Charly's Column – Age
Charly's Column – Age
Charly makes life easier for himself by using the lean Age tool for command-line data encryption tasks.
Age (think "aghe" in "spaghetti") promises an uncomplicated approach to encrypting and decrypting files. Written in Go, both the source code and precompiled binaries for various platforms can be found on GitHub [1]. I tried Age on a Raspberry Pi, but the tool also runs on Linux on a PC, macOS, and Windows. The author says the current release from mid-June 2021 is "maybe actually the last v1.0.0 release candidate."
Age supports two ways to encrypt and decrypt files. With the first option, you can create a key file (Age calls this an identity file) based on SSH keys with whose contents you then encrypt the data. In contrast to SSH, this is a symmetrical procedure, so the same file is also used for decryption.
As a second option, Age lets you use a passphrase to encrypt the data. This has the advantage that you can think up a new passphrase for each encryption process. A person you trust and give a passphrase to can use it to decrypt your data – but only the data you encrypted with precisely that one passphrase.
Let's look at both methods. By way of an example, I copied the file /etc/passwd
to my home directory and will now encrypt it using both methods in turn. For the key file method, I need to generate the key file first – I can do this with age-keygen
(Figure 1).
The next step is to encrypt the passwd
file with the key I just generated (Listing 1, line 2). This creates the encrypted passwd.age
file. To decrypt it, use the command from the line 3 of Listing 1.
Listing 1
Key Method
01 $ age-keygen -o age-key.txt 02 $ age --encrypt -i age-key.text -o passwd.age ./passwd 03 $ age --decrypt -i age-key.text -o passwd passwd.age
Now I'll do the same thing but with the passphrase method. Again, I encrypt the passwd
file and give it the name passwd.age
. After the corresponding call shown in line 1 of Listing 2, Age asks me for the desired passphrase. If I don't enter one, the tool generates one itself. Decryption works in the same way, but you can leave out the --passphrase
parameter here (line 4).
Listing 2
Passphrase Method
01 $ age --passphrase -o passwd.age passwd 02 Enter passphrase (leave empty to autogenerate a secure one): 03 Using the autogenerated passphrase "release-response-step-brand-wrap-ankle-pair-unusual-sword-train". 04 $ age --decrypt -o passwd passwd.age 05 Enter passphrase:
The entire procedure's security relies, of course, on careful handling of the key or the passphrase.
Infos
Buy this article as PDF
(incl. VAT)
Buy Linux Magazine
Subscribe to our Linux Newsletters
Find Linux and Open Source Jobs
Subscribe to our ADMIN Newsletters
Support Our Work
Linux Magazine content is made possible with support from readers like you. Please consider contributing when you’ve found an article to be beneficial.
![Learn More](https://www.linux-magazine.com/var/linux_magazin/storage/images/media/linux-magazine-eng-us/images/misc/learn-more/834592-1-eng-US/Learn-More_medium.png)
News
-
NVIDIA Released Driver for Upcoming NVIDIA 560 GPU for Linux
Not only has NVIDIA released the driver for its upcoming CPU series, it's the first release that defaults to using open-source GPU kernel modules.
-
OpenMandriva Lx 24.07 Released
If you’re into rolling release Linux distributions, OpenMandriva ROME has a new snapshot with a new kernel.
-
Kernel 6.10 Available for General Usage
Linus Torvalds has released the 6.10 kernel and it includes significant performance increases for Intel Core hybrid systems and more.
-
TUXEDO Computers Releases InfinityBook Pro 14 Gen9 Laptop
Sporting either AMD or Intel CPUs, the TUXEDO InfinityBook Pro 14 is an extremely compact, lightweight, sturdy powerhouse.
-
Google Extends Support for Linux Kernels Used for Android
Because the LTS Linux kernel releases are so important to Android, Google has decided to extend the support period beyond that offered by the kernel development team.
-
Linux Mint 22 Stable Delayed
If you're anxious about getting your hands on the stable release of Linux Mint 22, it looks as if you're going to have to wait a bit longer.
-
Nitrux 3.5.1 Available for Install
The latest version of the immutable, systemd-free distribution includes an updated kernel and NVIDIA driver.
-
Debian 12.6 Released with Plenty of Bug Fixes and Updates
The sixth update to Debian "Bookworm" is all about security mitigations and making adjustments for some "serious problems."
-
Canonical Offers 12-Year LTS for Open Source Docker Images
Canonical is expanding its LTS offering to reach beyond the DEB packages with a new distro-less Docker image.
-
Plasma Desktop 6.1 Released with Several Enhancements
If you're a fan of Plasma Desktop, you should be excited about this new point release.