01 / ENGINE
Container assembly
Package content and construct container headers.
THE OPEN RUST CORE
Open Crate
A reusable Rust core for encrypted document containers. Open Crate provides libraries for container format, cryptography, protocol messages, access-policy evaluation and packaging—so developers can build their own applications around it.
Open Crate is the source-available core. Close Crate is a separate document-protection service built on it.
Explore the libraries ↓What is Open Crate?
02 / POLICY
Access decisions
Evaluate access rules against supplied facts.
03 / CRYPTO
Cryptographic building blocks
Encryption, signatures and key derivation.
04 / PROTOCOL
Protocol messages
Activation, leases and revocation messages.
05 / FORMAT
Container structure
Encode, parse and verify container contents.
A library core, not a complete document service
Applications using Open Crate provide their own file access, networking, time, randomness, user interface and enforcement environment. The library alone cannot control every copy of plaintext or guarantee protection on a compromised device.
Close Crate is a separate service with its own viewer and access workflows. Using Open Crate does not include or automatically connect to the Close Crate service.
Hybrid key protection
Open Crate supports hybrid key encapsulation using ML-KEM-768 with X25519 (X-Wing) or P-256 (MLKEM768-P256). These protect document-key access; they do not make every signature or deployment post-quantum secure. ML-KEM support is not a claim of FIPS certification.
See the main site for the complete product overview and technical limitations.
Read about the Open Crate core on Close Crate ↗