-
-
Notifications
You must be signed in to change notification settings - Fork 511
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Feature request: Support for symmetric key files #46
Comments
This is implemented now: https://github.com/FiloSottile/age#passphrases EDIT no it's not my reading comprehension is bad. But you can turn it into what you wanted with
|
Age's "one joint" is the identity/recipient format, which is designed for arbitrary extensibility, and we are working on a plugin system that will enable this extensibility to be implemented easily by third parties. It is definitely possible for someone to define an identity/recipient format that uses keyfiles for symmetric wrapping of the file key. The keyfiles themselves could also be encrypted with age in passphrase mode, as indicated above 🙂 |
This is now supported, in the sense that you can encrypt to an X25519 identity file as of 732f3e8. The motivation for it ended up being symmetric plugins, that don't have a meaningful identity vs recipient distinction. It makes sense to use an identity file for those for both encryption and decryption. If it's supported for plugins, why not for everything. |
I would like to consider the age format for some future applications, however a common requirement is the use of key files instead of passwords, especially where no user interaction is given.
The key files in these scenarios are used as symmetric keys and optionally protected by a master password. One of the application ideas is similar to a rachet with pre shared symmetric keys, where the user enters a password to access an app and decrypt the keyfiles for the session.
Currently supported in age:
Wanted feature:
The text was updated successfully, but these errors were encountered: