FiloSottile/age
Age
Age is a command-line utility for file encryption that utilizes hybrid cryptography to secure data for multiple recipients. It employs a combination of asymmetric key exchange and symmetric encryption to protect files, supporting access control through public keys, shared passphrases, and hardware-backed identity integration.
The tool is designed for memory-efficient operation, utilizing stream-oriented processing to handle large datasets in small, sequential chunks. It features a stanza-based metadata framing system that allows for extensible file headers and supports random-access decryption, enabling users to retrieve specific portions of an encrypted file without processing the entire data stream.
To facilitate reliable transmission across systems with limited character support, the utility includes an ASCII-armored data format that converts binary encrypted files into standard text. It uses checksummed character encoding for identity keys to improve human readability and reduce errors during key management.
Features
- Encryption Tools - Provides a command-line utility for encrypting and decrypting files using modern elliptic curve cryptography.
- Encryption - Secures sensitive data using hybrid encryption methods for multiple authorized recipients.
- Cryptographic Processors - Handles large files by streaming data in small chunks to maintain performance during cryptographic operations.
- Random-Access Decryption - Maintains an internal index of encrypted segments to allow retrieval of specific data portions without decrypting the entire file.
- Hardware Security Module Integrations - Interfaces with external security modules to perform cryptographic operations without exposing private key material.
- Message Decryption - Decrypts specific portions of large files on demand to maintain high performance.
- Encryption Plugins - Plugin for non-interactive passphrase-based encryption.
- Security And Privacy - Simple and modern encryption tool.
- Data Encryption - Processes large files in small, manageable chunks to perform encryption or decryption without exhausting system memory.
- Key Exchange Protocols - Uses asymmetric cryptography to secure symmetric session keys for multiple recipients.
- Stream Ciphers - Processes data in small, sequential chunks to maintain a constant memory footprint during encryption.
- Stanza-Based Framing - Organizes file headers into discrete, extensible blocks containing recipient information and cryptographic parameters.
- File Stream Management - Encrypts or decrypts massive datasets in small chunks to maintain system performance.
- ASCII Armoring - Converts binary data into a standard text format to ensure safe transmission across systems with limited character support.
- Encoding Schemes - Provides checksummed character encoding for identity keys to improve human readability and reduce errors.
- End-to-End Encryption - Converts binary encrypted files into standard text formats to ensure reliable delivery across systems.
- Data Formats - Provides a file encryption standard that encodes binary encrypted data into text for safe transmission.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
