Libraries tagged by envelope-encryption

Secrets Vault - Central, secure storage for API keys, credentials and other secrets with envelope encryption, access control, audit logging and a secure HTTP client.

Go to Download

Vortos Secrets — billion-dollar-grade secrets management: redact-by-construction values, envelope encryption (XChaCha20-Poly1305 payload + off-host age/X25519 key custody), two-phase rotation with grace windows, fail-closed CI/doctor preflight, and zero-standing-secret injection. Built on the OpsKit driver pattern.

Go to Download

Production-grade envelope encryption (DEK/KEK) for Laravel. AWS KMS, GCP Cloud KMS, Azure Key Vault, HashiCorp Vault Transit.

Go to Download

Cifrado de columnas de Eloquent con una llave de datos por tenant, envuelta por Google Cloud KMS.

Go to Download

Standalone encryption for MonkeysLegion v2 — AES-GCM, XChaCha20, HMAC, key rotation, envelope encryption, PHP 8.4 hooks

Go to Download

This package makes it more convenient to perform envelope encryption.

Go to Download

PHP FFI bindings for Asherah envelope encryption.

Go to Download

PHP 8.4+ envelope encryption library for structured data protection

Go to Download

Application-level symmetric encryption for PHP

Go to Download

BLOXY zero-knowledge envelope-encryption primitive — client-held KEK, per-record DEKs, BIP39 recovery, MOCK mode for seeders. Server stores opaque ciphertext only.

Go to Download

Server-to-server client for open-banking.io: API-key auth and local zero-knowledge envelope decryption.

Go to Download