From d12a9a633ad9f6bc9ea558abd5ce10f374162115 Mon Sep 17 00:00:00 2001 From: isabel Date: Fri, 8 May 2026 21:30:46 +0100 Subject: [PATCH] chore(blog): remove post quantum note --- src/content/nixos-and-secrets.md | 18 ++++++++++++------ 1 file changed, 12 insertions(+), 6 deletions(-) diff --git a/src/content/nixos-and-secrets.md b/src/content/nixos-and-secrets.md index 93b4cbb..1d2bdf7 100644 --- a/src/content/nixos-and-secrets.md +++ b/src/content/nixos-and-secrets.md @@ -215,12 +215,18 @@ more than a couple of services that each want a bundle of related secrets, sops-nix will scale better. If you're starting from scratch and you mostly have a handful of standalone tokens, agenix will get you there with less ceremony. -It is also important to note at this current moment of time agenix is [**NOT** -post quantum safe](https://github.com/ryantm/agenix#threat-modelwarnings). -However, the same issue applies to sops-nix but not because of a limitation of -sops like agenix's limitation in the age cli. But rather due to sops-nix not -supporting Post-Quantum age keys -[sops-nix#885](https://github.com/Mic92/sops-nix/issues/885). +~~It is also important to note at this current moment of time agenix is +[**NOT** post quantum +safe](https://github.com/ryantm/agenix#threat-modelwarnings). However, the same +issue applies to sops-nix but not because of a limitation of sops like agenix's +limitation in the age cli. But rather due to sops-nix not supporting +Post-Quantum age keys +[sops-nix#885](https://github.com/Mic92/sops-nix/issues/885).~~ + +Since writing I have been corrected in saying this as age and sops do support +post-quantum secure encryption keys. Since +[age#578](https://github.com/FiloSottile/age/issues/578) was closed and +[v1.3.0](https://github.com/FiloSottile/age/releases/tag/v1.3.0) was released. ## Conclusion -- 2.51.2