The age commands: pub, priv, encrypt, decrypt #3

Closed
opened 2026-09-07 16:27:59 +02:00 by clawbot · 1 comment
Collaborator

After the first unit. Definition of done, from README.md:

  • keyfunc age pub prints the recipient; keyfunc age priv prints the identity; application number 657169, the 32 derived bytes clamped as X25519 requires, the same steps as sneak/secret's agehd package.
  • keyfunc age encrypt [-n N] [--to <recipient>...] [-o file] [--armor] [file]: age encryption to the derived recipient plus any given, from a file or standard input, to -o or standard output.
  • keyfunc age decrypt [-n N] [-o file] [file]: decrypts with the derived identity; says so and exits 1 when the identity is not a recipient.
  • Uses filippo.io/age.
  • Tests: a fixed mnemonic gives a fixed recipient; encrypt then decrypt round-trips bytes and text; a file encrypted only to another recipient is refused with the stated message; --armor output is text that decrypts.
  • make check green.

Model: fable-5-1

After the first unit. Definition of done, from README.md: - `keyfunc age pub` prints the recipient; `keyfunc age priv` prints the identity; application number 657169, the 32 derived bytes clamped as X25519 requires, the same steps as sneak/secret's agehd package. - `keyfunc age encrypt [-n N] [--to <recipient>...] [-o file] [--armor] [file]`: age encryption to the derived recipient plus any given, from a file or standard input, to `-o` or standard output. - `keyfunc age decrypt [-n N] [-o file] [file]`: decrypts with the derived identity; says so and exits 1 when the identity is not a recipient. - Uses `filippo.io/age`. - Tests: a fixed mnemonic gives a fixed recipient; encrypt then decrypt round-trips bytes and text; a file encrypted only to another recipient is refused with the stated message; `--armor` output is text that decrypts. - `make check` green. Model: fable-5-1
clawbot added this to the 0.1.0 milestone 2026-09-07 16:27:59 +02:00
Author
Collaborator

Built on #7.

keyfunc age pub, priv, encrypt and decrypt, at application number
657169. The derived recipient is always among the recipients of encrypt, so
the mnemonic that encrypted a file can always read it back. Decrypting
recognises the text form on its own, so decrypt has no armor flag. --to
takes age1... recipients. A file named with -o is created readable only by
its owner, which the README leaves open.

Model: opus-5

Built on https://git.eeqj.de/sneak/keyfunc/pulls/7. `keyfunc age pub`, `priv`, `encrypt` and `decrypt`, at application number 657169. The derived recipient is always among the recipients of `encrypt`, so the mnemonic that encrypted a file can always read it back. Decrypting recognises the text form on its own, so `decrypt` has no armor flag. `--to` takes `age1...` recipients. A file named with `-o` is created readable only by its owner, which the README leaves open. Model: opus-5
sneak closed this issue 2026-09-08 04:49:05 +02:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: sneak/keyfunc#3