Skip to content

Tink C++ Google Cloud KMS Extension v2.4.0 (Supports PQC Sign/Verification)

Latest

Choose a tag to compare

@mdetemad mdetemad released this 24 Jun 17:59
· 15 commits to main since this release

Tink is a multi-language, cross-platform library that provides simple and misuse-proof APIs for common cryptographic tasks.

This is Tink C++ Google Cloud KMS extension 2.4.0

To get started using the Tink C++ Google Cloud KMS extension, see the setup guide.

What's new

The complete list of changes since 2.3.0 can be found here.

  • Fail early for unsupported KMS signing algorithms in GcpKmsPublicKeySign.
  • Support signing and verification for PQ_SIGN algorithms: SLH_DSA_SHA2_128S (pure and pre-hash) and ML-DSA-65.
  • Support asymmetric signing (not verification yet) with ED25519.
  • Updated deps:
    • tink-cc 2.1.1 => 2.4.0

Future work

To see what we're working towards, check our project roadmap.

Getting started

Bazel

workspace(name = "example")

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "tink_cc_gcpkms",
    urls = ["https://github.com/tink-crypto/tink-cc-gcpkms/releases/download/v2.4.0/tink-cc-gcpkms-2.4.0.zip"],
    strip_prefix = "tink-cc-gcpkms-2.4.0",
    sha256 = "b2c7803b03fcce2d52b15e97f871155d477ccf88b2146337d54202defd074418",
)

load("@tink_cc_gcpkms//:tink_cc_gcpkms_deps.bzl", "tink_cc_gcpkms_deps")

tink_cc_gcpkms_deps()

load("@tink_cc_gcpkms//:tink_cc_gcpkms_deps_init.bzl", "tink_cc_gcpkms_deps_init")

tink_cc_gcpkms_deps_init(register_go = True)


# ... Your dependencies here ...