Filippo Valsorda

Add ScryptIdentity.SetMinWorkFactor and document risk of online decryption oracles

2

### Discussed in https://github.com/FiloSottile/age/discussions/413 Originally posted by **rmculpepper** May 2, 2022 When a user attempts to decrypt a file with an scrypt passphrase, the work factor that protects the user's...

Unhelpful error message on invalid file

1

### Discussed in https://github.com/FiloSottile/age/discussions/415 Originally posted by **shepting** May 5, 2022 I was recently using `age` in an automated fashion for some CI machines and received the following message: ```...

Add scripting examples

9

Including how to use an identity stored somewhere like `pass`, and generating a new key pair and doing something with the recipient line. We already have an example for how...

We want people to use v1.0.0, not v1.0.0-rc1. bullseye-backports has v1.0.0, we should document how to use it. We should also get v1.0.0 or at least some backports into Debian...

Choose autogenerated passphrase wordlist based on $LANG

4

BIP-39 already has wordlists for a number of languages, so we can probably stick to those, even if they are not particularly great. https://github.com/bitcoin/bips/tree/master/bip-0039

BIP-39 mnemonics for age identities

4

An age identity is 256 bits, so it fits in a BIP-39 24 words mnemonic unmodified. We could add a mode to age-keygen like `-y`, or make a separate tool.

https://www.backblaze.com/b2/docs/uploading.html > 400 Bad Request > bad_request - message will describe the problem > cap_exceeded - you have reached the storage cap that you set > 401 Unauthorized > missing_auth_token...

Cache keys

4

This is an awesome resource, thank you! I noticed you use `${{ hashFiles('**/go.sum') }}` as a cache key for the module cache. I am not sure that does what it...

testscript: add pty/ptyout commands

4

This allows testing commands that open `/dev/tty` to interact with the user separately from stdin/stdout, like age. See https://github.com/FiloSottile/age/blob/084c974f5393e5d2776fb1bb3a35eeed271a32fa/cmd/age/testdata/terminal.txt and https://github.com/FiloSottile/age/blob/084c974f5393e5d2776fb1bb3a35eeed271a32fa/cmd/age/testdata/scrypt.txt for example scripts.

testscript: import timeout behavior from stdlib

2

This uses the `-test.timeout` flag (or the `Params.Deadline` field) to send first `SIGQUIT` (to get a stack trace) and then `SIGKILL` to a stuck command. It's mostly imported from the...