age v1.3.2 is a minor release with a wide range of fixes and hardening improvements. Some previously-accepted inputs are now rejected: headers over 2 MiB or 1024 recipients, malformed SSH keys in recipients files, and non-UTF-8 plaintext written to a terminal (force with -o -). Pre-built binaries now cover windows/arm64 and darwin/amd64, and release archives include the compatibility plugins (age-…
v1.3.1 is a minor release to restore version injection from downstream package build processes. See the v1.3.0 release notes for an overview of recent additions.
Exactly six years after the first age beta release, v1.3.0 brings post-quantum resistance to age, along with a couple long-requested features, built-in support for recipients compatible with hardware plugins, I/O API improvements, and many usability enhancements. Post-quantum recipients age now has native post-quantum recipients based on HPKE with a hybrid ML-KEM-768 KEM. The recipients start with…
A small release to build the release binaries with a more recent Go toolchain, and to fix a couple CLI edge cases (#491, #555). The Go module now exposes a plugin package that provides an age plugin client. That is, Recipient and Identity implementations that invoke a plugin binary, allowing the use of age plugins in Go programs. Finally, Recipients can now return a set of "labels" by implementing…
This release fixes a security vulnerability that could allow an attacker to execute an arbitrary binary under certain conditions. See GHSA-32gq-x56h-299c. Plugin names may now only contain alphanumeric characters or the four special characters +-._. Thanks to ⬡-49016 for reporting this issue.
age v1.1.1 is a patch release to fix go install filippo.io/age/...@latest. See the release notes for v1.1.0 for changes since v1.0.0.
age is a simple, modern and secure file encryption tool, format, and Go library. It features small explicit keys, no config options, and UNIX-style composability. Learn more by reading the README, the age(1) man page, the Go API reference, the format specification, or the full release changelog. Watch the repository or follow @filippo@abyssdomain.expert to be notified of new releases. 🛠️ FYI, age…
age is a simple, modern and secure file encryption tool, format, and Go library. It features small explicit keys, no config options, and UNIX-style composability. Learn more by reading the README, the age(1) man page, the Go API reference, the format specification, or the full release changelog. Watch the repository or follow @FiloSottile on Twitter to be notified of new releases. v1.1.0-rc.1 is t…
age—pronounced [aɡe̞], like the Italian “aghe”—is a simple, modern and secure file encryption tool, format, and Go library. It features small explicit keys, no config options, and UNIX-style composability. $ age-keygen -o key.txt Public key: age1ql3z7hjy54pw3hyww5ayyfg7zqgvc7w3j2elw8zmrj2kg5sfn9aqmcac8p $ tar cvz ~/data | age -r age1ql3z7hjy54pw3hyww5ayyfg7zqgvc7w3j2elw8zmrj2kg5sfn9aqmcac8p > data…
Maybe™️ actually™️ the last v1.0.0 release candidate! Encrypted identity files are now supported. Regular passphrase-encrypted age files can be used with -i, the passphrase will be requested interactively, and the decrypted file will be read line-by-line as a standard identity file. Passphrases can now be requested interactively from the terminal on Windows even if standard input is in use. Errors…
This is it! The v1.0.0 milestone is empty. Will let it simmer for a bit and then we'll have v1.0.0. Please test it! Main changes 🤏 Reject RSA keys (for ssh-rsa) smaller than 2048 bits (#266) 🥞 Remove limit of 20 recipients per file (#139) 📜 Add age(1) and age-keygen(1) man pages (#131) — read them here! ⚔️ Fix armored encoding for files of certain lengths (#263) Minor changes Add freebsd/amd64 and…