Deprecated List

Deprecated Interfaces
Interface and Description
com.google.crypto.tink.Catalogue Catalogues are no longer supported.
com.google.crypto.tink.proto.KeyTypeEntryOrBuilder
com.google.crypto.tink.proto.RegistryConfigOrBuilder

Deprecated Classes
Class and Description
com.google.crypto.tink.aead.AeadFactory Use `keysetHandle.getPrimitive(RegistryConfiguration.get(), Aead.class)` after registering the `AeadWrapper` instead.
com.google.crypto.tink.daead.DeterministicAeadFactory Use `keysetHandle.getPrimitive(RegistryConfiguration.get(), DeterministicAead.class)` after registering the `DeterministicAeadWrapper` instead.
com.google.crypto.tink.daead.DeterministicAeadKeyTemplates Use `PredefinedDeterministicAeadParameters` instead.
com.google.crypto.tink.hybrid.HybridDecryptConfig use `Config` and `HybridConfig`
com.google.crypto.tink.hybrid.HybridDecryptFactory Use `keysetHandle.getPrimitive(RegistryConfiguration.get(), HybridDecrypt.class)` after registering the `HybridDecryptWrapper` instead.
com.google.crypto.tink.hybrid.HybridEncryptConfig use `Config` and `HybridConfig`
com.google.crypto.tink.hybrid.HybridEncryptFactory Use `keysetHandle.getPrimitive(RegistryConfiguration.get(), HybridEncrypt.class)` after registering the `HybridEncryptWrapper` instead.
com.google.crypto.tink.JsonKeysetWriter Serialize the Keyset using `TinkJsonProtoKeysetFormat.serializeKeyset()` instead.
com.google.crypto.tink.util.KeysDownloader This is not supported by Tink, as it incurs a dependency on `com.google.api.client.http`. If you need this, please copy it into your codebase.
com.google.crypto.tink.proto.KeyTypeEntry
com.google.crypto.tink.subtle.Kwp Tink does not support KeyWrap anymore. This implementation was fallback code for old providers that did not implement KWP. It implements the same functionality as `Cipher.getInstance("AESWRAPPAD");`. Some provider use a different algorithm name: `Cipher.getInstance("AES/KWP/NoPadding");`.
com.google.crypto.tink.mac.MacFactory Use `keysetHandle.getPrimitive(RegistryConfiguration.get(), Mac.class)` after registering the `MacWrapper` instead.
com.google.crypto.tink.mac.MacKeyTemplates Use PredefinedMacParameters instead.
com.google.crypto.tink.NoSecretKeysetHandle use `KeysetHandle.readNoSecret(com.google.crypto.tink.KeysetReader)` instead
com.google.crypto.tink.prf.PrfKeyTemplates Use PredefinedPrfParameters instead.
com.google.crypto.tink.signature.PublicKeySignConfig use `Config` and `SignatureConfig`
com.google.crypto.tink.signature.PublicKeySignFactory Use `keysetHandle.getPrimitive(RegistryConfiguration.get(), PublicKeySign.class)` after registering the `PublicKeySignWrapper` instead.
com.google.crypto.tink.signature.PublicKeyVerifyConfig use `Config` and `SignatureConfig`
com.google.crypto.tink.signature.PublicKeyVerifyFactory Use `keysetHandle.getPrimitive(RegistryConfiguration.get(), PublicKeyVerify.class)` after registering the `PublicKeyVerifyWrapper` instead.
com.google.crypto.tink.proto.RegistryConfig
com.google.crypto.tink.streamingaead.StreamingAeadFactory Use `keysetHandle.getPrimitive(RegistryConfiguration.get(), StreamingAead.class)` after registering the `StreamingAeadWrapper` instead.
com.google.crypto.tink.streamingaead.StreamingAeadKeyTemplates Try using our refaster templates to replace them (see https://github.com/tink-crypto/tink-java/tree/main/tools/refaster). If migration is unclear, please file an issue on https://github.com/tink-crypto/tink-java.

Deprecated Enums
Enum and Description

com.google.crypto.tink.subtle.PemKeyType
Use com.google.crypto.tink.PemKeyType instead.

Deprecated Enums
Enum and Description
com.google.crypto.tink.subtle.PemKeyType Use com.google.crypto.tink.PemKeyType instead.

Deprecated Fields
Field and Description
com.google.crypto.tink.mac.MacConfig.LATEST use `MacConfig.register()`
com.google.crypto.tink.config.TinkConfig.LATEST Configs are not supported anymore. Please call `TinkConfig.register();` instead of accessing this variable.
com.google.crypto.tink.signature.SignatureConfig.LATEST Call `SignatureConfig.register()` instead.
com.google.crypto.tink.hybrid.HybridConfig.LATEST
com.google.crypto.tink.daead.DeterministicAeadConfig.LATEST use `DeterministicAeadConfig.register()`
com.google.crypto.tink.aead.AeadConfig.LATEST use `AeadConfig.register()`
com.google.crypto.tink.mac.MacConfig.TINK_1_0_0 use `MacConfig.register()`
com.google.crypto.tink.config.TinkConfig.TINK_1_0_0 Configs are not supported anymore. Please call `TinkConfig.register();` instead of accessing this variable.
com.google.crypto.tink.signature.SignatureConfig.TINK_1_0_0 Call `SignatureConfig.register()` instead.
com.google.crypto.tink.hybrid.HybridConfig.TINK_1_0_0
com.google.crypto.tink.aead.AeadConfig.TINK_1_0_0 use `AeadConfig.register()`
com.google.crypto.tink.mac.MacConfig.TINK_1_1_0 use `MacConfig.register()`
com.google.crypto.tink.config.TinkConfig.TINK_1_1_0 Configs are not supported anymore. Please call `TinkConfig.register();` instead of accessing this variable.
com.google.crypto.tink.signature.SignatureConfig.TINK_1_1_0 Call `SignatureConfig.register()` instead.
com.google.crypto.tink.hybrid.HybridConfig.TINK_1_1_0
com.google.crypto.tink.daead.DeterministicAeadConfig.TINK_1_1_0 use `DeterministicAeadConfig.register()`
com.google.crypto.tink.aead.AeadConfig.TINK_1_1_0 use `AeadConfig.register()`
com.google.crypto.tink.streamingaead.StreamingAeadConfig.TINK_1_1_0
com.google.crypto.tink.aead.PredefinedAeadParameters.X_AES_GCM_8_BYTE_SALT_NO_PREFIX Use `PredefinedAeadParameters.XAES_256_GCM_160_BIT_NONCE_NO_PREFIX` instead.

Deprecated Methods
Method and Description
com.google.crypto.tink.KeysetManager.add(KeyHandle) We recommend to use the `KeysetHandle.Builder` API.
com.google.crypto.tink.KeysetManager.add(KeyHandle, KeyAccess) We recommend to use the `KeysetHandle.Builder` API.
com.google.crypto.tink.Registry.addCatalogue(String, Catalogue<?>) Catalogues are no longer supported.
com.google.crypto.tink.subtle.SubtleUtil.androidApiLevel() Please reimplement this method in your code instead. From within Tink, use `Util.getAndroidApiLevel` directly.
com.google.crypto.tink.KeyTemplate.create(String, byte[], KeyTemplate.OutputPrefixType) Use createFrom
com.google.crypto.tink.signature.SignatureKeyTemplates.createEcdsaKeyTemplate(HashType, EllipticCurveType, EcdsaSignatureEncoding, OutputPrefixType) Use a corresponding `EcdsaParameters` object instead.
com.google.crypto.tink.hybrid.HybridKeyTemplates.createEciesAeadHkdfKeyTemplate(EllipticCurveType, HashType, EcPointFormat, KeyTemplate, OutputPrefixType, byte[]) Use EciesParameters instead.
com.google.crypto.tink.hybrid.HybridKeyTemplates.createEciesAeadHkdfParams(EllipticCurveType, HashType, EcPointFormat, KeyTemplate, byte[]) Use EciesParameters instead.
com.google.crypto.tink.KeysetHandle.createFromKey(KeyHandle, KeyAccess) Use `KeysetHandle.Builder.addEntry` instead.
com.google.crypto.tink.signature.SignatureKeyTemplates.createRsaSsaPkcs1KeyTemplate(HashType, int, BigInteger, OutputPrefixType) Use a corresponding `RsaSsaPkcs1Parameters` object instead
com.google.crypto.tink.signature.SignatureKeyTemplates.createRsaSsaPssKeyTemplate(HashType, HashType, int, int, BigInteger) Use a corresponding `RsaSsaPssParameters` object instead.
com.google.crypto.tink.KeyManager.doesSupport(String) Use `getKeyType()` instead.
com.google.crypto.tink.CleartextKeysetHandle.fromKeyset(Keyset) Instead, use a `KeysetHandle.Builder`.
com.google.crypto.tink.jwt.JwkSetConverter.fromKeysetHandle(KeysetHandle, KeyAccess) Use JwkSetConverter.fromPublicKeysetHandle(handle) instead.
com.google.crypto.tink.KeysetHandle.generateNew(KeyTemplate) Use the overload taking a Parameters object instead.
com.google.crypto.tink.KmsClients.getAutoLoaded(String) Don't use this.
com.google.crypto.tink.Registry.getCatalogue(String) Catalogues are no longer supported.
com.google.crypto.tink.Registry.getKeyManager(String, Class<P>) KeyManagers should not be used directly. Use `newKeyData` or `getPrimitive` instead.
com.google.crypto.tink.KeysetHandle.getKeys() Use "getAt" instead.
com.google.crypto.tink.CleartextKeysetHandle.getKeyset(KeysetHandle) Instead, call "KeysetHandle.getAt()" to get information about individual keys or TinkProtoKeysetFormat if you need a serialized keyset.
com.google.crypto.tink.KeysetHandle.getKeysetInfo() Most information can be obtained by calling `KeysetHandle.getPrimary()` or `KeysetHandle.getAt(int)` and inspecting the result. For legacy code, `LegacyKeysetSerialization.getKeysetInfo` gives the exact same output.
com.google.crypto.tink.KeyTemplate.getOutputPrefixType() Instead, operate on the `Parameters` object obtained with `KeyTemplate.toParameters()`. If you really need this value, you need to first use TinkProtoParametersFormat to serialize this parameters object, then parse the result with the Tink-internal proto class "KeyTemplate".
com.google.crypto.tink.KeysetHandle.getPrimitive(Class<P>) New users should use `KeysetHandle.getPrimitive` with a suitable `Configuration`. Existing users can use `KeysetHandle.getPrimitive(RegistryConfiguration.get(), targetClassObject)` for exactly the same behavior.
com.google.crypto.tink.mac.MacFactory.getPrimitive(KeysetHandle) Use `keysetHandle.getPrimitive(RegistryConfiguration.get(), Mac.class)` after registering the `MacWrapper` instead.
com.google.crypto.tink.signature.PublicKeyVerifyFactory.getPrimitive(KeysetHandle) Use `keysetHandle.getPrimitive(RegistryConfiguration.get(), PublicKeyVerify.class)` after registering the `PublicKeyVerifyWrapper` instead.
com.google.crypto.tink.signature.PublicKeySignFactory.getPrimitive(KeysetHandle) Use `keysetHandle.getPrimitive(RegistryConfiguration.get(), PublicKeySign.class)` after registering the `PublicKeySignWrapper` instead.
com.google.crypto.tink.hybrid.HybridEncryptFactory.getPrimitive(KeysetHandle) Use `keysetHandle.getPrimitive(RegistryConfiguration.get(), HybridEncrypt.class)` after registering the `HybridEncryptWrapper` instead.
com.google.crypto.tink.hybrid.HybridDecryptFactory.getPrimitive(KeysetHandle) Use `keysetHandle.getPrimitive(RegistryConfiguration.get(), HybridDecrypt.class)` after registering the `HybridDecryptWrapper` instead.
com.google.crypto.tink.daead.DeterministicAeadFactory.getPrimitive(KeysetHandle) Use `keysetHandle.getPrimitive(RegistryConfiguration.get(), DeterministicAead.class)` after registering the `DeterministicAeadWrapper` instead.
com.google.crypto.tink.aead.AeadFactory.getPrimitive(KeysetHandle) Use `keysetHandle.getPrimitive(RegistryConfiguration.get(), Aead.class)` after registering the `AeadWrapper` instead.
com.google.crypto.tink.KeyManager.getPrimitive(MessageLite) Use `getPrimitive(serializedKey)` instead.
com.google.crypto.tink.Registry.getPrimitive(String, MessageLite, Class<P>) Use `getPrimitive(typeUrl, serializedKey, Primitive.class` instead.
com.google.crypto.tink.Registry.getPublicKeyData(String, ByteString) Instead, users should have their keys in a `KeysetHandle` and call `keysetHandle.getPublicKeysetHandle`.
com.google.crypto.tink.KeyTemplate.getTypeUrl() Instead, operate on the `Parameters` object obtained with `KeyTemplate.toParameters()`. If you really need this array, you need to first use TinkProtoParametersFormat to serialize this parameters object, then parse the result with the Tink-internal proto class "KeyTemplate".
com.google.crypto.tink.Registry.getUntypedKeyManager(String) KeyManagers should not be used directly. Use `newKeyData` or `getPrimitive` instead.
com.google.crypto.tink.KeyTemplate.getValue() Instead, operate on the `Parameters` object obtained with `KeyTemplate.toParameters()`. If you really need this array, you need to first use TinkProtoParametersFormat to serialize this parameters object, then parse the result with the Tink-internal proto class "KeyTemplate".
com.google.crypto.tink.KeyManager.getVersion() Do not use it.
com.google.crypto.tink.subtle.EllipticCurves.getY(BigInteger, boolean, EllipticCurve) This shouldn't be used directly, use `pointDecode` to decompress points.
com.google.crypto.tink.mac.MacConfig.init() use `MacConfig.register()`
com.google.crypto.tink.config.TinkConfig.init() use `TinkConfig.register()`
com.google.crypto.tink.signature.SignatureConfig.init() use `SignatureConfig.register()`
com.google.crypto.tink.hybrid.HybridConfig.init() use `HybridConfig.register()`
com.google.crypto.tink.daead.DeterministicAeadConfig.init() use `DeterministicAeadConfig.register()`
com.google.crypto.tink.aead.AeadConfig.init() use `AeadConfig.register()`
com.google.crypto.tink.streamingaead.StreamingAeadConfig.init() use `StreamingAeadConfig.register()`
com.google.crypto.tink.KeyManager.newKey(ByteString) Use `newKeyData(serializedKeyFormat)` instead.
com.google.crypto.tink.Registry.newKey(KeyTemplate) Use `newKeyData` instead.
com.google.crypto.tink.KeyManager.newKey(MessageLite) Use `newKeyData(serializedKeyFormat)` instead.
com.google.crypto.tink.Registry.newKey(String, MessageLite) Use `newKeyData` instead.
com.google.crypto.tink.Registry.newKeyData(KeyTemplate) Use `KeysetHandle.generateNew` with a Parameters object instead. To convert a proto KeyTemplate to a parameters one can use `TinkProtoParametersFormat.parse(t.toByteArray());`
com.google.crypto.tink.Registry.newKeyData(KeyTemplate) Use `KeysetHandle.generateNew(keyTemplate.toParameters())` instead and use the Keyset Handle API.
com.google.crypto.tink.NoSecretKeysetHandle.parseFrom(byte[]) use `NoSecretKeysetHandle.read(com.google.crypto.tink.KeysetReader)` instead
com.google.crypto.tink.CleartextKeysetHandle.parseFrom(byte[]) Call `TinkProtoKeysetFormat.parseKeyset(serialized, InsecureSecretKeyAccess.get())` which has the same semantics.
com.google.crypto.tink.KeysetHandle.primaryKey() Use `KeysetHandle.getPrimary()` instead.
com.google.crypto.tink.KeysetHandle.read(KeysetReader, Aead) New users should prefer TinkProtoKeysetFormat. Existing users can use LegacyKeysetSerialization for exactly the same behavior.
com.google.crypto.tink.CleartextKeysetHandle.read(KeysetReader, Map<String, String>) Instead, use a `KeysetHandle.Builder`.
com.google.crypto.tink.KeysetHandle.readNoSecret(byte[]) Call {TinkProtoKeysetFormat.parseKeysetWithoutSecret} instead.
com.google.crypto.tink.KeysetHandle.readNoSecret(KeysetReader) New users should prefer TinkProtoKeysetFormat. Existing users can use LegacyKeysetSerialization for exactly the same behavior.
com.google.crypto.tink.KeysetHandle.readWithAssociatedData(KeysetReader, Aead, byte[]) New users should prefer TinkProtoKeysetFormat. Existing users can use LegacyKeysetSerialization for exactly the same behavior.
com.google.crypto.tink.keyderivation.KeysetDeriverWrapper.register() Call KeyDerivationConfig.register() instead.
com.google.crypto.tink.Registry.registerKeyManager(String, KeyManager<P>) use `registerKeyManager(KeyManager<P>)`
com.google.crypto.tink.Registry.registerKeyManager(String, KeyManager<P>, boolean) use `registerKeyManager(KeyManager<P>, boolean)`
com.google.crypto.tink.mac.MacConfig.registerStandardKeyTypes() use `MacConfig.register()`
com.google.crypto.tink.signature.PublicKeyVerifyConfig.registerStandardKeyTypes() use `Config.register(com.google.crypto.tink.proto.RegistryConfig)`
com.google.crypto.tink.signature.PublicKeySignConfig.registerStandardKeyTypes() use `Config.register(com.google.crypto.tink.proto.RegistryConfig)`
com.google.crypto.tink.hybrid.HybridEncryptConfig.registerStandardKeyTypes() use `Config.register(com.google.crypto.tink.proto.RegistryConfig)`
com.google.crypto.tink.hybrid.HybridDecryptConfig.registerStandardKeyTypes() use `Config.register(com.google.crypto.tink.proto.RegistryConfig)`
com.google.crypto.tink.aead.AeadConfig.registerStandardKeyTypes() use `AeadConfig.register()`
com.google.crypto.tink.KeysetHandle.Builder.removeAt(int) Use `KeysetHandle.Builder.deleteAt(int)` or `KeysetHandle.Builder.getAt(int)` instead.
com.google.crypto.tink.jwt.JwkSetConverter.toKeysetHandle(String, KeyAccess) Use JwkSetConverter.toPublicKeysetHandle(jwkSet) instead.
com.google.crypto.tink.proto.JwtRsaSsaPssAlgorithm.valueOf(int) Use `JwtRsaSsaPssAlgorithm.forNumber(int)` instead.
com.google.crypto.tink.proto.JwtRsaSsaPkcs1Algorithm.valueOf(int) Use `JwtRsaSsaPkcs1Algorithm.forNumber(int)` instead.
com.google.crypto.tink.proto.JwtHmacAlgorithm.valueOf(int) Use `JwtHmacAlgorithm.forNumber(int)` instead.
com.google.crypto.tink.proto.JwtEcdsaAlgorithm.valueOf(int) Use `JwtEcdsaAlgorithm.forNumber(int)` instead.
com.google.crypto.tink.proto.EcdsaSignatureEncoding.valueOf(int) Use `EcdsaSignatureEncoding.forNumber(int)` instead.
com.google.crypto.tink.proto.HpkeKem.valueOf(int) Use `HpkeKem.forNumber(int)` instead.
com.google.crypto.tink.proto.HpkeKdf.valueOf(int) Use `HpkeKdf.forNumber(int)` instead.
com.google.crypto.tink.proto.HpkeAead.valueOf(int) Use `HpkeAead.forNumber(int)` instead.
com.google.crypto.tink.proto.HashType.valueOf(int) Use `HashType.forNumber(int)` instead.
com.google.crypto.tink.proto.EllipticCurveType.valueOf(int) Use `EllipticCurveType.forNumber(int)` instead.
com.google.crypto.tink.proto.EcPointFormat.valueOf(int) Use `EcPointFormat.forNumber(int)` instead.
com.google.crypto.tink.proto.OutputPrefixType.valueOf(int) Use `OutputPrefixType.forNumber(int)` instead.
com.google.crypto.tink.proto.KeyStatusType.valueOf(int) Use `KeyStatusType.forNumber(int)` instead.
com.google.crypto.tink.proto.KeyData.KeyMaterialType.valueOf(int) Use `KeyData.KeyMaterialType.forNumber(int)` instead.
com.google.crypto.tink.JsonKeysetReader.withBytes(byte[]) Use TinkJsonProtoKeysetFormat.parseKeyset() instead.
com.google.crypto.tink.JsonKeysetWriter.withFile(File) Method should be inlined.
com.google.crypto.tink.JsonKeysetReader.withFile(File) Method should be inlined.
com.google.crypto.tink.BinaryKeysetWriter.withFile(File) Inline the function.
com.google.crypto.tink.BinaryKeysetReader.withFile(File) Inline the function.
com.google.crypto.tink.JsonKeysetReader.withJsonObject(Object) Use `#withString`
com.google.crypto.tink.JsonKeysetWriter.withPath(Path) Method should be inlined.
com.google.crypto.tink.JsonKeysetReader.withPath(Path) Method should be inlined.
com.google.crypto.tink.JsonKeysetWriter.withPath(String) Method should be inlined.
com.google.crypto.tink.JsonKeysetReader.withPath(String) Method should be inlined.
com.google.crypto.tink.KeysetHandle.write(KeysetWriter, Aead) New users should prefer TinkProtoKeysetFormat. Existing users can use LegacyKeysetSerialization for exactly the same behavior.
com.google.crypto.tink.KeysetHandle.writeNoSecret(KeysetWriter) New users should prefer TinkProtoKeysetFormat. Existing users can use LegacyKeysetSerialization for exactly the same behavior.
com.google.crypto.tink.KeysetHandle.writeWithAssociatedData(KeysetWriter, Aead, byte[]) New users should prefer TinkProtoKeysetFormat. Existing users can use LegacyKeysetSerialization for exactly the same behavior.

Deprecated Constructors
Constructor and Description

com.google.crypto.tink.aead.KmsEnvelopeAead(KeyTemplate, Aead)
Instead, call KmsEnvelopeAead.create as explained above.

Deprecated API

Contents