Tang
A stateless server for binding data decryption to network presence using asymmetric cryptography, providing a secure alternative to key escrow.
What is Tang?
Tang is a server daemon that binds data decryption to network presence, allowing data to be encrypted so it can only be accessed when the client is on a specific network. It uses asymmetric cryptography and a stateless design to provide a secure alternative to traditional key escrow systems, eliminating the need for TLS, authentication, and complex state management.
System administrators and security engineers who need to automate decryption of data (e.g., disk encryption keys) based on network location, particularly in environments where key escrow complexity is undesirable.
Developers choose Tang for its simplicity, stateless architecture, and strong security model that avoids the pitfalls of key escrows—no TLS requirements, no client authentication, and no stored keys—while providing robust network-bound encryption.
Overview
Tang binding daemon
Use Cases
Best For
- Automating decryption of LUKS disk encryption keys when a machine joins a secure network
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
