Awesome age

A collection of projects and resources in the age file encryption ecosystem.

⭐️ Featured or official — 🧪 Beta or experimental

Implementations

⭐️ age-plugin-yubikey — YubiKey (and other PIV tokens) plugin.
age-plugin-se — Apple Secure Enclave plugin.
🧪 age-plugin-tpm — TPM 2.0 plugin.
🧪 age-plugin-tkey — Tillitis TKey plugin.
age-plugin-trezor — Trezor hardware wallet plugin, supporting native keys.
🧪 age-plugin-sntrup761x25519 — Post-quantum hybrid plugin mixing NTRU Prime and X25519.
🧪 age-plugin-fido — Prototype of a symmetric encryption plugin for FIDO2 keys.
🧪 age-plugin-fido2-hmac — Similar to age-plugin-fido, adds support for PINs.
🧪 age-plugin-sss — Plugin for splitting encryption keys using Shamir's Secret Sharing (SSS).

The Go package filippo.io/age/plugin and the Rust crate age_plugin provide frameworks for implementing plugins.

⭐️ passage — Fork of password-store that uses age in place of gpg.
PaperAge — Easy and secure paper backups of secrets.
pa — A simple password manager, written in portable POSIX shell.
agebox — Easy file repository encryption tool, focused on simplicity and gitops.
🧪 kbs2 — A secret manager backed by age.
🧪 ciphey — Password and secret manager.
age-keygen-deterministic — Deterministically generate age keys from a passphrase with Argon2id.
vanity-age — Vanity age public key bruteforcer.
vanity-rage — Faster rage-based reimplementation of vanity-age.
age-op — Transparently use age keys stored in 1Password.

agenix — age-encrypted secrets for NixOS.
ragenix — Drop-in replacement for agenix in Rust.
homeage — Nix home-manager module for runtime decryption of declarative age files.
scalpel — Secret provisioning to Nix-generated service config files.
agenix-rekey — agenix extension facilitating automating per-host secret rekeying.
age.el — age encryption support for Emacs.
passage.el — passage support for Emacs.
age.nvim — Neovim utility for loading encrypted secrets.
⭐️ SOPS — Flexible and widely integrated secret manager.
kustomize-age — Kustomize plugin for using age encrypted files in Secrets.
Kustomizer — Kubernetes configuration as OCI artifacts, natively supports age.
chezmoi — Dotfiles manager with native age support.
gopass — Password manager with a built-in age backend.
tlock — Practical timelock encryption, with an age-based CLI.
Logseq — Open-source knowledge base, uses age for its cloud Sync.
eldim — A file upload proxy that encrypt files with age.
paw — Cross-platform password manager app.
Cryptocam — Android app that encrypts video with age as it is recorded.

age and Authenticated Encryption
KEMs and Post-Quantum age
My age+YubiKeys Password Management Solution
age Plugins
Len, Julia, Paul Grubbs, and Thomas Ristenpart. "Partitioning Oracle Attacks." USENIX Security Symposium. 2021.
Gailly, Nicolas, Kelsey Melissaris, and Yolan Romailler. "tlock: Practical Timelock Encryption from Threshold BLS." Cryptology ePrint Archive. 2023.
Stäuble, Mirco. "Actually Good Encryption? Confusing Users by Changing Nonces." Semester project. Department of Computer Science, ETH Zürich. 2022.
gitattributes age encrypt — Encrypting and decrypting files with gitattributes.
age Encryption in Python with pyrage — Announcement of pyrage with extensive technical details.
Introducing Jagged for age Encryption in Java

⭐️ age-encryption.org/v1 — The official file format specification.
⭐️ c2sp.org/CCTV/age — Comprehensive implementation-agnostic test suite of over 100 vectors.
c2sp.org/age-plugin — Plugin system specification.