Tink aims to make cryptography easier to use safely. Confirm language and platform support in current documentation.
Evaluation approach
Select the appropriate primitive and design keyset access. Avoid improvised combinations of low-level operations.
Application example
For AEAD file protection, test authentication failures and key changes as well as encryption.
Limits and considerations
The library does not replace protocol design or authorization.
Protecting a keyset
A convenient API does not determine storage or access policy. Design rotation and authorized use with the platform architecture, and include wrong-key tests.
Checks and decisions
- Verify platform support
- Choose the right primitive
- Protect keysets
Sources
The primary references above provide the technical basis. Example workflows and evaluation suggestions are this publication’s explanations, not independent test results for a particular product.