str4d / rage

A simple, secure and modern file encryption tool (and Rust library) with small explicit keys, no config options, and UNIX-style composability.
https://age-encryption.org/v1
Apache License 2.0
2.69k stars 104 forks source link

UX: Nonce injection #537

Closed ghost closed 1 month ago

ghost commented 1 month ago

In AES/ ChaCha modes, some inject the nonce / iv into the file for decryption purposes. This is problematic for executable file encryption, as it is possible to render the executable inoperable by moving a single byte in error. The standard practice is to clearly warn people to zip/tar or otherwise compress the file before encrypting it if it is an executable. There is no mention of anything in Age or Rage.