Age plugin to encrypt/decrypt files by accessing a password manager

DISCLAIMER: The author is not a cryptography engineer or anything close to it. This is the first program I've written in Rust. Use at your own risk.

Usage

Suppose you wanted to have an age identity stored in my password manager.

For example, suppose I use rbw with Bitwarden.

age-plugin-pwmgr --generate rbw --name $NAME --output key
echo "really big secret" | age -i key -e > secret.age
age -i key -d secret.age
# ( authenticate password manager with rbw )
really big secret

An x25519 key is stored under $NAME in the password manager.

rbw get $NAME
AGE-SECRET-KEY-10DF7N3B...

Try it out (nix)

nix shell github:antotocar34/acpkgs#age-plugin-pwmgr

Usecases

• Have a backup age identity in your password manager
• Use with agefs to decrypt files on the fly on a remote server.
• ???

TODO

• Add tests
• Add notion of a profile per provider (e.g. RBW_PROFILE for rbw)
• Add support for other password managers apart from rbw