Documentation | Latest releases | Get support

Tempel

Data security framework for Clojure

Tempel is a lightweight encryption framework that wraps the JVM's native crypto facilities to provide a high-level Clojure API that is: idiomatic, simple, and easy-to-use even for non-experts.

It incorporates best practices and reasonable defaults to help simplify many common data security needs.

Latest release/s

• 2023-11-13 1.0.0-alpha1: release notes

See here for earlier releases.

Why Tempel?

• Easy-to-use, high-level API focused on common tasks like logins, encryption, signing, etc.
• Reasonable defaults including choice of algorithms and work factors
• Future-proof data formats with auto-updated algorithms and work factors over time
• Support for ⧉ symmetric and ⧉ asymmetric (public-key) encryption
• Automatic ⧉ scrypt and ⧉ pbkdf2 support for easy password-based key stretching
• Simple key management API for password resets, key rotations, etc.
• Beginner-oriented docstrings and documentation

Note that Tempel is not intended for interop with other cryptographic tools/APIs.

Disclaimer

Important: while Tempel has been written and tested with care, the nature of the problem domain inevitably means that bugs and/or misuse can be especially harmful and/or easy to make.

Bugs and/or misuse could lead to security vulnerabilities or even permanent data loss.

Please be very careful evaluating Tempel and/or other cryptographic libraries/frameworks before use, especially new libraries/frameworks like Tempel!

Documentation

• Full documentation (getting started and more)
• Auto-generated API reference: Codox, clj-doc

Security advisories

No advisories as of last README update. If any security vulnerabilities are discovered, they will be listed here along with an appropriate CVE.

Security reports

To report a possible security vulnerability, please email me at my first name at taoensso.com. For particularly sensitive content, you may encrypt your message with my public PGP/GPG key. Thank you! - Peter Taoussanis

Funding

You can help support continued work on this project, thank you!! 🙏

License

Copyright © 2023 Peter Taoussanis.
Licensed under EPL 1.0 (same as Clojure).