A centralized service that offers encryption and signing APIs so apps can use cryptography without direct key access.