This example shows how to encrypt data with Tink using hybrid encryption.
It demonstrates the basic steps of using Tink, namely loading key material, obtaining a primitive, and using the primitive to do crypto.
The key material was generated with Tinkey:
tinkey create-keyset \ --key-template DHKEM_X25519_HKDF_SHA256_HKDF_SHA256_AES_256_GCM \ --out-format JSON --out hybrid_test_private_keyset.json tinkey create-public-keyset --in hybrid_test_private_keyset.json \ --in-format JSON --out-format JSON --out hybrid_test_public_keyset.json
git clone https://github.com/google/tink cd tink/examples/java_src bazel build ...
Encrypt a file:
echo "some data" > testdata.txt ./bazel-bin/hybrid/hybrid_example encrypt \ ./hybrid/hybrid_test_public_keyset.json \ testdata.txt testdata.txt.encrypted
Decrypt a file:
./bazel-bin/hybrid/hybrid_example decrypt \ ./hybrid/hybrid_test_private_keyset.json \ testdata.txt.encrypted testdata.txt.decrypted diff testdata.txt testdata.txt.decrypted