Rot

Rot is a command-line tool for managing cryptographic values, solving the problem of securely generating, storing, sharing, and rotating secrets in development and deployment workflows. It targets developers, IT, and operations teams in organizations of various sizes, particularly those needing to integrate secret management into build and deployment processes. It is positioned as an open-source, boring cryptography tool that emphasizes using best algorithms, version control for secrets, and easy sharing via Shamir Secret Sharing, with delivery as a CLI tool.

Key features

• Generate keys and values using best encryption
• Generate and verify signatures
• Generate and view JWTs
• Generate and view SSH keys and certificates
• Generate and view X.509 certificates and CAs
• Generate post-quantum cryptographic keys and secrets
• Perform one-way encryption for zero-knowledge secrets
• Rekey encrypted values to latest standards
• Inject secrets into environment variables
• Share secrets using Shamir Secret Sharing
• Store encrypted values in git with human-readable diffs
• Version and track secrets