remko / age-plugin-se Goto Github PK

Hello.

Thank you for the work you've done!

Could you explain why installing the plugin from brew requires Xcode? Why can't the binary file from the release simply be packaged in brew, and instead it has to be built?
Maybe a section about this should be added to the README so that other users don't have these questions?

Thank you!

Hey, need some help to understand what exactly is encrypted and where. For example

Would it be safe to keep an identity encrypted with my current-biometry in a public repo?
I'm assuming noone could actually use it unless they both have access to my laptop AND my biometry.

Or of course, if there is some vulnerability in the encryption algorithm itself

Not sure if this is the best medium to ask, but thanks in advance

Is it possible to make a version of this app that can extract a password from a macOS custom (non-login) keychain? The macOS security command always asks for password only which makes it annoying to script. It would be nice to have a command that can work with a custom keychain that can read a password from the keychain auth'ed with Touch ID only and output it so it can be piped into another script, temporarily stored in an env variable, etc.

One immediate application would be termotp, without involving age at all, we could just store the Aegis password directly in the Keychain. Nothing wrong with age or age-plugin-se, in fact I'm grateful they both exist, but the fewer moving parts the better.

age-plugin-se keygen -o abop.biometric.age --access-control any-biometry-or-passcode
public key: es1se.............,
AGE-PLUGIN-SE-1.....................................................

maybe there is an option I am missing. if you could advise. Looks unencrypted to me.

I get it to work besides that, although with a few work-arounds, but that is a no-no for me.

I'll wait till that is fixed to follow this then...

It seems stuck at 0.0.4

Also, any chance to push it into the homebrew core repo?

Thank you.