age-enc

age-enc

#!/bin/bash

PUBKEY_PATH=$1
if [ -z "$PUBKEY_PATH" ] || [ ! -f "$PUBKEY_PATH" ]; then
    echo "Usage: echo 'content' | $0 <path to the pub key>"
    exit 1
fi

KEY_CONTENT=$(cat "$PUBKEY_PATH")
if [[ "$KEY_CONTENT" == ssh-ed25519* ]]; then
    ID_FILE="id_ed25519"
elif [[ "$KEY_CONTENT" == ssh-rsa* ]]; then
    ID_FILE="id_rsa"
elif [[ "$KEY_CONTENT" == ecdsa-sha2* ]]; then
    ID_FILE="id_ecdsa"
else
    ID_FILE="id_rsa" # default
fi

ENCRYPTED_DATA=$(cat | age -a -R "$PUBKEY_PATH" 2>/dev/null)

if [ -z "$ENCRYPTED_DATA" ]; then
    echo "Failed to encrypt!"
    exit 1
fi

echo "cat << 'EOF' | age -d -i ~/.ssh/$ID_FILE"
echo "$ENCRYPTED_DATA"
echo "EOF"