4 ms·
Age also (iirc) doesn't provide authenticated encryption which is... a really weird decision to make and makes it unsuitable for anything in which you don't hav
by dinosaurdynasty 4y ago
Age also (iirc) doesn't provide authenticated encryption which is... a really weird decision to make and makes it unsuitable for anything in which you don't have authentication by another mechanism.
- upofadown 4y agoIt is authenticated in symmetrical mode based on knowledge of the shared password. But still not something that should be recommended to anyone who might not know the issues.
- dinosaurdynasty 4y agoYeah, it's unauthenticated in asymmetric mode https://github.com/FiloSottile/age/issues/59 https://github.com/FiloSottile/age/issues/59
- beebmam 4y agoThis is incorrect, they use https://en.wikipedia.org/wiki/ChaCha20-Poly1305 https://en.wikipedia.org/wiki/ChaCha20-Poly1305