latchset/clevis
Automated Encryption Framework observed · 2026-10-20
Health v2 · maintenance only
91/100
- Activity 100
- Release rhythm 75
- Longevity 100
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-21. Adoption (stars, forks) is never an input.
- gap_med: 106.0
- age_days: 3973
- days_rel: 5
- days_push: 4
- n_releases_24m: 3
Adoption not part of the score
1279 stars · 127 forks observed · 2026-10-20
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
Clevis is a pluggable framework for automated encryption and decryption, producing JWE ciphertexts that can be decrypted without user interaction. It supports pins such as Tang servers and TPM1/TPM2 chips, and is commonly used for automated unlocking of LUKS disk encryption volumes.
Use cases
- automatically unlock LUKS encrypted disks at boot
- encrypt data so it decrypts without user interaction
- bind encryption keys to a TPM chip
- use a Tang server for network-bound encryption without escrow
- encrypt secrets into JWE objects from the command line
- set up automated decryption for headless servers
When to choose
- you need unattended unlocking of LUKS volumes on Linux
- you want key binding to TPM hardware or a Tang server
- you need a scriptable CLI for automated encryption/decryption
When to avoid
- you need interactive, password-based encryption for end users
- you need a cross-platform GUI encryption tool
- you are not on Linux or lack TPM/Tang infrastructure
Facets
cli-tool · maturity active
cryptography security cli plugin-system security privacy developer-tools cli luks disk-encryption jwe tpm tang automated-decryption network-bound-disk-encryption command-line linux
1 source
- readme: https://github.com/latchset/clevis · fetched 2026-10-20 · 0839217a88bd
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| latchset/clevis | main | 91 |
For agents
Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem