Is it safe to pipe age directly in to tar?

[older-pack]

Is this workflow safe? No hidden gotchas?

If I encrypt with a password:

$ age -p in.tar.xz > out.tar.xz.age

Is it safe to decrypt and pipe straight to tar?

$ age -d out.tar.xz.age | tar Jxf -

(By safe, I mean the password isn't leaked to on the command line etc.)

Thanks for any feedback

[hakavlad]

The password is requested interactively and does not leak.

Unverified plaintext is not released, it's OK.

Encrypting streams is one of the purposes of age.

So, it's safe.

[older-pack]

Thank you.