age secret key (X25519 identity)
ID age_secret_key
DatatypeNot PIIidentifierDraft
This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).
Secret key (identity) of the age file encryption format and tool, which decrypts files encrypted to the matching age1... public key. It is an uppercase Bech32 string with the human-readable part AGE-SECRET-KEY-, so it starts with AGE-SECRET-KEY-1 and has 74 characters. Post-quantum identities start with AGE-SECRET-KEY-PQ-1. The Bech32 checksum covers the whole string, including the hyphens of the prefix.
- Parent datatype
- Private key or wallet seed (generic)
private_key - Categories
- Secrets and credentials (passwords, keys, tokens), Cryptographic identifiers
- Countries
- Global (not tied to a country)
- Languages
- Common to most languages
- Quality
- 85/100 · missing: mapping (Wikidata, Schema.org, ...), translation
- Metacrafter rules
- no detection rule yet
- Supported by tools
- Gitleaks
Regular expression
^AGE-SECRET-KEY-(?:PQ-)?1[QPZRY9X8GF2TVDW0S3JN54KHCE6MUA7L]{58}$Python re syntax.
Examples
| Value | Description |
|---|---|
| AGE-SECRET-KEY-1GFPYYSJZGFPYYSJZGFPYYSJZGFPYYSJZGFPYYSJZGFPYYSJZGFPQ4EGAEX | X25519 test vector of the age specification |
| AGE-SECRET-KEY-PQ-1XX76JRALNLXDMEW0CRK45QMCCH4X06SE84UN3VPM33W6HWDX0H3SK3ZQFR | Post-quantum (ML-KEM-768 + X25519) test vector of the age specification |
| age-secret-key-1gfpyysjzgfpyysjzgfpyysjzgfpyysjzgfpyysjzgfpyysjzgfpq4egaex invalid | Lower case |
Sources
- doc: https://github.com/C2SP/C2SP/blob/main/age.md
- other: https://github.com/gitleaks/gitleaks/blob/master/config/gitleaks.toml
Use this record
- Page URL:
http://registry.apicrafter.io/datatype/age_secret_key - JSON: API v1 · legacy shape (used by metacrafter) · Markdown (for LLMs)
- Improve it: edit
data/datatypes/any/secrets/age_secret_key.yamlon GitHub