age v1.3.2 Windows x64 Authenticode / Smart App Control compatibility

[dgherafertg]

The official age-v1.3.2-windows-amd64.zip (SHA256 f48d8f8f9ebe903ab5027ed067652f2cc1db94bc206976430133b905dcd8e8c7) contains age.exe SHA256 2821a4ed191da07372acd302e5f6feae7a7985e285e1417765ebe74025af45f0 (7172096 bytes). A fresh release download matches the installed copy. The current winget manifest references the same ZIP.

On Windows with Smart App Control On, Get-AuthenticodeSignature reports NotSigned and the PE certificate table has zero offset and size. CreateProcessW returned error 4551; CodeIntegrity event 3077 identified VerifiedAndReputableDesktop, status 0xc0e90002, on 2026-10-12 at 19:59 UTC. The block prevents starting local backup encryption/decryption. We have not established the reputation classification or cause of the changed behavior.

Is there a current publisher-supported Windows x64 distribution with valid Authenticode signing, or a planned signed release? If a separate legitimate distribution exists, please identify its exact version, download, hashes and signer. We want to retain Smart App Control and compatibility with existing age X25519 keys/ciphertexts. We have not disabled protection, modified the binary or changed the installed tool. Historical v1.1.0 signing notes are not being treated as proof that v1.3.2 is signed.

Reference: https://github.com/FiloSottile/age/releases/tag/v1.3.2
Only public binary metadata and a minimal error description are included; no private files, keys or machine/account identifiers.