# latchset/clevis

Automated Encryption Framework

Repository: https://github.com/latchset/clevis
Canonical: https://ross.abutalabs.com/products/clevis
Language: Shell
License: GPL-3.0
License Family: copyleft
Last push: 2026-07-25T23:09:10+00:00

## Health v2 (maintenance only)
Score: 80/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 94, release rhythm 51, longevity 100
- inputs: {"age_days": 3925, "days_push": 39, "days_rel": 112, "gap_med": 298.0, "n_releases_24m": 3}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1246, forks 124 (observed 2026-08-28T04:04:07.086177+00:00)

## What it is
Clevis is a pluggable framework for automated encryption and decryption, producing JWE ciphertexts that can be decrypted without user interaction. It supports pins such as Tang servers and TPM1/TPM2 chips, and is commonly used for automated unlocking of LUKS disk encryption volumes.

## Use cases
- automatically unlock LUKS encrypted disks at boot
- encrypt data so it decrypts without user interaction
- bind encryption keys to a TPM chip
- use a Tang server for network-bound encryption without escrow
- encrypt secrets into JWE objects from the command line
- set up automated decryption for headless servers

## When to choose
- you need unattended unlocking of LUKS volumes on Linux
- you want key binding to TPM hardware or a Tang server
- you need a scriptable CLI for automated encryption/decryption

## When to avoid
- you need interactive, password-based encryption for end users
- you need a cross-platform GUI encryption tool
- you are not on Linux or lack TPM/Tang infrastructure

## Facets
- artifact type: cli-tool
- maturity: active
- function: cryptography, security, cli, plugin-system
- domain: security, privacy, developer-tools
- platform: cli
- tags: luks, disk-encryption, jwe, tpm, tang, automated-decryption, network-bound-disk-encryption, command-line, linux

## Member repositories
- latchset/clevis (main) score 80

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:07.086177+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T05:08:04.238348+00:00, confidence not recorded.
  - readme: https://github.com/latchset/clevis (fetched 2026-08-28T04:04:07.086177+00:00, sha 0839217a88bd)
- Data as of 2026-08-30T08:39:29.467469+00:00.