Age

Keys

Generate a key pair

age-keygen -o key.txt

Display public key

grep public key.txt

Encryption & Decryption

Encrypt a file (to recipient)

age -r <recipient_public_key> -o <file>.age <file>

Encrypt a file (multiple recipients)

age -r <recipient1> -r <recipient2> -o <file>.age <file>

Encrypt a file with passphrase

age -p -o <file>.age <file>

Decrypt a file

age -d -i key.txt -o <file> <file>.age

Decrypt a file with passphrase

age -d -o <file> <file>.age

Misc

Use age with stdin/stdout

cat <file> | age -r <recipient_public_key> > <file>.age
cat <file>.age | age -d -i key.txt > <file>

Generate key in YAML format (for Kubernetes Sealed Secrets)

age-keygen | kubeseal --cert <cert.pem> --format yaml