this post was submitted on 25 Jan 2022
2 points (100.0% liked)

Privacy

31938 readers
809 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

There is this tool called age written in go and a fully compatible Rust implementation called rage. They promise to be a simple tool for encrypting files and other things.

It only does encryption, using public key cryptography (Curve 25519 or SSH keys) or password based symmetric encryption. (Please excuse me glossing over some details here)

It only encrypts things, no signatures beyond AEAD involved. It aims to be minimalistic and do just one thing reasonably well instead of being a mediocre multi tool. It doesn't aim to be a full replacement for things like OpenPGP.

AFAICT there hasn't been a proper security audit yet. There seem to be some issues with the design as pointed out here which don't look like critical flaws to me, but then again I'm not a cryptography expert.

Some of the questions I want to throw into the discussions are:

  • Is it any good?
  • In which situation would you use it?
  • What are some alternatives that do it differently or maybe even better and why is that?

Bonus question: Is there a similar tool that uses an audited library like libsodium, and if not, would it be worth developing one?

you are viewing a single comment's thread
view the rest of the comments
[–] CHEFKOCH@lemmy.ml 0 points 2 years ago* (last edited 2 years ago) (1 children)

If you have nothing useful to add here you should not answer.

Age has some plugin capabilities, there are plugins for like e.g. Yubikey, so you can also create plugins for file verification.

[–] X_Cli@lemmy.ml 2 points 2 years ago (1 children)

Still bossing people around, I see. "You should not answer" "Your post belongs elsewhere". You never change :) Your intimidation attempts are ineffective on me. You should move on.

Age plugins are not Age. Minisign is an excellent tool. It is not a replacement for Age.

[–] CHEFKOCH@lemmy.ml -5 points 2 years ago* (last edited 2 years ago) (1 children)

Still trying to undermine peoples opinions by cherry picking things to add nothing useful for the discussion trying to discredit me based on things you do not understand.

You can code plugins surround age and you can utilize them, apparently you do not understand it. You can check signatures with age too, just saying.

It is a replacement for those who mainly use age for that purpose.

[–] X_Cli@lemmy.ml 1 points 2 years ago

Can you provide a link to that "age signature plugin", please?