Deprecated API

Contents

• Interfaces
• Classes
• Enums
• Fields
• Methods
• Constructors

Interfaces

Interface	Description
com.google.crypto.tink.Catalogue	Catalogues are no longer supported.

Classes

Class	Description
com.google.crypto.tink.aead.AeadFactory	Use keysetHandle.getPrimitive(RegistryConfiguration.get(), Aead.class) after registering the AeadWrapper instead.
com.google.crypto.tink.daead.DeterministicAeadFactory	Use keysetHandle.getPrimitive(RegistryConfiguration.get(), DeterministicAead.class) after registering the DeterministicAeadWrapper instead.
com.google.crypto.tink.daead.DeterministicAeadKeyTemplates	Use PredefinedDeterministicAeadParameters instead.
com.google.crypto.tink.hybrid.HybridDecryptConfig	use Config and HybridConfig
com.google.crypto.tink.hybrid.HybridDecryptFactory	Use keysetHandle.getPrimitive(RegistryConfiguration.get(), HybridDecrypt.class) after registering the HybridDecryptWrapper instead.
com.google.crypto.tink.hybrid.HybridEncryptConfig	use Config and HybridConfig
com.google.crypto.tink.hybrid.HybridEncryptFactory	Use keysetHandle.getPrimitive(RegistryConfiguration.get(), HybridEncrypt.class) after registering the HybridEncryptWrapper instead.
com.google.crypto.tink.JsonKeysetWriter	Serialize the Keyset using TinkJsonProtoKeysetFormat.serializeKeyset() instead.
com.google.crypto.tink.mac.MacFactory	Use keysetHandle.getPrimitive(RegistryConfiguration.get(), Mac.class) after registering the MacWrapper instead.
com.google.crypto.tink.mac.MacKeyTemplates	Use PredefinedMacParameters instead.
com.google.crypto.tink.NoSecretKeysetHandle	use KeysetHandle.readNoSecret(com.google.crypto.tink.KeysetReader) instead
com.google.crypto.tink.prf.PrfKeyTemplates	Use PredefinedPrfParameters instead.
com.google.crypto.tink.signature.PublicKeySignConfig	use Config and SignatureConfig
com.google.crypto.tink.signature.PublicKeySignFactory	Use keysetHandle.getPrimitive(RegistryConfiguration.get(), PublicKeySign.class) after registering the PublicKeySignWrapper instead.
com.google.crypto.tink.signature.PublicKeyVerifyConfig	use Config and SignatureConfig
com.google.crypto.tink.signature.PublicKeyVerifyFactory	Use keysetHandle.getPrimitive(RegistryConfiguration.get(), PublicKeyVerify.class) after registering the PublicKeyVerifyWrapper instead.
com.google.crypto.tink.streamingaead.StreamingAeadFactory	Use keysetHandle.getPrimitive(RegistryConfiguration.get(), StreamingAead.class) after registering the StreamingAeadWrapper instead.
com.google.crypto.tink.streamingaead.StreamingAeadKeyTemplates	Try using our refaster templates to replace them (see https://github.com/tink-crypto/tink-java/tree/main/tools/refaster). If migration is unclear, please file an issue on https://github.com/tink-crypto/tink-java.
com.google.crypto.tink.subtle.Kwp	Tink does not support KeyWrap anymore. This implementation was fallback code for old providers that did not implement KWP. It implements the same functionality as Cipher.getInstance("AESWRAPPAD");. Some provider use a different algorithm name: Cipher.getInstance("AES/KWP/NoPadding");.

Enums

Enum	Description
com.google.crypto.tink.subtle.PemKeyType	Use com.google.crypto.tink.PemKeyType instead.

Fields

Field	Description
com.google.crypto.tink.aead.AeadConfig.LATEST	use AeadConfig.register()
com.google.crypto.tink.aead.AeadConfig.TINK_1_0_0	use AeadConfig.register()
com.google.crypto.tink.aead.AeadConfig.TINK_1_1_0	use AeadConfig.register()
com.google.crypto.tink.aead.PredefinedAeadParameters.X_AES_GCM_8_BYTE_SALT_NO_PREFIX	Use PredefinedAeadParameters.XAES_256_GCM_160_BIT_NONCE_NO_PREFIX instead.
com.google.crypto.tink.config.TinkConfig.LATEST	Configs are not supported anymore. Please call TinkConfig.register(); instead of accessing this variable.
com.google.crypto.tink.config.TinkConfig.TINK_1_0_0	Configs are not supported anymore. Please call TinkConfig.register(); instead of accessing this variable.
com.google.crypto.tink.config.TinkConfig.TINK_1_1_0	Configs are not supported anymore. Please call TinkConfig.register(); instead of accessing this variable.
com.google.crypto.tink.daead.DeterministicAeadConfig.LATEST	use DeterministicAeadConfig.register()
com.google.crypto.tink.daead.DeterministicAeadConfig.TINK_1_1_0	use DeterministicAeadConfig.register()
com.google.crypto.tink.hybrid.HybridConfig.LATEST
com.google.crypto.tink.hybrid.HybridConfig.TINK_1_0_0
com.google.crypto.tink.hybrid.HybridConfig.TINK_1_1_0
com.google.crypto.tink.mac.MacConfig.LATEST	use MacConfig.register()
com.google.crypto.tink.mac.MacConfig.TINK_1_0_0	use MacConfig.register()
com.google.crypto.tink.mac.MacConfig.TINK_1_1_0	use MacConfig.register()
com.google.crypto.tink.signature.SignatureConfig.LATEST	Call SignatureConfig.register() instead.
com.google.crypto.tink.signature.SignatureConfig.TINK_1_0_0	Call SignatureConfig.register() instead.
com.google.crypto.tink.signature.SignatureConfig.TINK_1_1_0	Call SignatureConfig.register() instead.
com.google.crypto.tink.streamingaead.StreamingAeadConfig.TINK_1_1_0

Methods

Method	Description
com.google.crypto.tink.aead.AeadConfig.init()	use AeadConfig.register()
com.google.crypto.tink.aead.AeadConfig.registerStandardKeyTypes()	use AeadConfig.register()
com.google.crypto.tink.aead.AeadFactory.getPrimitive(KeysetHandle)	Use keysetHandle.getPrimitive(RegistryConfiguration.get(), Aead.class) after registering the AeadWrapper instead.
com.google.crypto.tink.BinaryKeysetReader.withFile(File)	Inline the function.
com.google.crypto.tink.BinaryKeysetWriter.withFile(File)	Inline the function.
com.google.crypto.tink.CleartextKeysetHandle.fromKeyset(Keyset)	Instead, use a KeysetHandle.Builder.
com.google.crypto.tink.CleartextKeysetHandle.getKeyset(KeysetHandle)	Instead, call "KeysetHandle.getAt()" to get information about individual keys or TinkProtoKeysetFormat if you need a serialized keyset.
com.google.crypto.tink.CleartextKeysetHandle.parseFrom(byte[])	Call TinkProtoKeysetFormat.parseKeyset(serialized, InsecureSecretKeyAccess.get()) which has the same semantics.
com.google.crypto.tink.CleartextKeysetHandle.read(KeysetReader, Map<String, String>)	Instead, use a KeysetHandle.Builder.
com.google.crypto.tink.config.TinkConfig.init()	use TinkConfig.register()
com.google.crypto.tink.daead.DeterministicAeadConfig.init()	use DeterministicAeadConfig.register()
com.google.crypto.tink.daead.DeterministicAeadFactory.getPrimitive(KeysetHandle)	Use keysetHandle.getPrimitive(RegistryConfiguration.get(), DeterministicAead.class) after registering the DeterministicAeadWrapper instead.
com.google.crypto.tink.hybrid.HybridConfig.init()	use HybridConfig.register()
com.google.crypto.tink.hybrid.HybridDecryptConfig.registerStandardKeyTypes()	use Config.register(com.google.crypto.tink.proto.RegistryConfig)
com.google.crypto.tink.hybrid.HybridDecryptFactory.getPrimitive(KeysetHandle)	Use keysetHandle.getPrimitive(RegistryConfiguration.get(), HybridDecrypt.class) after registering the HybridDecryptWrapper instead.
com.google.crypto.tink.hybrid.HybridEncryptConfig.registerStandardKeyTypes()	use Config.register(com.google.crypto.tink.proto.RegistryConfig)
com.google.crypto.tink.hybrid.HybridEncryptFactory.getPrimitive(KeysetHandle)	Use keysetHandle.getPrimitive(RegistryConfiguration.get(), HybridEncrypt.class) after registering the HybridEncryptWrapper instead.
com.google.crypto.tink.hybrid.HybridKeyTemplates.createEciesAeadHkdfKeyTemplate(EllipticCurveType, HashType, EcPointFormat, KeyTemplate, OutputPrefixType, byte[])	Use EciesParameters instead.
com.google.crypto.tink.hybrid.HybridKeyTemplates.createEciesAeadHkdfParams(EllipticCurveType, HashType, EcPointFormat, KeyTemplate, byte[])	Use EciesParameters instead.
com.google.crypto.tink.integration.android.AndroidKeysetManager.Builder.doNotUseKeystore()	Please do not use this function. Instead, do not call {#code withMasterKeyUri} which has the same effect.
com.google.crypto.tink.integration.android.AndroidKeysetManager.promote(int)	use AndroidKeysetManager.setPrimary(int)
com.google.crypto.tink.integration.android.AndroidKeysetManager.rotate(KeyTemplate)	Please use AndroidKeysetManager.add(com.google.crypto.tink.proto.KeyTemplate). This method adds a new key and immediately promotes it to primary. However, when you do keyset rotation, you almost never want to make the new key primary, because old binaries don't know the new key yet.
com.google.crypto.tink.JsonKeysetReader.withBytes(byte[])	Use TinkJsonProtoKeysetFormat.parseKeyset() instead.
com.google.crypto.tink.JsonKeysetReader.withFile(File)	Method should be inlined.
com.google.crypto.tink.JsonKeysetReader.withJsonObject(Object)	Use #withString
com.google.crypto.tink.JsonKeysetReader.withPath(String)	Method should be inlined.
com.google.crypto.tink.JsonKeysetWriter.withFile(File)	Method should be inlined.
com.google.crypto.tink.JsonKeysetWriter.withPath(String)	Method should be inlined.
com.google.crypto.tink.jwt.JwkSetConverter.fromKeysetHandle(KeysetHandle, KeyAccess)	Use JwkSetConverter.fromPublicKeysetHandle(handle) instead.
com.google.crypto.tink.jwt.JwkSetConverter.toKeysetHandle(String, KeyAccess)	Use JwkSetConverter.toPublicKeysetHandle(jwkSet) instead.
com.google.crypto.tink.keyderivation.KeysetDeriverWrapper.register()	Call KeyDerivationConfig.register() instead.
com.google.crypto.tink.KeyManager.doesSupport(String)	Use getKeyType() instead.
com.google.crypto.tink.KeyManager.getPrimitive(MessageLite)	Use getPrimitive(serializedKey) instead.
com.google.crypto.tink.KeyManager.getVersion()	Do not use it.
com.google.crypto.tink.KeyManager.newKey(ByteString)	Use newKeyData(serializedKeyFormat) instead.
com.google.crypto.tink.KeysetHandle.Builder.removeAt(int)	Use KeysetHandle.Builder.deleteAt(int) or KeysetHandle.Builder.getAt(int) instead.
com.google.crypto.tink.KeysetHandle.createFromKey(KeyHandle, KeyAccess)	Use KeysetHandle.Builder.addEntry instead.
com.google.crypto.tink.KeysetHandle.generateNew(KeyTemplate)	Use the overload taking a Parameters object instead.
com.google.crypto.tink.KeysetHandle.getKeys()	Use "getAt" instead.
com.google.crypto.tink.KeysetHandle.getKeysetInfo()	Most information can be obtained by calling KeysetHandle.getPrimary() or KeysetHandle.getAt(int) and inspecting the result. For legacy code, LegacyKeysetSerialization.getKeysetInfo gives the exact same output.
com.google.crypto.tink.KeysetHandle.getPrimitive(Class<P>)	New users should use KeysetHandle.getPrimitive with a suitable Configuration. Existing users can use KeysetHandle.getPrimitive(RegistryConfiguration.get(), targetClassObject) for exactly the same behavior.
com.google.crypto.tink.KeysetHandle.primaryKey()	Use KeysetHandle.getPrimary() instead.
com.google.crypto.tink.KeysetHandle.read(KeysetReader, Aead)	New users should prefer TinkProtoKeysetFormat. Existing users can use LegacyKeysetSerialization for exactly the same behavior.
com.google.crypto.tink.KeysetHandle.readNoSecret(KeysetReader)	New users should prefer TinkProtoKeysetFormat. Existing users can use LegacyKeysetSerialization for exactly the same behavior.
com.google.crypto.tink.KeysetHandle.readWithAssociatedData(KeysetReader, Aead, byte[])	New users should prefer TinkProtoKeysetFormat. Existing users can use LegacyKeysetSerialization for exactly the same behavior.
com.google.crypto.tink.KeysetHandle.write(KeysetWriter, Aead)	New users should prefer TinkProtoKeysetFormat. Existing users can use LegacyKeysetSerialization for exactly the same behavior.
com.google.crypto.tink.KeysetHandle.writeNoSecret(KeysetWriter)	New users should prefer TinkProtoKeysetFormat. Existing users can use LegacyKeysetSerialization for exactly the same behavior.
com.google.crypto.tink.KeysetHandle.writeWithAssociatedData(KeysetWriter, Aead, byte[])	New users should prefer TinkProtoKeysetFormat. Existing users can use LegacyKeysetSerialization for exactly the same behavior.
com.google.crypto.tink.KeysetManager.add(KeyHandle)	We recommend to use the KeysetHandle.Builder API.
com.google.crypto.tink.KeyTemplate.create(String, byte[], KeyTemplate.OutputPrefixType)	Use createFrom
com.google.crypto.tink.KeyTemplate.getOutputPrefixType()	Instead, operate on the Parameters object obtained with KeyTemplate.toParameters(). If you really need this value, you need to first use TinkProtoParametersFormat to serialize this parameters object, then parse the result with the Tink-internal proto class "KeyTemplate".
com.google.crypto.tink.KeyTemplate.getTypeUrl()	Instead, operate on the Parameters object obtained with KeyTemplate.toParameters(). If you really need this array, you need to first use TinkProtoParametersFormat to serialize this parameters object, then parse the result with the Tink-internal proto class "KeyTemplate".
com.google.crypto.tink.KeyTemplate.getValue()	Instead, operate on the Parameters object obtained with KeyTemplate.toParameters(). If you really need this array, you need to first use TinkProtoParametersFormat to serialize this parameters object, then parse the result with the Tink-internal proto class "KeyTemplate".
com.google.crypto.tink.KmsClients.getAutoLoaded(String)	Don't use this.
com.google.crypto.tink.mac.MacConfig.init()	use MacConfig.register()
com.google.crypto.tink.mac.MacConfig.registerStandardKeyTypes()	use MacConfig.register()
com.google.crypto.tink.mac.MacFactory.getPrimitive(KeysetHandle)	Use keysetHandle.getPrimitive(RegistryConfiguration.get(), Mac.class) after registering the MacWrapper instead.
com.google.crypto.tink.NoSecretKeysetHandle.parseFrom(byte[])	use NoSecretKeysetHandle.read(com.google.crypto.tink.KeysetReader) instead
com.google.crypto.tink.Registry.addCatalogue(String, Catalogue<?>)	Catalogues are no longer supported.
com.google.crypto.tink.Registry.getCatalogue(String)	Catalogues are no longer supported.
com.google.crypto.tink.Registry.getKeyManager(String, Class<P>)	KeyManagers should not be used directly. Use newKeyData or getPrimitive instead.
com.google.crypto.tink.Registry.getPrimitive(String, MessageLite, Class<P>)	Use getPrimitive(typeUrl, serializedKey, Primitive.class instead.
com.google.crypto.tink.Registry.getPublicKeyData(String, ByteString)	Instead, users should have their keys in a KeysetHandle and call keysetHandle.getPublicKeysetHandle.
com.google.crypto.tink.Registry.getUntypedKeyManager(String)	KeyManagers should not be used directly. Use newKeyData or getPrimitive instead.
com.google.crypto.tink.Registry.newKey(KeyTemplate)	Use newKeyData instead.
com.google.crypto.tink.Registry.newKeyData(KeyTemplate)	Use KeysetHandle.generateNew with a Parameters object instead. To convert a proto KeyTemplate to a parameters one can use TinkProtoParametersFormat.parse(t.toByteArray());
com.google.crypto.tink.Registry.registerKeyManager(String, KeyManager<P>)	use registerKeyManager(KeyManager<P>)
com.google.crypto.tink.signature.PublicKeySignConfig.registerStandardKeyTypes()	use Config.register(com.google.crypto.tink.proto.RegistryConfig)
com.google.crypto.tink.signature.PublicKeySignFactory.getPrimitive(KeysetHandle)	Use keysetHandle.getPrimitive(RegistryConfiguration.get(), PublicKeySign.class) after registering the PublicKeySignWrapper instead.
com.google.crypto.tink.signature.PublicKeyVerifyConfig.registerStandardKeyTypes()	use Config.register(com.google.crypto.tink.proto.RegistryConfig)
com.google.crypto.tink.signature.PublicKeyVerifyFactory.getPrimitive(KeysetHandle)	Use keysetHandle.getPrimitive(RegistryConfiguration.get(), PublicKeyVerify.class) after registering the PublicKeyVerifyWrapper instead.
com.google.crypto.tink.signature.SignatureConfig.init()	use SignatureConfig.register()
com.google.crypto.tink.signature.SignatureKeyTemplates.createEcdsaKeyTemplate(HashType, EllipticCurveType, EcdsaSignatureEncoding, OutputPrefixType)	Use a corresponding EcdsaParameters object instead.
com.google.crypto.tink.signature.SignatureKeyTemplates.createRsaSsaPkcs1KeyTemplate(HashType, int, BigInteger, OutputPrefixType)	Use a corresponding RsaSsaPkcs1Parameters object instead
com.google.crypto.tink.signature.SignatureKeyTemplates.createRsaSsaPssKeyTemplate(HashType, HashType, int, int, BigInteger)	Use a corresponding RsaSsaPssParameters object instead.
com.google.crypto.tink.streamingaead.StreamingAeadConfig.init()	use StreamingAeadConfig.register()
com.google.crypto.tink.subtle.EllipticCurves.getY(BigInteger, boolean, EllipticCurve)	This shouldn't be used directly, use EllipticCurves.pointDecode(com.google.crypto.tink.subtle.EllipticCurves.CurveType,com.google.crypto.tink.subtle.EllipticCurves.PointFormatType,byte[]) to decompress points.
com.google.crypto.tink.subtle.SubtleUtil.androidApiLevel()	Please reimplement this method in your code instead. From within Tink, use Util.getAndroidApiLevel directly.

Constructors

Constructor	Description
com.google.crypto.tink.aead.KmsEnvelopeAead(KeyTemplate, Aead)	Instead, call KmsEnvelopeAead.create as explained above.
com.google.crypto.tink.integration.android.AndroidKeystoreKmsClient(String)	use AndroidKeystoreKmsClient.Builder.