1.2 KiB
Encryption
We have GnuPG & password-store installed by default, mainly for password management, authentication & communication encryption.
We also have LUKS2 for disk encryption on Linux, and rclone for cross-platform data encryption & syncing.
age may be more general for file encryption.
Sops can be used for file encryption too, if you prefer using a Cloud provider for key management.
Asymmetric Encryption
Both age, Sops & GnuPG provide asymmetric encryption, which is useful for encrypting files for a specific user.
For morden use, age is recommended, as it use AEAD encryption function - ChaCha20-Poly1305, If you do not want to manage the keys by yourself, Sops is recommended, as it use KMS for key management.
Symmetric Encryption
Both age & GnuPG provide symmetric encryption, which is useful for encrypting files for a specific user.
As described in age Format v1, age use scrypt to encrypt and decrypt the file key with a provided passphrase, which is more secure than GnuPG's symmetric encryption.