Ross ROSS = Recommend OSS · open-source software intelligence for agents

cossacklabs/themis

Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms. observed · 2026-08-28

github.com/cossacklabs/themis · homepage · C · Apache-2.0 (permissive) observed · 2026-08-28

Health v2 · maintenance only

76/100

  • Activity 79
  • Release rhythm 57
  • Longevity 100
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.

  • gap_med: 104
  • age_days: 4137
  • days_rel: 131
  • days_push: 131
  • n_releases_24m: 2

Full methodology

Adoption not part of the score

1973 stars · 159 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Themis is a cross-platform, high-level cryptographic library providing ready-made building blocks for secure data storage, encrypted messaging, session-based encryption with forward secrecy, and zero-knowledge authentication. It offers unified APIs across 14 platforms and languages including Swift, Java/Kotlin, Python, Go, Rust, and JavaScript/WASM, hiding cryptographic details to prevent developer mistakes.

Use cases

  • encrypt stored secrets like API keys, session tokens, and files
  • add end-to-end encryption to a mobile chat app
  • encrypt sensitive database fields at the application level
  • build secure real-time sessions with forward secrecy for IoT device control
  • authenticate users with zero-knowledge proofs without sending passwords
  • exchange encrypted and signed messages between client and server
  • use one consistent crypto API across iOS, Android, and backend

When to choose

  • you need usable, hard-to-misuse cryptography across multiple platforms with consistent behavior
  • you want high-level primitives (storage encryption, secure messaging, sessions) instead of assembling raw crypto algorithms
  • you're building a mobile or multi-platform app that OWASP-recommended, audited crypto
  • you need forward secrecy or zero-knowledge authentication without implementing protocols yourself

When to avoid

  • you need low-level control over cryptographic primitives or custom protocol construction
  • you need FIPS-validated or formally certified cryptography for compliance regimes
  • your platform or language is outside the 14 supported ones (e.g., experimental Windows support only)
  • you only need TLS for transport security - standard libraries suffice

Facets

library · maturity stable

cryptography security auth sdk security privacy mobile-development web-development developer-tools windows cross-platform python go rust jvm php ruby cpp wasm secure-messaging secure-storage forward-secrecy zero-knowledge-proof end-to-end-encryption field-level-encryption owasp multi-platform high-level-crypto secure-cell secure-session secure-message secure-comparator ios android macos linux nodejs mobile desktop web-server

10 sources

Member repositories

RepositoryRoleHealth v2
cossacklabs/themismain76

For agents

markdown · JSON · MCP: product_card(name="cossacklabs/themis")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem