diff --git a/cc/hybrid/BUILD.gn b/cc/hybrid/BUILD.gn
index 927d598..99a811d 100644
--- a/cc/hybrid/BUILD.gn
+++ b/cc/hybrid/BUILD.gn
@@ -30,6 +30,27 @@
   public_configs = [ "//third_party/tink:tink_config" ]
 }
 
+# CC Library : hpke_config
+source_set("hpke_config") {
+  configs += [ "//build/config:no_rtti" ]
+  configs -= [ "//build/config:no_rtti" ]
+  sources = [
+    "hpke_config.cc",
+    "hpke_config.h",
+  ]
+  public_deps = [
+    ":hybrid_decrypt_wrapper",
+    ":hybrid_encrypt_wrapper",
+    "//third_party/tink/cc:registry",
+    "//third_party/tink/cc/aead:aead_config",
+    "//third_party/tink/cc/config:tink_fips",
+    "//third_party/tink/cc/hybrid/internal:hpke_private_key_manager",
+    "//third_party/tink/cc/hybrid/internal:hpke_public_key_manager",
+    "//third_party/tink/cc/util:status",
+  ]
+  public_configs = [ "//third_party/tink:tink_config" ]
+}
+
 # CC Library : hybrid_decrypt_wrapper
 source_set("hybrid_decrypt_wrapper") {
   configs += [ "//build/config:no_rtti" ]
diff --git a/cc/hybrid/internal/BUILD.gn b/cc/hybrid/internal/BUILD.gn
new file mode 100644
index 0000000..fb5c42d
--- /dev/null
+++ b/cc/hybrid/internal/BUILD.gn
@@ -0,0 +1,198 @@
+# Copyright 2023 The Fuchsia Authors. All rights reserved.
+# Use of this source code is governed by a BSD-style license that can be
+# found in the LICENSE file.
+#
+# WARNING: This file is automatically generated by convert_for_cobalt.
+# Do not edit manually.
+
+# CC Library : hpke_context
+source_set("hpke_context") {
+  configs += [ "//build/config:no_rtti" ]
+  configs -= [ "//build/config:no_rtti" ]
+  sources = [
+    "hpke_context.cc",
+    "hpke_context.h",
+  ]
+  public_deps = [
+    ":hpke_context_boringssl",
+    ":hpke_util",
+    "//third_party/abseil-cpp/absl/status:status",
+    "//third_party/abseil-cpp/absl/strings:strings",
+    "//third_party/tink/cc/util:secret_data",
+    "//third_party/tink/cc/util:status",
+    "//third_party/tink/cc/util:statusor",
+  ]
+  public_configs = [ "//third_party/tink:tink_config" ]
+}
+
+# CC Library : hpke_context_boringssl
+source_set("hpke_context_boringssl") {
+  configs += [ "//build/config:no_rtti" ]
+  configs -= [ "//build/config:no_rtti" ]
+  sources = [
+    "hpke_context_boringssl.cc",
+    "hpke_context_boringssl.h",
+  ]
+  public_deps = [
+    ":hpke_util",
+    ":hpke_util_boringssl",
+    "//third_party/abseil-cpp/absl/strings:strings",
+    "//third_party/boringssl:crypto",
+    "//third_party/tink/cc/internal:ssl_unique_ptr",
+    "//third_party/tink/cc/subtle:subtle_util",
+    "//third_party/tink/cc/util:secret_data",
+    "//third_party/tink/cc/util:status",
+    "//third_party/tink/cc/util:statusor",
+  ]
+  public_configs = [ "//third_party/tink:tink_config" ]
+}
+
+# CC Library : hpke_decrypt
+source_set("hpke_decrypt") {
+  configs += [ "//build/config:no_rtti" ]
+  configs -= [ "//build/config:no_rtti" ]
+  sources = [
+    "hpke_decrypt.cc",
+    "hpke_decrypt.h",
+  ]
+  public_deps = [
+    ":hpke_context",
+    ":hpke_util",
+    "//third_party/abseil-cpp/absl/status:status",
+    "//third_party/abseil-cpp/absl/strings:strings",
+    "//third_party/tink/cc:hybrid_decrypt",
+    "//third_party/tink/cc/proto:hpke_proto",
+    "//third_party/tink/cc/util:secret_data",
+    "//third_party/tink/cc/util:status",
+    "//third_party/tink/cc/util:statusor",
+  ]
+  public_configs = [ "//third_party/tink:tink_config" ]
+}
+
+# CC Library : hpke_encrypt
+source_set("hpke_encrypt") {
+  configs += [ "//build/config:no_rtti" ]
+  configs -= [ "//build/config:no_rtti" ]
+  sources = [
+    "hpke_encrypt.cc",
+    "hpke_encrypt.h",
+  ]
+  public_deps = [
+    ":hpke_context",
+    ":hpke_util",
+    "//third_party/abseil-cpp/absl/status:status",
+    "//third_party/tink/cc:hybrid_encrypt",
+    "//third_party/tink/cc/proto:hpke_proto",
+    "//third_party/tink/cc/util:statusor",
+  ]
+  public_configs = [ "//third_party/tink:tink_config" ]
+}
+
+# CC Library : hpke_key_manager_util
+source_set("hpke_key_manager_util") {
+  configs += [ "//build/config:no_rtti" ]
+  configs -= [ "//build/config:no_rtti" ]
+  sources = [
+    "hpke_key_manager_util.cc",
+    "hpke_key_manager_util.h",
+  ]
+  public_deps = [
+    "//third_party/abseil-cpp/absl/status:status",
+    "//third_party/tink/cc/proto:hpke_proto",
+    "//third_party/tink/cc/util:status",
+    "//third_party/tink/cc/util:validation",
+  ]
+  public_configs = [ "//third_party/tink:tink_config" ]
+}
+
+# CC Library : hpke_private_key_manager
+source_set("hpke_private_key_manager") {
+  configs += [ "//build/config:no_rtti" ]
+  configs -= [ "//build/config:no_rtti" ]
+  sources = [
+    "hpke_private_key_manager.cc",
+    "hpke_private_key_manager.h",
+  ]
+  public_deps = [
+    ":hpke_decrypt",
+    ":hpke_key_manager_util",
+    "//third_party/abseil-cpp/absl/status:status",
+    "//third_party/tink/cc:core/key_type_manager",
+    "//third_party/tink/cc:core/private_key_type_manager",
+    "//third_party/tink/cc:hybrid_decrypt",
+    "//third_party/tink/cc:key_manager",
+    "//third_party/tink/cc/internal:ec_util",
+    "//third_party/tink/cc/proto:hpke_proto",
+    "//third_party/tink/cc/proto:tink_proto",
+    "//third_party/tink/cc/util:constants",
+    "//third_party/tink/cc/util:status",
+    "//third_party/tink/cc/util:statusor",
+    "//third_party/tink/cc/util:validation",
+  ]
+  public_configs = [ "//third_party/tink:tink_config" ]
+}
+
+# CC Library : hpke_public_key_manager
+source_set("hpke_public_key_manager") {
+  configs += [ "//build/config:no_rtti" ]
+  configs -= [ "//build/config:no_rtti" ]
+  sources = [
+    "hpke_public_key_manager.cc",
+    "hpke_public_key_manager.h",
+  ]
+  public_deps = [
+    ":hpke_encrypt",
+    ":hpke_key_manager_util",
+    "//third_party/abseil-cpp/absl/memory:memory",
+    "//third_party/abseil-cpp/absl/strings:strings",
+    "//third_party/tink/cc:core/key_type_manager",
+    "//third_party/tink/cc:hybrid_encrypt",
+    "//third_party/tink/cc:key_manager",
+    "//third_party/tink/cc/proto:hpke_proto",
+    "//third_party/tink/cc/proto:tink_proto",
+    "//third_party/tink/cc/util:constants",
+    "//third_party/tink/cc/util:errors",
+    "//third_party/tink/cc/util:protobuf_helper",
+    "//third_party/tink/cc/util:status",
+    "//third_party/tink/cc/util:statusor",
+  ]
+  public_configs = [ "//third_party/tink:tink_config" ]
+}
+
+# CC Library : hpke_util
+source_set("hpke_util") {
+  configs += [ "//build/config:no_rtti" ]
+  configs -= [ "//build/config:no_rtti" ]
+  sources = [
+    "hpke_util.cc",
+    "hpke_util.h",
+  ]
+  public_deps = [
+    "//third_party/abseil-cpp/absl/strings:strings",
+    "//third_party/tink/cc/internal:ec_util",
+    "//third_party/tink/cc/proto:hpke_proto",
+    "//third_party/tink/cc/subtle:common_enums",
+    "//third_party/tink/cc/util:statusor",
+  ]
+  public_configs = [ "//third_party/tink:tink_config" ]
+}
+
+# CC Library : hpke_util_boringssl
+source_set("hpke_util_boringssl") {
+  configs += [ "//build/config:no_rtti" ]
+  configs -= [ "//build/config:no_rtti" ]
+  sources = [
+    "hpke_util_boringssl.cc",
+    "hpke_util_boringssl.h",
+  ]
+  public_deps = [
+    ":hpke_util",
+    "//third_party/abseil-cpp/absl/status:status",
+    "//third_party/abseil-cpp/absl/strings:strings",
+    "//third_party/boringssl:crypto",
+    "//third_party/tink/cc/proto:hpke_proto",
+    "//third_party/tink/cc/util:status",
+    "//third_party/tink/cc/util:statusor",
+  ]
+  public_configs = [ "//third_party/tink:tink_config" ]
+}
diff --git a/tools/convert_for_cobalt b/tools/convert_for_cobalt
index 8c63e21..5f4328b 100755
--- a/tools/convert_for_cobalt
+++ b/tools/convert_for_cobalt
@@ -799,6 +799,7 @@
   # on directly depending upon here.
   targets = [
       '//hybrid:hybrid_config',
+      '//hybrid:hpke_config',
       '//hybrid:hybrid_decrypt_factory',
       '//hybrid:hybrid_encrypt_factory',
       '//hybrid:hybrid_key_templates',