#cryptography #tink #hybrid

tink-hybrid

Hybrid encryption functionality for Rust port of Google’s Tink cryptography library

2 releases

0.2.4 Mar 25, 2022
0.2.3 Jan 3, 2022

#889 in Cryptography

Download history 498/week @ 2022-06-13 278/week @ 2022-06-20 236/week @ 2022-06-27 246/week @ 2022-07-04 147/week @ 2022-07-11 297/week @ 2022-07-18 180/week @ 2022-07-25 368/week @ 2022-08-01 168/week @ 2022-08-08 256/week @ 2022-08-15 122/week @ 2022-08-22 98/week @ 2022-08-29 111/week @ 2022-09-05 185/week @ 2022-09-12 169/week @ 2022-09-19 404/week @ 2022-09-26

870 downloads per month
Used in rinkey

Apache-2.0

285KB
4.5K SLoC

Tink-Rust: Hybrid Encryption

Docs MSRV

This crate provides hybrid encryption functionality, as described in the upstream Tink documentation.

Usage

fn main() -> Result<(), Box<dyn Error>> {
    tink_hybrid::init();
    let kh_priv = tink_core::keyset::Handle::new(
        &tink_hybrid::ecies_hkdf_aes128_ctr_hmac_sha256_key_template(),
    )?;

    // NOTE: save the private keyset to a safe location. DO NOT hardcode it in source code.
    // Consider encrypting it with a remote key in Cloud KMS, AWS KMS or HashiCorp Vault.  See
    // https://github.com/google/tink/blob/master/docs/GOLANG-HOWTO.md#storing-and-loading-existing-keysets.

    let kh_pub = kh_priv.public()?;

    // NOTE: share the public keyset with the sender.

    let enc = tink_hybrid::new_encrypt(&kh_pub)?;

    let msg = b"this data needs to be encrypted";
    let encryption_context = b"encryption context";
    let ct = enc.encrypt(msg, encryption_context)?;

    let dec = tink_hybrid::new_decrypt(&kh_priv)?;

    let pt = dec.decrypt(&ct, encryption_context)?;
    assert_eq!(msg[..], pt);

    println!("Ciphertext: {}\n", hex::encode(&ct));
    println!("Original  plaintext: {}\n", String::from_utf8_lossy(msg));
    println!("Decrypted plaintext: {}\n", String::from_utf8_lossy(&pt));
    Ok(())
}

License

Apache License, Version 2.0

Disclaimer

This is not an officially supported Google product.

Dependencies

~2.7–4MB
~77K SLoC