PiperOrigin-RevId: 225201372
GitOrigin-RevId: 0a178979517639edba0d308cb0b29be8a59e6974

PiperOrigin-RevId: 225184365
GitOrigin-RevId: 939854720d4a2809b494bce2d045d8581e828eaf

PiperOrigin-RevId: 225029916
GitOrigin-RevId: fb8e4c441ebefb172ed9c1bb642b25bb66bb3114

PiperOrigin-RevId: 224417437
GitOrigin-RevId: 378a01a5c264a9b913b8181e6f9f57ad7c965740

PiperOrigin-RevId: 224373245
GitOrigin-RevId: 7f572c1196e03d65c77c25490047521757fc2f81

PiperOrigin-RevId: 224230832
GitOrigin-RevId: 334c6f26a321ed51a3bc60072d249803ebd76543

PiperOrigin-RevId: 223663565
GitOrigin-RevId: 0fdf549d913bf6ca4e4c84e046280a98a2a18a42

PiperOrigin-RevId: 223545779
GitOrigin-RevId: ede956dc78717b6275f4dd565ae5ff70f60c2738

PiperOrigin-RevId: 223536327
GitOrigin-RevId: 4168926e669105aa8eac8dd920ead68245ec0c74

These should be marked explicit to avoid unwanted conversions.

PiperOrigin-RevId: 223339925
GitOrigin-RevId: 1516128555a9055d6fcec6b4436fa2799938c4e2

PiperOrigin-RevId: 223316979
GitOrigin-RevId: 44637c8626b007a91f99ec92aa15eccdb219c052

This makes clang-tidy happy (otherwise, during shutdown of the program, if this function is called by some other global variable, there's a problem).

PiperOrigin-RevId: 223316047
GitOrigin-RevId: 4fe801ed87dcfc5303f1f33aac0fcbbaff0fdcfe

The last condition wasn't exercised by AESUtil tests (though it is in the SIV ones). Now, three of the new vectors do exercise it.

PiperOrigin-RevId: 223313269
GitOrigin-RevId: 864165ae42583a7d38a8967956695b747c19709c

PiperOrigin-RevId: 223277481
GitOrigin-RevId: c81f6e336afc898d31a5d74c430c3bf751306482

PiperOrigin-RevId: 223253806
GitOrigin-RevId: 4ddf54305f73a6ed7a9f21d586ccdf9aa2cf281a

PiperOrigin-RevId: 223169793
GitOrigin-RevId: 0ba21c27a69089a2353ccfaa4971e7925baa40db

PiperOrigin-RevId: 223156062
GitOrigin-RevId: cfce1da125478d9a221f386d1d7dc5f16c140b69

PiperOrigin-RevId: 223043550
GitOrigin-RevId: bd2379c38782f5c1e7c4c4e68f1368ef25ffd6f0

This uses just the default implementation from InputStream,
which simply reads and discards bytes.

PiperOrigin-RevId: 222989842
GitOrigin-RevId: c20d8fac3eacc17d35ec0f58b534f0b1609d8061

Currently skip is delegated to the ciphertext stream which breaks
subsequent reads.

PiperOrigin-RevId: 222978554
GitOrigin-RevId: 6ac792c7ab8554d32b741de3f9447b20add15247

PiperOrigin-RevId: 222968438
GitOrigin-RevId: 1f27aa5a98f2588f286a8c38d409c04e0ef1e9e2

PiperOrigin-RevId: 222871514
GitOrigin-RevId: 939b25457b08f7ecfe358480554cdb800e990d64

PiperOrigin-RevId: 222698177
GitOrigin-RevId: d9720d8a6fc2f25c560c1227ef7cdd9b8e9c4af0

This ensures that writers of KeyManagers can not forget to validate a keyformat proto. The KeyManagerBase is still marked alpha, so this should not pose a problem.

PiperOrigin-RevId: 222615716
GitOrigin-RevId: 57fd4cd72a8e81bc1b47429a7a418036e55f91ca

PiperOrigin-RevId: 222608605
GitOrigin-RevId: 5b75bf8a2d77b877b1dffc1e0f2fd9a53a94195f

Remove a few leftover "string key_type_" and const string declarations which aren't needed anymore. Also, change the EciesAeadHkdfPrivateKeyManager to inherit from KeyManagerBase.

PiperOrigin-RevId: 222536991
GitOrigin-RevId: 81f3f57fd4515d15b1ac89215177cd6f0c6162c8

PiperOrigin-RevId: 222059710
GitOrigin-RevId: aa17789b4100c36e92cae877ef0155de290471d5

Since AES-GCM-SIV is nonce-misuse resistant, this encryption mode
could also be used in situations where the nonce is user provided.
However, because of lack of concrete use cases this is currently not
implemented.

PiperOrigin-RevId: 222051134
GitOrigin-RevId: 353fc02f64accde521a98bb7d774b8e1b015d275

PiperOrigin-RevId: 221779622
GitOrigin-RevId: 7c9dd465df318fbaaa49afba905df54dc4d4a103

PiperOrigin-RevId: 221640831
GitOrigin-RevId: 98977d1dcb5a2f66ce8b84044b95bc691531f668

This is a replacement for NoSecretKeysetHandle as we don't really need a separate class for this feature.

ReadNoSecret takes a serialized keyset (instead of a Keyset protobuf) because we don't want users to depend on tink.proto.h which is an internal implementation detail.

Next, I'll remove NoSecretKeysetHandle.

PiperOrigin-RevId: 221612426
GitOrigin-RevId: 50e307d3a834a38b70377bba7881733bc4649183

PiperOrigin-RevId: 221498755
GitOrigin-RevId: 0de9d8cd8e5eb2bef7aecf72ec57d2e1198b4edb

PiperOrigin-RevId: 221460179
GitOrigin-RevId: 0b64b34572e19a62458b323642e624dae6e53fff

PiperOrigin-RevId: 221436661
GitOrigin-RevId: 7e3e6a1c69adac8c6e66d40ebfce00e5e4831ec4

Enable nogo to run vet when building the Tink Go libraries in Bazel. The
instructions for enabling nogo can be found here:

https://github.com/bazelbuild/rules_go/blob/master/go/nogo.rst

While there, upgrade the Bazel Go rules version to 0.16.2 to pull in the
latest nogo support.

PiperOrigin-RevId: 221367945
GitOrigin-RevId: daf8c23fa701329fcce117c7e504f4bd1d7dbede

The old pattern did an implicit iteration over a depset which will be forbidden in the future since it is potentially expensive. The new to_list() call is still expensive but it will be more visible.

PiperOrigin-RevId: 221297192
GitOrigin-RevId: 113102aa571c5fb4375771f4daa85f25ce0214a4

PiperOrigin-RevId: 221261847
GitOrigin-RevId: 12c1b7bd8d93d79b4920e48c45990c2470c8c561

Since we're building Tink with Protobuf 3.6.0, we should also depend on this version at runtime.

PiperOrigin-RevId: 221251377
GitOrigin-RevId: d9359867812f5e9fa600c33c059c2f80d5b221b2

PiperOrigin-RevId: 221245900
GitOrigin-RevId: 8558d8b91e515371417d0a77b3a8fdfac2521d38

PiperOrigin-RevId: 221233542
GitOrigin-RevId: aac00df2b4738fbcfc877c11b83c60d65e243308