Google releases Tink crypto library
279 views
Skip to first unread message
Steve Weis
May 18, 2017, 2:25:21 PM5/18/17
to Keyczar Discuss
Google released their new Tink crypto library: https://github.com/google/tink/
I think this is intended as a Keyczar replacement and may have been the outcome of "K2".
I think this is intended as a Keyczar replacement and may have been the outcome of "K2".
I'd say it's probably time to deprecate Keyczar and point it at something that is going to be actively maintained going forward. Keyczar is really out of date at this point.
devin lundberg
May 18, 2017, 2:36:19 PM5/18/17
to keyczar...@googlegroups.com
The wiki for tink seems to agree with your assessment that it was the outcome of "K2". I agree we should deprecate keyczar and recommend tink for future projects.
--
You received this message because you are subscribed to the Google Groups "Keyczar Discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to keyczar-discuss+unsubscribe@googlegroups.com.
To post to this group, send email to keyczar-discuss@googlegroups.com.
Visit this group at https://groups.google.com/group/keyczar-discuss.
For more options, visit https://groups.google.com/d/optout.
David Norman
May 18, 2017, 2:37:08 PM5/18/17
to keyczar...@googlegroups.com
Sold!
Ben Laurie
May 18, 2017, 2:50:29 PM5/18/17
to keyczar...@googlegroups.com
In principle, yes, but I think you should wait until Tink is actually
usable (e.g. build instructions!). :-)
Also ... back compatibility?
On 18 May 2017 at 19:37, David Norman <dash...@gmail.com> wrote:
> Sold!
>
> On Thu, May 18, 2017 at 12:36 PM, devin lundberg <devin...@gmail.com>
> wrote:
>>
>> The wiki for tink seems to agree with your assessment that it was the
>> outcome of "K2". I agree we should deprecate keyczar and recommend tink for
>> future projects.
>>
>> On Thu, May 18, 2017 at 11:25 AM, Steve Weis <stev...@gmail.com> wrote:
>>>
>>> Google released their new Tink crypto library:
>>> https://github.com/google/tink/
>>>
>>> I think this is intended as a Keyczar replacement and may have been the
>>> outcome of "K2".
>>>
>>> I'd say it's probably time to deprecate Keyczar and point it at something
>>> that is going to be actively maintained going forward. Keyczar is really out
>>> of date at this point.
>>>
>>> --
>>> You received this message because you are subscribed to the Google Groups
>>> "Keyczar Discuss" group.
>>> To unsubscribe from this group and stop receiving emails from it, send an
>>> email to keyczar-discu...@googlegroups.com.
>>> To post to this group, send email to keyczar...@googlegroups.com.
>> To post to this group, send email to keyczar...@googlegroups.com.
> To post to this group, send email to keyczar...@googlegroups.com.
usable (e.g. build instructions!). :-)
Also ... back compatibility?
On 18 May 2017 at 19:37, David Norman <dash...@gmail.com> wrote:
> Sold!
>
> On Thu, May 18, 2017 at 12:36 PM, devin lundberg <devin...@gmail.com>
> wrote:
>>
>> The wiki for tink seems to agree with your assessment that it was the
>> outcome of "K2". I agree we should deprecate keyczar and recommend tink for
>> future projects.
>>
>> On Thu, May 18, 2017 at 11:25 AM, Steve Weis <stev...@gmail.com> wrote:
>>>
>>> Google released their new Tink crypto library:
>>> https://github.com/google/tink/
>>>
>>> I think this is intended as a Keyczar replacement and may have been the
>>> outcome of "K2".
>>>
>>> I'd say it's probably time to deprecate Keyczar and point it at something
>>> that is going to be actively maintained going forward. Keyczar is really out
>>> of date at this point.
>>>
>>> --
>>> You received this message because you are subscribed to the Google Groups
>>> "Keyczar Discuss" group.
>>> To unsubscribe from this group and stop receiving emails from it, send an
>>> To post to this group, send email to keyczar...@googlegroups.com.
>>> Visit this group at https://groups.google.com/group/keyczar-discuss.
>>> For more options, visit https://groups.google.com/d/optout.
>>
>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "Keyczar Discuss" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to keyczar-discu...@googlegroups.com.
>>> For more options, visit https://groups.google.com/d/optout.
>>
>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "Keyczar Discuss" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> To post to this group, send email to keyczar...@googlegroups.com.
>> Visit this group at https://groups.google.com/group/keyczar-discuss.
>> For more options, visit https://groups.google.com/d/optout.
>
>
> --
> You received this message because you are subscribed to the Google Groups
> "Keyczar Discuss" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to keyczar-discu...@googlegroups.com.
>> For more options, visit https://groups.google.com/d/optout.
>
>
> --
> You received this message because you are subscribed to the Google Groups
> "Keyczar Discuss" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> To post to this group, send email to keyczar...@googlegroups.com.
Thai Duong
May 18, 2017, 7:42:20 PM5/18/17
to Keyczar Discuss, b...@links.org
Hi folks,
I'm Thai, one of the engineers behind Tink.
Tink is still a work in progress, but we're not far from our first stable release. We'll soon
provide build instructions and code examples, and would love to get some feedback from
the Keyczar community. PRs are also much welcome and appreciated!
Tink is indeed based on the original K2 design from Daniel Bleichenbacher. Daniel is also
one of the main contributors of the project.
While all Tink contributors are Google engineers, Tink is not an official Google product.
Personally I started working on Tink because I love Daniel's ideas and thought the Internet
needs a safe, simple, free, open source crypto library.
Last but not least, though we do think that Tink is better in all aspects we have no plan to
replace Keyczar.
Cheers,
Thai.
Jay Tuley
May 19, 2017, 6:07:03 PM5/19/17
to keyczar...@googlegroups.com
Nice!!
To unsubscribe from this group and stop receiving emails from it, send an email to keyczar-discuss+unsubscribe@googlegroups.com.
To post to this group, send email to keyczar-discuss@googlegroups.com.
Jay Tuley
May 19, 2017, 6:16:03 PM5/19/17
to keyczar...@googlegroups.com
"but it is not an official Google product. In particular, is not meant as a replacement or successor of Keyczar." quote from the readme.
On Thu, May 18, 2017 at 1:50 PM, Ben Laurie <b...@links.org> wrote:
In principle, yes, but I think you should wait until Tink is actually
usable (e.g. build instructions!). :-)
Also ... back compatibility?
On 18 May 2017 at 19:37, David Norman <dash...@gmail.com> wrote:
> Sold!
>
> On Thu, May 18, 2017 at 12:36 PM, devin lundberg <devin...@gmail.com>
> wrote:
>>
>> The wiki for tink seems to agree with your assessment that it was the
>> outcome of "K2". I agree we should deprecate keyczar and recommend tink for
>> future projects.
>>
>> On Thu, May 18, 2017 at 11:25 AM, Steve Weis <stev...@gmail.com> wrote:
>>>
>>> Google released their new Tink crypto library:
>>> https://github.com/google/tink/
>>>
>>> I think this is intended as a Keyczar replacement and may have been the
>>> outcome of "K2".
>>>
>>> I'd say it's probably time to deprecate Keyczar and point it at something
>>> that is going to be actively maintained going forward. Keyczar is really out
>>> of date at this point.
>>>
>>> --
>>> You received this message because you are subscribed to the Google Groups
>>> "Keyczar Discuss" group.
>>> To unsubscribe from this group and stop receiving emails from it, send an
>>> email to keyczar-discuss+unsubscribe@googlegroups.com.
>>> To post to this group, send email to keyczar-discuss@googlegroups.com.
>>> Visit this group at https://groups.google.com/group/keyczar-discuss.
>>> For more options, visit https://groups.google.com/d/optout.
>>
>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "Keyczar Discuss" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to keyczar-discuss+unsubscribe@googlegroups.com.
>> To post to this group, send email to keyczar-discuss@googlegroups.com.
>> Visit this group at https://groups.google.com/group/keyczar-discuss.
>> For more options, visit https://groups.google.com/d/optout.
>
>
> --
> You received this message because you are subscribed to the Google Groups
> "Keyczar Discuss" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to keyczar-discuss+unsubscribe@googlegroups.com.
> To post to this group, send email to keyczar-discuss@googlegroups.com.
> Visit this group at https://groups.google.com/group/keyczar-discuss.
> For more options, visit https://groups.google.com/d/optout.
--
You received this message because you are subscribed to the Google Groups "Keyczar Discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to keyczar-discuss+unsubscribe@googlegroups.com.
To post to this group, send email to keyczar-discuss@googlegroups.com.
Jay Tuley
May 19, 2017, 6:17:33 PM5/19/17
to keyczar...@googlegroups.com
Not to say I don't believe keyczar is dead and I'm excited about checking out Tink.
Daniel Bleichenbacher
May 22, 2017, 7:34:46 AM5/22/17
to keyczar...@googlegroups.com
On Thu, May 18, 2017 at 8:50 PM, Ben Laurie <b...@links.org> wrote:
In principle, yes, but I think you should wait until Tink is actually
usable (e.g. build instructions!). :-)
Also ... back compatibility?
As far as I know there is no backwards compatibility implemented nor is it planned.
The format byte (I.e. the first byte in a keyczar ciphetext) is no longer 0. This allows
to determine which library encrypted (signed etc) the message.
The main reason for this that basically none of the encryption modes in keyczar
are supported. E.g. digital signatures with SHA-1 will of course not be implemented.
All the interfaces come with minimal security guarantees.
On 18 May 2017 at 19:37, David Norman <dash...@gmail.com> wrote:
> Sold!
>
> On Thu, May 18, 2017 at 12:36 PM, devin lundberg <devin...@gmail.com>
> wrote:
>>
>> The wiki for tink seems to agree with your assessment that it was the
>> outcome of "K2". I agree we should deprecate keyczar and recommend tink for
>> future projects.
>>
>> On Thu, May 18, 2017 at 11:25 AM, Steve Weis <stev...@gmail.com> wrote:
>>>
>>> Google released their new Tink crypto library:
>>> https://github.com/google/tink/
>>>
>>> I think this is intended as a Keyczar replacement and may have been the
>>> outcome of "K2".
>>>
>>> I'd say it's probably time to deprecate Keyczar and point it at something
>>> that is going to be actively maintained going forward. Keyczar is really out
>>> of date at this point.
>>>
>>> --
>>> You received this message because you are subscribed to the Google Groups
>>> "Keyczar Discuss" group.
>>> To unsubscribe from this group and stop receiving emails from it, send an
>>> email to keyczar-discuss+unsubscribe@googlegroups.com.
>>> To post to this group, send email to keyczar-discuss@googlegroups.com.
>>> Visit this group at https://groups.google.com/group/keyczar-discuss.
>>> For more options, visit https://groups.google.com/d/optout.
>>
>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "Keyczar Discuss" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to keyczar-discuss+unsubscribe@googlegroups.com.
>> To post to this group, send email to keyczar-discuss@googlegroups.com.
>> Visit this group at https://groups.google.com/group/keyczar-discuss.
>> For more options, visit https://groups.google.com/d/optout.
>
>
> --
> You received this message because you are subscribed to the Google Groups
> "Keyczar Discuss" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to keyczar-discuss+unsubscribe@googlegroups.com.
> To post to this group, send email to keyczar-discuss@googlegroups.com.
> Visit this group at https://groups.google.com/group/keyczar-discuss.
> For more options, visit https://groups.google.com/d/optout.
--
You received this message because you are subscribed to the Google Groups "Keyczar Discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to keyczar-discuss+unsubscribe@googlegroups.com.
To post to this group, send email to keyczar-discuss@googlegroups.com.
Thai Duong
May 26, 2017, 2:09:48 PM5/26/17
to Keyczar Discuss
Re build instruction: you can now build Tink Java with Maven. You can checkout the source and run mvn package. It should work on Linux and MacOS.
Our 1.0.0 version is still in active development, thus we haven't uploaded artifacts to Maven Central. You can find our snapshot package at https://storage.googleapis.com/tink-build-artifacts/maven/tink-1.0.0-SNAPSHOT.jar. https://storage.cloud.google.com/tink-build-artifacts/maven/tink-1.0.0-SNAPSHOT-javadoc.jar and https://storage.cloud.google.com/tink-build-artifacts/maven/tink-1.0.0-SNAPSHOT-sources.jar are javadoc and source packages. These packages are automatically generated from HEAD. We're working hard on Tink and at the current pace, Tink 1.0.0 stable should be ready in a few weeks.
It's not really nice evangelizing my library on another library's mailing list, so this is my last post about Tink. If you're interested in Tink, please join our mailing list at https://groups.google.com/forum/#!topic/tink-users.
Thanks and have a nice weekend!
Thai.
>>> email to keyczar-discu...@googlegroups.com.
>>> To post to this group, send email to keyczar...@googlegroups.com.
>>> Visit this group at https://groups.google.com/group/keyczar-discuss.
>>> For more options, visit https://groups.google.com/d/optout.
>>
>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "Keyczar Discuss" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to keyczar-discu...@googlegroups.com.
>> To post to this group, send email to keyczar...@googlegroups.com.
>> Visit this group at https://groups.google.com/group/keyczar-discuss.
>> For more options, visit https://groups.google.com/d/optout.
>
>
> --
> You received this message because you are subscribed to the Google Groups
> "Keyczar Discuss" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to keyczar-discu...@googlegroups.com.
> To post to this group, send email to keyczar...@googlegroups.com.
> Visit this group at https://groups.google.com/group/keyczar-discuss.
> For more options, visit https://groups.google.com/d/optout.
--
You received this message because you are subscribed to the Google Groups "Keyczar Discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to keyczar-discu...@googlegroups.com.
To post to this group, send email to keyczar...@googlegroups.com.
Thierry Abaléa
Jul 18, 2017, 11:00:00 AM7/18/17
to Keyczar Discuss
The URL for Tink mailing list provided by Thai Duong is incorrect. The right one is https://groups.google.com/forum/#!forum/tink-users
Reply all
Reply to author
Forward
0 new messages