34fdd92351
* feat: comment out nixpkgs-unstable, we use unstable by default Signed-off-by: Ryan Yin <xiaoyin_c@qq.com> * fix: typo... --------- Signed-off-by: Ryan Yin <xiaoyin_c@qq.com>
Encryption
We have GnuPG & password-store installed by default, mainly for password management, authentication & communication encryption.
We also have LUKS2 for disk encryption on Linux, and rclone for cross-platform data encryption & syncing.
age may be more general for file encryption.
Sops can be used for file encryption too, if you prefer using a Cloud provider for key management.
Asymmetric Encryption
Both age, Sops & GnuPG provide asymmetric encryption, which is useful for encrypting files for a specific user.
For modern use, age is recommended, as it use AEAD encryption function - ChaCha20-Poly1305, If you do not want to manage the keys by yourself, Sops is recommended, as it use KMS for key management.
Symmetric Encryption
Both age & GnuPG provide symmetric encryption, which is useful for encrypting files for a specific user.
As described in age Format v1, age use scrypt to encrypt and decrypt the file key with a provided passphrase, which is more secure than GnuPG's symmetric encryption.