Tink 1.0.0

This is the first release of Tink. The only supported language in this release is Java. Tink for Java comes in two flavors:

• The main flavor, and
• The Android flavor that is optimized for Android.

For installation and usage, please see the Java HOWTO.

Supported primitives and algorithms

Both flavors support the following primitives and algorithms:

• AEAD: AES-EAX, AES-GCM, AES-CTR-HMAC-AEAD, KMS Envelope
• MAC: HMAC-SHA2
• Digital Signature: ECDSA over NIST curves
• Hybrid Encryption: ECIES over NIST curves with AEAD (AES-GCM and AES-CTR-HMAC-AEAD) and HKDF

Supported key management systems

• Main flavor: AWS KMS, GCP KMS
• Android flavor: Android Keystore (require Android M or newer).

Warnings

Do not use APIs including fields and methods marked with the @Alpha annotation. They can be modified in any way, or even removed, at any time. They are in the package, but not for official, production release, but only for testing.

What's next

We've already started working on 1.1.0. If things go well, we'll introduce the following algorithms:

• AEAD: CHACHA20-POLY1305, XCHACHA20-POLY1305, XSALSA20-POLY1305
• Digital signature: EdDSA over Ed25519
• Hybrid Encryption: NaCl CryptoBox