A collection of projects and resources in the age file encryption ecosystem.
For more, explore the age-encryption GitHub topic!
⭐️ Featured or official — 🧪 Beta or experimental
-
⭐️ age (Go docs, man page) — CLI and Go reference implementation.
-
⭐️ rage — Rust implementation, fully interoperable and feature complete.
-
pyrage — Python bindings for rage.
-
🧪 kage — Work-in-progress implementation for Kotlin/JVM and Android.
-
🧪 AgeKit — Work-in-progress Swift implementation on top of CryptoKit.
-
🧪 wage — Wasm package powered by rage.
-
rage-wasm — Wasm wrapper of rage.
-
agemobile — gomobile support for age.
-
⭐️ age-plugin-yubikey — YubiKey (and other PIV tokens) plugin.
-
age-plugin-se — Apple Secure Enclave plugin, supporting native keys.
-
🧪 age-plugin-tpm — TPM 2.0 plugin.
-
🧪 age-plugin-tkey — Tillitis TKey plugin.
-
age-plugin-trezor — Trezor hardware wallet plugin, supporting native keys.
-
🧪 age-plugin-sntrup761x25519 — Post-quantum hybrid plugin mixing NTRU Prime and X25519.
-
🧪 age-plugin-fido — Prototype of a symmetric encryption plugin for FIDO2 keys.
-
⭐️ Winage — Contextual menu driven Windows GUI.
-
agewasm (live) — Static HTML and Wasm in-browser encryption tool.
-
🧪 rage-encry.pt — In-browser encryption/decryption tool powered by wage.
-
age-online (live) — Wasm in-browser encryption/decryption tool for text.
-
⭐️ passage — Fork of password-store that uses age in place of gpg.
-
PaperAge — Easy and secure paper backups of secrets.
-
pa — A simple password manager, written in portable POSIX shell.
-
agebox — Easy file repository encryption tool, focused on simplicity and gitops.
-
🧪 kbs2 — A secret manager backed by age.
-
🧪 ciphey — Password and secret manager.
-
age-keygen-deterministic — Deterministically generate age keys from a passphrase with Argon2id.
-
vanity-age — Vanity age public key bruteforcer.
-
age-op — Transparently use age keys stored in 1Password.
-
agenix — age-encrypted secrets for NixOS.
-
ragenix — Drop-in replacement for agenix in Rust.
-
homeage — Nix home-manager module for runtime decryption of declarative age files.
-
scalpel — Secret provisioning to Nix-generated service config files.
-
agenix-rekey — agenix extension facilitating automating per-host secret rekeying.
-
age.el — age encryption support for Emacs.
-
passage.el — passage support for Emacs.
-
⭐️ SOPS — Flexible and widely integrated secret manager.
-
kustomize-age — Kustomize plugin for using age encrypted files in Secrets.
-
Kustomizer — Kubernetes configuration as OCI artifacts, natively supports age.
-
chezmoi — Dotfiles manager with native age support.
-
gopass — Password manager with a built-in age backend.
-
Logseq — Open-source knowledge base, uses age for its cloud Sync.
-
eldim — A file upload proxy that encrypt files with age.
-
paw — Cross-platform password manager app.
-
Cryptocam — Android app that encrypts video with age as it is recorded.
-
Len, Julia, Paul Grubbs, and Thomas Ristenpart. "Partitioning Oracle Attacks." USENIX Security Symposium. 2021.
-
Gailly, Nicolas, Kelsey Melissaris, and Yolan Romailler. "tlock: Practical Timelock Encryption from Threshold BLS." Cryptology ePrint Archive. 2023.
-
Stäuble, Mirco. "Actually Good Encryption? Confusing Users by Changing Nonces." Semester project. Department of Computer Science, ETH Zürich. 2022.
-
gitattributes age encrypt — Encrypting and decrypting files with gitattributes.
-
age Encryption in Python with pyrage — Announcement of pyrage with extensive technical details.
-
⭐️ age-encryption.org/v1 — The official file format specification.
-
c2sp.org/CCTV/age — Comprehensive implementation-agnostic test suite of over 100 vectors.
-
🧪 C2SP/C2SP#5 — age-plugin spec (draft)