[ezcrypt]

Very good point!

I have been planning to look into authentication. I didn't need it for my use cases, yet, but as you say that should be an integral part of any serious tool. I added a ticket: https://codeberg.org/ezcrypt/ezcrypt/issues/3

In the meantime, signing and verification can be done separately, e.g. with ssh-keygen, although that is a bit inconvenient (which kind of defeats one of the key points of the tool).

[tptacek]

You can't safely encrypt without authentication, so you do indeed need it.

[ezcrypt]

For the record: The latest release of ezcrypt (v1.3.0) has poly1305 authentication. Thanks for the feedback!