3 ms·
Age is nice but seems to have stagnated--last release is from 2022, and it's not using a more modern PBKDF like argon. If you're looking for something designed
by candiddevmike 3y ago
Age is nice but seems to have stagnated--last release is from 2022, and it's not using a more modern PBKDF like argon.
If you're looking for something designed for secret storage/sharing, checkout rot: https://github.com/candiddev/rot https://github.com/candiddev/rot
- tptacek 3y agoNot changing since 2022 is a feature, not a bug. It's an exchange format, so it was never going to switch KDFs just for funsies, and scrypt is fine.
- dpatterbee 3y agoI wouldn't describe age as having stagnated, it's simply stable. It has a well defined spec which it fully implements (seemingly correctly), so there isn't any need for more recent releases. Also I think it's a bit sly to not mention that you're the creator of the alternative you suggest.
- FiloSottile 3y agoage is intentionally stable as a format and as a core tool. There is a lot of activity in the integration and plugin ecosystem, which I am very happy about. https://github.com/FiloSottile/awesome-age https://github.com/FiloSottile/awesome-age I have a wishlist for v2 changes, and I am considering slowly and carefully making such a release this year, but the difference in security between scrypt and Argon2 doesn't really justify making a change there.