[//]: # "Copyright Amazon.com Inc. or its affiliates. All Rights Reserved."
[//]: # "SPDX-License-Identifier: CC-BY-SA-4.0"

# AWS Crypto Tools

We build open source cryptographic libraries that are easy to use, and hard to misuse.
Cryptography is hard to do safely and correctly.
Our libraries are designed to help you do cryptography right, even without special expertise.
Our client-side encryption libraries help you to protect your sensitive data
at its source using secure cryptographic algorithms, envelope encryption, and signing.

[Security issue notifications](./CONTRIBUTING.md#security-issue-notifications)

## AWS Encryption SDK

The AWS Encryption SDK is a client-side encryption library
designed to make it easy for you to encrypt and decrypt data using industry standards and best practices.
It enables you to focus on the core functionality of your application,
rather than on how to best encrypt and decrypt your data.

- Developer Guide
  [[source]](https://github.com/awsdocs/aws-encryption-sdk-docs)
  [[hosted]](https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/introduction.html)
- Specification
  [[source]](https://github.com/awslabs/aws-encryption-sdk-specification)
- C
  [[source]](https://github.com/aws/aws-encryption-sdk-c)
  [[API docs]](https://aws.github.io/aws-encryption-sdk-c/html)
- Java
  [[source]](https://github.com/aws/aws-encryption-sdk-java)
  [[API docs]](https://aws.github.io/aws-encryption-sdk-java/javadoc)
- Javascript
  [[source]](https://github.com/aws/aws-encryption-sdk-javascript)
- Python
  [[source]](https://github.com/aws/aws-encryption-sdk-python)
  [[API docs]](https://aws-encryption-sdk-python.readthedocs.io)

### AWS Encryption CLI

You can use the AWS Encryption CLI to encrypt and decrypt files and directories with the AWS Encryption SDK.

- AWS Encryption CLI
  [[source]](https://github.com/aws/aws-encryption-sdk-cli)
  [[API docs]](https://aws-encryption-sdk-cli.readthedocs.io)

## AWS DynamoDB Encryption Client

The Amazon DynamoDB Encryption Client is a software library
that helps you to protect your table data before you send it to Amazon DynamoDB.

- Developer Guide
  [[source]](https://github.com/awsdocs/aws-dynamodb-encryption-docs)
  [[hosted]](https://docs.aws.amazon.com/dynamodb-encryption-client/latest/devguide/what-is-ddb-encrypt.html)
- Java
  [[source]](https://github.com/aws/aws-dynamodb-encryption-java)
  [[API docs]](https://aws.github.io/aws-dynamodb-encryption-java/javadoc)
- Python
  [[source]](https://github.com/aws/aws-dynamodb-encryption-python)
  [[API docs]](https://aws-dynamodb-encryption-python.readthedocs.io)

## Amazon Corretto Crypto Provider (ACCP)

ACCP implements the standard Java Cryptography Architecture (JCA) interfaces
and replaces the default Java cryptographic implementations
with those provided by `libcrypto` from the OpenSSL project.
ACCP allows you to take full advantage of
assembly-level and CPU-level performance tuning,
to gain significant cost reduction, latency reduction, and higher throughput.

- ACCP
  [[source]](https://github.com/corretto/amazon-corretto-crypto-provider)

## Other products

- Base64IO
  [[source]](https://github.com/aws/base64io-python)
  [[API docs]](https://base64io-python.readthedocs.io):
  A stream implementation for Python that provides transparent base64 encoding and decoding of an underlying stream.
- AWS SDK for JS v3 Crypto Helpers
  [[source]](https://github.com/aws/aws-sdk-js-crypto-helpers):
  AWS Cryptographic helpers for Javascript and Node.js

## Experimental

- PKCS11 runners for Project Wycheproof
  [[source]](https://github.com/awslabs/pkcs11-runners-for-project-wycheproof)
- Pipeformer
  [[source]](https://github.com/awslabs/pipeformer)

# Documentation

- [AWS Crypto Tools Documentation](https://docs.aws.amazon.com/aws-crypto-tools)

# Need Help?

To get in touch with us, open an issue in the relevant repository and we'll help out.

# Security Issue Notifications

If you identify a potential security issue in one of these projects please immediately notify AWS/Amazon Security
via our [vulnerability reporting page](https://aws.amazon.com/security/vulnerability-reporting/).
Please do **not** create a public Github issue.

# Contributing

We welcome issues and PRs on any of our repositories.

# Jobs

Interested in making the world more secure?
[We're hiring](https://www.amazon.jobs/en/search?cities[]=Seattle%2C%20Washington%2C%20USA&business_category[]=amazon-web-services&base_query=crypto%20tools)!