rypt

rypt is an encryption service run by x6c LLC of West Virginia. To protect a value, the calling application posts it as plaintext to a single HTTPS address, authenticating with a bearer token, and receives ciphertext in return; decrypting works the same way in reverse. That spares developers from setting up key rings or cloud permissions.

What rypt does

• Encrypt and decrypt calls: one request for each operation, using JSON bodies.
• Data-key handling: wrap, unwrap and rewrap data keys for larger payloads.
• Bound values: additional authenticated data ties a value to a row, file or tenant.
• Audit log: an append-only record of every operation on a key.
• Key rotation: keys can be rotated, with older ciphertext still readable while that version is kept.

Clients

Developers who want to encrypt individual fields quickly.

Key facts

• Key storage: Google Cloud key management service, in its central United States region
• Trust model: not zero-knowledge, since plaintext reaches the service and it holds the keys
• Uptime: no guarantee in the terms
• Command line: a companion tool called rypt.sh