How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Need help?

Contact us
Fortanix

Fortanix Crypto API

The Crypto API from Fortanix — 24 operation(s) for crypto.

Documentation Provider Profile APIs.io OpenAPI GitHub

Fortanix Crypto API is one of 51 APIs that Fortanix publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Crypto. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, and an API reference.

This API exposes 24 operations across 24 paths, and defines 201 schemas. It is described by OpenAPI 3.2.0, at version 0.1.0-20260710.

Requests are made against a single base URL, {dsmEndpoint}.

24 operations 24 paths 201 schemas 24 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
0.1.0-20260710
Base URL
https://amer.smartkey.io
Authentication
HTTP Basic, API Key, HTTP Bearer
Contact
Fortanix Support
License
Apache 2.0
Terms of Service
View terms
Resource Areas
1

Authentication & Security 3

Fortanix Crypto API declares 3 security schemes for authenticating requests. It accepts HTTP basic authentication (basicAuth). An API key is passed in the header as Authorization (apiKeyAuth). It accepts HTTP bearer tokens (JWT) (bearerToken).

  • apiKeyAuth — Please enter your token prefixed with 'Basic ' (e.g., 'Basic yourtokenhere')

Paths & Operations 24

Across 24 paths, the API surfaces 24 operations — 24 POST. Each is listed below with its method, path, parameters, and response codes.

Crypto 24
POST
/crypto/v1/agree
Agree on a key from two other keys.
Agree body → 2XX
POST
/crypto/v1/keys/batch/decrypt
Batch decrypt with one or more keys.
BatchDecrypt body → 2XX
POST
/crypto/v1/keys/batch/encrypt
Batch encrypt with one or more keys.
BatchEncrypt body → 2XX
POST
/crypto/v1/keys/batch/sign
Batch sign with one or more private keys.
BatchSign body → 2XX
POST
/crypto/v1/keys/batch/verify
Batch verify with one or more public keys.
BatchVerify body → 2XX
POST
/crypto/v1/digest
Compute digest (hash) of data.
CreateDigest body → 2XX
POST
/crypto/v1/decapsulate
Decrypt an encapsulated key with this Sobject, obtaining a new symmetric key in the target group.
Decapsulate body → 2XX
POST
/crypto/v1/decrypt
Decrypt data using a symmetric or asymmetric key.
Decrypt body → 2XX
POST
/crypto/v1/decrypt/final
Conclude multi-part decryption. See /crypto/v1/decrypt/init for more details.
DecryptFinal body → 2XX
POST
/crypto/v1/decrypt/init
Begin multi-part decryption.
DecryptInit body → 2XX
POST
/crypto/v1/decrypt/update
Continue multi-part decryption. See /crypto/v1/decrypt/init for more details.
DecryptUpdate body → 2XX
POST
/crypto/v1/derive
Derive a new key from an existing key.
Derive body → 2XX
POST
/crypto/v1/encapsulate
Obtain a new symmetric key and its encapsulated version from this Sobject.
Encapsulate body → 2XX
POST
/crypto/v1/encrypt
Encrypt data using a symmetric or asymmetric key.
Encrypt body → 2XX
POST
/crypto/v1/encrypt/final
Conclude multi-part encryption. See /crypto/v1/encrypt/init for more details.
EncryptFinal body → 2XX
POST
/crypto/v1/encrypt/init
Begin multi-part encryption.
EncryptInit body → 2XX
POST
/crypto/v1/encrypt/update
Continue multi-part encryption. See /crypto/v1/encrypt/init for more details.
EncryptUpdate body → 2XX
POST
/crypto/v1/mac
Compute a message authentication code (HMAC or CMAC). The key being used should have the MACGENERATE key operation.
Mac body → 2XX
POST
/crypto/v1/macverify
Verify the input MAC. The key used must have the MACVERIFY key operation.
MacVerify body → 2XX
POST
/crypto/v1/sign
Sign with a private key. The key must be asymmetric and have the SIGN key operation enabled.
Sign body → 2XX
POST
/crypto/v1/transform
Transform an existing key into a new one.
Transform body → 2XX
POST
/crypto/v1/unwrapkey
Unwrap a security object with another security object.
Unwrap body → 2XX
POST
/crypto/v1/verify
Verify a signature with a public key. The verifying key must be an asymmetric key with the VERIFY key operation enabled.
Verify body → 2XX
POST
/crypto/v1/wrapkey
Wrap a security object with another security object.
Wrap body → 2XX

Schemas 201

The contract defines 201 schemas that model the data the API accepts and returns. Each schema is shown below with its type and property counts.

FpeDate
A structure for specifying a token part representing a date that occurs after a specified date and/or occurs before a specified date. Depending on the subparts…
EffectiveKeyOperations
string
Operations allowed to be performed on a given key by a given User or an app SIGN: If this is set, the key can be used for signing. VERIFY: If this is set, the…
ExternalKmsInfoVariantOci
DecryptFinalRequest
Mgf
Specifies the Mask Generating Function (MGF) to use.
KeyCreationMethodVariantUnwrap
RsaEncryptionPaddingOaep
FpeDataPart
Structure for specifying (part of) a complex tokenization data type.
PublishPublicKeyConfigEnabled
DecryptInitResponse
GoogleAccessReason
string
An access reason provided by Google when making EKMS API calls.
BatchDecryptRequestItem
Slip10Options
BatchDecryptResponseItem
CipherMode
string
Cipher mode used for symmetric key algorithms.
GoogleAccessReasonPolicy
FpeDayMonthDate
FpeInputProcessing
Options to apply some pre- and post-processing to the input.
DecapsulateKeyRequest
PublishPublicKeyConfig
If enabled, the public key will be available publicly (without authentication) through the GetPublicKey API.
AgreeKeyMechanism
string
Options to use for key agreement mechanism.
AriaOptions
KeyCreationMethodVariantImport
OciVaultInfo
FpeInputProcessingPassthroughSpecific
PublishPublicKeyConfigVariantEnabled
EncryptFinalRequest
RotationPolicy
FpeConstraints
EncryptUpdateRequest
AwsKeyRotationStatusVariantKeyRotationEnabled
AwsKmsInfo
FpeCompoundPartOr
VerifyRequest
FpeDayMonthYearDate
EncryptInitResponse
AwsKeyRotationStatus
FpeOptions
FPE-specific options (for specifying the format of the data to be encrypted)
MlDsaParamSet
string
ML-DSA parameter sets
BatchEncryptRequestItem
EncryptRequest
DeriveKeyMechanismSlip10HardenedChild
ExternalKmsInfoVariantAWS
FpeSection
KcvMethod
string
Methods for calculating a Key Checksum Value.
RsaEncryptionPadding
Type of padding to use for RSA encryption. The use of PKCS1 v1.5 padding is strongly discouraged, because of its susceptibility to Bleichenbacher's attack. The…
EffectiveKeyPolicy
FpeMonthYearDate
AwsMultiRegionInfo
KeyFormat
string
Key Format
FpeVariant
KeyCreationMethodVariantGenerate
DeriveKeyRequest
EcKcdsaOptions
WrappingKeys
FpeDateDayMonthYear
LmsOptions
AesOptions
FpeCompoundPartMultiple
All
string
A helper enum with a single variant, All, which indicates that something should apply to an entire part. (This is here mainly to allow other untagged enums to…
FpeWords
A set of fixed-length strings.
TransformKeyMechanismBip32WeakChild
DecryptRequest
HistoryItemState
Secs
DecryptFinalResponse
WrappingKeysOnly
RsaEncryptionPaddingPolicy
RSA encryption padding policy.
MgfPolicy
MGF policy.
RsaSignaturePaddingPolicyPss
ObjectOrigin
string
The origin of a security object - where it was created / generated.
Des3Options
SobjectDescriptorInline
DecryptInitRequest
FpePreserveMask
A structure indicating which indices in an encrypted part to mask or preserve.
RsaEncryptionPaddingPolicyOaep
KeyCreationMethod
Information about the method by which a key was created
ExternalKeyIdOciVault
ExternalKeyIdAzureKeyVault
ExternalKeyIdAwsKms
MgfPolicyMgf1
SobjectExportPolicy
DigestRequest
AgreeKeyRequest
ExternalKeyIdFortanix
ExportPolicyVariantWrapped
DeriveKeyMechanismBip32HardenedChild
ExportPolicyVariantUnrestricted
BlsOptions
TransformKeyMechanismSlip10WeakChild
MlDsaMode
AwsMultiRegionKeyType
string
Specifies the type of multi-Region keys. https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.htmlmulti-region-concepts
ExternalKeyId
Identification information for an external key. There are multiple variants of this type to represent the different kinds of keys DSM supports (e.g., AWS, Azur…
RotateCopiedKeys
Bip32Network
string
The BIP32 network The Testnet network is usually an actual network with nodes and miners, and free cryptocurrency. This provides a testing environment for deve…
FpeChecksum
string
FpeGroup
KeyCreationMethodVariantDerive
CryptMode
CipherMode or RsaEncryptionPadding, depending on the encryption algorithm.
FpeCharSet
The alphabet to use for an encrypted portion of a complex tokenization data type. Characters should be specified as a list of pairs, where each pair [a, b] rep…
MgfMgf1
EllipticCurve
string
Identifies a standardized elliptic curve.
EncryptInitRequest
XmssOptions
DigestResponse
SignRequest
FpeFormatV2
PrincipalUserViaApp
WrappingKeysVariantAny
FpeWordsIntegerRanges
DsaOptions
RsaSignaturePaddingPolicy
RSA signature padding policy.
SobjectDescriptorPersisted
Uniquely identifies a persisted sobject.
RsaOptions
FpeOptionsV2
SignatureMode
Signature mechanism
VerifyResponse
FpeDatePart
string
Possible date-related constraint types that do not form a complete date (by themselves) for a complex tokenization data type.
BatchEncryptResponseItem
VerifyMacRequest
AwsKeyOrigin
string
Origin of the AWS KMS key. See the [AWS documentation](https://docs.aws.amazon.com/kms/latest/APIReference/APIKeyMetadata.htmlKMS-Type-KeyMetadata-Origin) for…
KeyCreationMethodVariantEncapsulate
FpeCompoundPartConcat
TransformKeyRequest
FpeOptionsBasic
EncapsulateKeyResponse
KeyOperations
string
Operations allowed to be performed on a given key. SIGN: If this is set, the key can be used to for signing. VERIFY: If this is set, the key can used for verif…
DesOptions
ExternalKeyIdPkcs11
SobjectDescriptor
Uniquely identifies a persisted or transient sobject.
MlDsaModeVariantExternalMu
DeriveKeyMechanismHkdf
RevocationReasonCode
string
Reasons to revoke a security object.
AwsKeyRotationStatusKeyRotationEnabled
ExportPolicyWrapped
RsaSignaturePaddingPss
MlDsaOptions
PublishPublicKeyConfigVariantDisabled
FpeCode
KeyCreationMethodVariantTransform
EncryptResponse
MacRequest
KeyCreationMethodVariantDecapsulate
FpeConstraintsApplicability
A structure indicating which subparts to which to apply a set of constraints.
BatchSignResponseItem
MlKemParamSet
string
ML-KEM parameter sets
DecryptUpdateResponse
TransformKeyMechanism
Options for mechanism to be used when transforming a key
WrappingKeysVariantOnly
AwsKeyRotationStatusVariantKeyRotationDisabled
ExternalSobjectInfo
ExternalKeyIdGcpKeyRing
MlKemOptions
Sobject
EncryptUpdateResponse
FpeDateConstraint
Possible date-related constraint types for a portion of a complex tokenization data type.
DeriveKeyMechanism
Mechanism to be used when deriving a new key from an existing key.
MacResponse
FpeDataPartLiteral
BlsVariant
string
Signature/public-key size trade-off for BLS.
OauthScope
string
OAuth scope.
RevocationReason
ExportPolicy
HistoryItem
RotationInterval
ExternalKmsInfo
Information about a specific external KMS key object.
WrapKeyResponse
Bip32Options
FpeDateMonthDay
FpeWordsCustom
AwsKeyMaterialId
RsaEncryptionPolicy
MlDsaModeVariantPure
FpeCompoundPart
Structure of a compound portion of a complex tokenization data type, itself composed of smaller parts.
SeedOptions
FpeDateMonthYear
FpeOptionsAdvanced
Principal
A security principal.
SobjectState
string
Security object operational state.
SignResponse
Algorithm
string
A cryptographic algorithm.
EncryptFinalResponse
ObjectType
string
Type of security object.
RsaSignaturePolicy
DigestAlgorithm
string
A hash algorithm.
KcdsaOptions
DecryptResponse
WrapKeyRequest
KeyCreationMethodVariantAgree
FpeTokenizeMode
string
How to tokenize a given input. The most secure option is "PreserveFormat".
EncapsulateKeyRequest
FpeInputDefaultProcessing
string
RsaSignaturePadding
Type of padding to use for RSA signatures. The padding specified must adhere to the key's signature policy. If not specified, the default based on the key's po…
DecryptUpdateRequest
VirtualSobjectInfo
DeriveKeyMechanismBip32MasterKey
BatchVerifyResponseItem
KeyLinks
MlDsaModeVariantPreHash
FpeEncryptedPart
UnwrapKeyRequest

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

fortanix-crypto-api-openapi.yml Raw ↑

Other APIs Fortanix publishes across the network.

Fortanix Confidential Computing Manager REST API
AE Profile APIs.io
Fortanix Account Extensions API
AE Profile APIs.io
Fortanix Accounts API
AE Profile APIs.io
Fortanix Admin API
AE Profile APIs.io
Fortanix App API
AE Profile APIs.io
Fortanix Application Config API
AE Profile APIs.io
Fortanix Approval Requests API
AE Profile APIs.io
Fortanix Approval Requests API
AE Profile APIs.io
Fortanix Apps API
AE Profile APIs.io
Fortanix Auth API
AE Profile APIs.io
Fortanix Authentication API
AE Profile APIs.io
Fortanix Batch API
AE Profile APIs.io
#Crypto
← Back to F APIs
API Details
ID
fortanix:fortanix-crypto-api
Base URL
https://amer.smartkey.io
Docs
https://support.fortanix.com/apidocs/dsm-introduction
Provider
Fortanix
APIs.io →  GitHub →
Explore more
All APIs Providers APIs.io Network
Work with this as data

Every API here is available over the API and to AI agents over MCP. APIs is not yet its own endpoint on the v1 API. Reach this content through network search and the tag graph, or the MCP server below.

Installs https://mcp.apievangelist.com/mcp in Claude, Cursor, VS Code and the rest — one button, every client.

MCP tools for apis
4 tools reach this content
  • search_api_evangelistSearch every content type across the network at once.
  • find_relatedThe shared-tag relevance graph — what else covers this.
  • get_tagEverything one tag labels, across all content types.
  • guide_topicPRO — a curated bundle for a topic: area, guidance, rules, papers, stories, services.
All tools & prompts
Call it yourself
curl for this page
Search the network for this 
curl "https://api.apievangelist.com/v1/search?q=fortanix-crypto-api&limit=10"
Everything under a tag 
curl "https://api.apievangelist.com/v1/tags/fortanix-crypto-api"

Discovery needs no key. Full bodies and the synthesis endpoints are Pro.

Get an API key

Free tier, no email required. Sign in with whichever identity you already have.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have. Your account

Where this information came from

This is an independent, third-party profile of Fortanix Crypto API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.