Age plugin for Apple's Secure Enclave
age-plugin-se is a plugin for age, enabling encryption using Apple's Secure Enclave.
$ age-plugin-se keygen --access-control=any-biometry -o key.txt Public key: age1se1qgg72x2qfk9wg3wh0qg9u0v7l5dkq4jx69fv80p6wdus3ftg6flwg5dz2dp $ tar cvz ~/data | age -r age1se1qgg72x2qfk9wg3wh0qg9u0v7l5dkq4jx69fv80p6wdus3ftg6flwg5dz2dp -o data.tar.gz.age $ age --decrypt -i key.txt -o data.tar.gz data.tar.gz.age
<div align="center" <img src="https://raw.githubusercontent.com/remko/age-plugin-se/main/Documentation/img/screenshot-biometry.png" alt="Biometry prompt" width=350/ </div
Besides direct usage with age as above, you can use it with any tool that uses age in the backend. For example, you can store your passwords with passage, and conveniently access them with Touch ID.
Requirements
To generate identities (private keys) and decrypt encrypted files, you need a Mac running macOS 14 (Sonoma) with a Secure Enclave processor.
For encrypting files, you need macOS 14 (Sonoma), Linux, or Windows. A Secure Enclave processor is not necessary.
Installation
Homebrew
brew install age-plugin-se
Pre-built binary
- Download a binary from [the releases
page](https://github.com/remko/age-plugin-se/releases)
- Extract the package
- (Windows only) Download and install
Swift
- (macOS only) Trust age-plugin-se once by Control-clicking the file
in Finder, choosing Open, and confirming trust