Awesome age

A collection of projects and resources in the age file encryption ecosystem.

• Implementations
• Plugins
• GUIs
• Tools
• Integrations
• Articles
• Development

For more, explore the age-encryption GitHub topic!

⭐️ Featured or official — 🧪 Beta or experimental

Implementations

• ⭐️ age (Go docs, man page) — CLI and Go reference implementation.

• ⭐️ rage — Rust implementation, fully interoperable and feature complete.

• pyrage — Python bindings for rage.

• 🧪 kage — Work-in-progress implementation for Kotlin/JVM and Android.

• 🧪 AgeKit — Work-in-progress Swift implementation on top of CryptoKit.

• 🧪 wage — Wasm package powered by rage.

• rage-wasm — Wasm wrapper of rage.

• agemobile — gomobile support for age.

Plugins

• ⭐️ age-plugin-yubikey — YubiKey (and other PIV tokens) plugin.

• age-plugin-se — Apple Secure Enclave plugin, supporting native keys.

• 🧪 age-plugin-tpm — TPM 2.0 plugin.

• 🧪 age-plugin-tkey — Tillitis TKey plugin.

• age-plugin-trezor — Trezor hardware wallet plugin, supporting native keys.

• 🧪 age-plugin-sntrup761x25519 — Post-quantum hybrid plugin mixing NTRU Prime and X25519.

• 🧪 age-plugin-fido — Prototype of a symmetric encryption plugin for FIDO2 keys.

GUIs

• ⭐️ Winage — Contextual menu driven Windows GUI.

• agewasm (live) — Static HTML and Wasm in-browser encryption tool.

• 🧪 rage-encry.pt — In-browser encryption/decryption tool powered by wage.

• age-online (live) — Wasm in-browser encryption/decryption tool for text.

Tools

• ⭐️ passage — Fork of password-store that uses age in place of gpg.

• PaperAge — Easy and secure paper backups of secrets.

• pa — A simple password manager, written in portable POSIX shell.

• agebox — Easy file repository encryption tool, focused on simplicity and gitops.

• 🧪 kbs2 — A secret manager backed by age.

• 🧪 ciphey — Password and secret manager.

• age-keygen-deterministic — Deterministically generate age keys from a passphrase with Argon2id.

• vanity-age — Vanity age public key bruteforcer.

• age-op — Transparently use age keys stored in 1Password.

Integrations

• agenix — age-encrypted secrets for NixOS.

• ragenix — Drop-in replacement for agenix in Rust.

• homeage — Nix home-manager module for runtime decryption of declarative age files.

• scalpel — Secret provisioning to Nix-generated service config files.

• agenix-rekey — agenix extension facilitating automating per-host secret rekeying.

• age.el — age encryption support for Emacs.

• passage.el — passage support for Emacs.

• ⭐️ SOPS — Flexible and widely integrated secret manager.

• kustomize-age — Kustomize plugin for using age encrypted files in Secrets.

• Kustomizer — Kubernetes configuration as OCI artifacts, natively supports age.

• chezmoi — Dotfiles manager with native age support.

• gopass — Password manager with a built-in age backend.

• Logseq — Open-source knowledge base, uses age for its cloud Sync.

• eldim — A file upload proxy that encrypt files with age.

• paw — Cross-platform password manager app.

• Cryptocam — Android app that encrypts video with age as it is recorded.

Articles

• age and Authenticathed Encryption

• KEMs and Post-Quantum age

• My age+YubiKeys Password Management Solution

• Len, Julia, Paul Grubbs, and Thomas Ristenpart. "Partitioning Oracle Attacks." USENIX Security Symposium. 2021.

• Gailly, Nicolas, Kelsey Melissaris, and Yolan Romailler. "tlock: Practical Timelock Encryption from Threshold BLS." Cryptology ePrint Archive. 2023.

• Stäuble, Mirco. "Actually Good Encryption? Confusing Users by Changing Nonces." Semester project. Department of Computer Science, ETH Zürich. 2022.

• gitattributes age encrypt — Encrypting and decrypting files with gitattributes.

• age Encryption in Python with pyrage — Announcement of pyrage with extensive technical details.

Development

• ⭐️ age-encryption.org/v1 — The official file format specification.

• c2sp.org/CCTV/age — Comprehensive implementation-agnostic test suite of over 100 vectors.

• 🧪 C2SP/C2SP#5 — age-plugin spec (draft)