[Boulth]

> If it encounters midstream corruption it truncates the output, exits with a non-zero return and prints some error text std stderr:

Do you mean it releases output even if the encrypted file is corrupt or tampered with? Isn't this one of the issues in e-fail?

[AgentME]

I think the problem with e-fail was that gpg would output data before verifying it. Age will only output chunks of data after they've been verified.