tlock_age is a library to encrypt and decrypt age filekey using tlock scheme. It provides an age Identity and Recipient consuming Threshold BLS signatures provided by drand beacons.

The reference interoperable Go implementation is available at drand/tlock.

• Features
• Installation
• Usage
• Security Considerations
• FAQ
• License

• Timelock encryption and decryption in the age format
• ASCII Armor
• tlock header decryption
• Encryption with public key on G1 and G2
• Interoperability with Go and JS implementation
• wasm32 compatible library

The library is tested against the following targets: x86_64-unknown-linux-gnu, armv7-unknown-linux-gnueabihf, aarch64-unknown-linux-gnu, wasm32-wasi.

Code examples are provided in tlock_age/examples.

The tlock system relies on unchained drand networks.

This crate does not provide a drand client. You can use drand_core.

This software has not been audited. Please use at your sole discretion. With this in mind, dee security relies on the following:

• tlock: Practical Timelock Encryption from Threshold BLS by Nicolas Gailly, Kelsey Melissaris, and Yolan Romailler, and its implementation in drand/tlock,
• Identity-Based Encryption by Dan Boneh, and Matthew Franklin, and its implementation in thibmeu/tlock-rs,
• The chosen drand beacon to remain honest,
• age encryption protocol, and its implementation in str4d/rage,

For the simple explanation, you can use Handwaving Cryptography.

For a more detailed one, you should take time to read tlock: Practical Timelock Encryption from Threshold BLS by Nicolas Gailly, Kelsey Melissaris, and Yolan Romailler.

You need a client. Clients using tlock-rs are

• dee
• age-plugin-tlock

This project is under the MIT license.

Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you shall be MIT licensed as above, without any additional terms or conditions.