THE PRACTICAL GUIDE · NORMANDIN SYSTEMS
Get more from AGE Cryptography
AGE Cryptography: Provides a simple and easy-to-use open-source Age tool for generating keys, encrypting, and decrypting messages. Age separates recipient information used for encryption from private identity material used for decryption, which makes key roles important when testing an exchange. Cryptographic operations depend on exact agreement about algorithms, keys, encodings, and message formats. A successful local demonstration is useful for understanding a workflow, but interoperability should be checked with the program or protocol that will consume the output. Keep secret material separate from public information and use disposable test keys while experimenting. Encryption, signing, and hashing answer different questions: confidentiality, authenticity, and data representation are not the same property. Record the relevant parameters and verify the reverse operation or verification result before relying on an output.
Guide updated October 13, 2026
How to use this tool
- Begin with a representative input. For a practical test, use: Disposable age recipient key and the message Project sample. Replace demonstration values only after you understand the output.
- Use sample plaintext and disposable keys to select the operation and supply the key material or parameters requested by the interface.
- Inspect the result and any error message, checking algorithm choices, key formats, and whether the operation expects public or private material.
- Test decryption or verification with the intended receiving application and retain the parameters needed to reproduce that workflow.
SEE IT IN PRACTICE
A worked example
Disposable age recipient key and the message Project sample
An age-encrypted message that the corresponding identity can decrypt
Ciphertext normally changes across encryptions, so verify by successful decryption rather than comparing two encrypted strings for equality.
Recipient identity precedes message protection
A public key can be copied freely, but its association with a person or system needs a trusted verification process. Compare an appropriate fingerprint or authenticated key source before using it for real data. Keep private identity material on the receiving side. The specific age or OpenPGP format determines the supported recipient and message structures; do not assume their keys or ciphertext are interchangeable.
Verify a full recovery path
Begin with a short message or small file and disposable keys. Encrypt, transfer through the intended channel, decrypt with the intended software, and compare the recovered content. For files, a content hash can confirm byte-for-byte recovery. Retain the original until the test succeeds. Record the format and application expectations so a future recipient can repeat the process without guessing which representation was used.
When this tool is useful
- Test an age message exchange
- Explore recipient-based encryption
- Check age file interoperability
Tips for a better result
- Keep the AGE-SECRET-KEY identity private; a recipient string is the shareable part of the workflow.
- Public keys may be distributed, while private keys and shared secrets require controlled storage and handling.
- An output that looks like encoded text is not enough to prove compatibility; test it with the actual receiving implementation.
Frequently asked questions
Why must I verify the recipient’s public key before encrypting?
Encryption protects data for the key you actually use. If that key belongs to the wrong recipient, the intended person may be unable to decrypt while the wrong key owner can.
Why does another application reject my output?
Common causes include different key containers, padding choices, algorithm versions, text encodings, or missing metadata. Compare the complete format and parameters rather than only the algorithm’s general name.
What is a useful end-to-end test?
Use disposable keys and a known sample message. Confirm that the intended receiver can decrypt or verify the result, then change the message or use an incorrect key to confirm that the expected failure is detected.
What happens to the information I enter?
The utility processes your input in this browser. Some tools retain field values in browser storage or the URL; avoid entering secrets in shareable fields. Page and asset requests still go to the hosting provider. Read the privacy and offline-use notes for details.