OpenKeychain VS age

https://issuetracker.google.com/issues/238257723 https://github.com/open-keychain/open-keychain/pull/2804

In addition to my PC set up I am also using the Android Password Store in combination with OpenKeyChain. Everything works fine except that decrypting any password simply works without requiring my PIN. I've tried both USB C connection and NFC and neither interface requires the PIN.

OpenKeychain is an Android app for doing some basic GPG related work. It can verify signatures (hidden in the "encrypt/decrypt" menu)

Also it integrates i.e. with K-9 mail to sign and verify.

https://github.com/open-keychain/open-keychain

OpenKeychain https://www.openkeychain.org/ integrates with multiple apps for encrypting your mail, plain texts, backups, xmpp chats.

I don't know what features you are looking for in encryption software but OpenKeychain is foss, audited and works just fine if you just want basic encryption/decryption/signing.

OpenKeychain: Easy PGP (version 5.8.0): Encrypt your Files and Communications. Compatible with the OpenPGP Standard.

I use mailbox.org with the encrypted inbox, Mozilla Thunderbird on desktop, and FairEmail + OpenKeychain on Android. I think StartMail is the only other one of those four options that supports standard IMAP and SMTP.

On Android OpenKeychain, TermBot, and K-9 Mail, are awesome.

The easier and more productive thing is to make an easy-to-use tool that does a specific workflow vs trying to be a swiss army knife.

https://github.com/FiloSottile/age is this for encrypting files.

https://en.wikipedia.org/wiki/Signify_(OpenBSD) and https://jedisct1.github.io/minisign/ are this for signing files.

Signal/Whatsapp/etc that use the Signal Protocal are this for messaging.

It turns out solving one problem at a time and ending up with a bunch of purpose-built tools is way easier to get right than trying to jam an entire toolbox into one thing.

Age is a modern, simple, and secure encryption tool. If you’re new to encryption, age is a great alternative to GPG.

Hi! Here are some notes about how to use secrets in NixOS configuration securely. As of now I use sops-nix with simple age keys (not generated from ssh keys).

Those aren’t even the correct answer for the use-case in question, anywho. What they’re looking for would actually be sops (https://github.com/getsops/sops), or age (made by the fantastic Filo Sottile: https://github.com/FiloSottile/age), or, hell, just using libsodium sealed boxes. AMS KMS or Vault is perhaps even worse of an answer, Actually

It looks like age with SSH keys uses a birationally equivalent keypair.

https://github.com/FiloSottile/age/blob/176e245b3cb3ada322c2...

If you're using, for example, libsodium, you'd want the Ed25519 to X25519 functions to convert the two. (Note that you need to operate over raw bytes to do this.)

In practice, you shouldn't do this. Use different keys for different purposes!

I migrated to chezmoi recently my only gripe is `chezmoi cd` opening in a new shell but `chezmoi git` usually is what I need. The age [0] integration is nice.

[0] - https://github.com/FiloSottile/age

I believe there is `pass-age` https://github.com/FiloSottile/passage ... unifies to `ssh` keys as the key material.

https://github.com/FiloSottile/age

```

I have been a fan of https://github.com/FiloSottile/age for a while now, but one thing that has always bothered me about encryption tools is how they don't offer a way to secure a whole directory which, IMO, is a much more common use-case.

I decided to spend a couple hours tackling the problem myself and came up with agevault.

It's a directory encryption tool using age file encryption. It locks/unlocks a vault (directory) with a passphrase-protected identity file and like age, it features no config options, allowing for a straightforward secure flow.

I'll answer any questions regarding it. As always, use it at your own risk.

Identity files can be passphrase encrypted and cmd/age will transparently ask for the passphrase before using them. Is that what you meant?

https://github.com/FiloSottile/age?tab=readme-ov-file#passph...