Authenticated Encryption

• KEMs and Post-Quantum age

• My age+YubiKeys Password Management Solution

• age Plugins

• Encrypting Files with Passkeys and age

• Len, Julia, Paul Grubbs, and Thomas Ristenpart. "Partitioning Oracle Attacks." USENIX Security Symposium. 2021.

• Gailly, Nicolas, Kelsey Melissaris, and Yolan Romailler. "tlock: Practical Timelock Encryption from Threshold BLS." Cryptology ePrint Archive. 2023.

• Stäuble, Mirco. "Actually Good Encryption? Confusing Users by Changing Nonces." Semester project. Department of Computer Science, ETH Zürich. 2022.

• gitattributes age encrypt — Encrypting and decrypting files with gitattributes.

• age Encryption in Python with pyrage — Announcement of pyrage with extensive technical details.

• Introducing Jagged for age Encryption in Java

Development

• ⭐️ age-encryption.org/v1 — The official file format specification.

• ⭐️ c2sp.org/CCTV/age — Comprehensive implementation-agnostic test suite of over 100 vectors.

• c2sp.org/age-plugin — Plugin system specification.