Tink C++ Google Cloud KMS Extension v2.5.0

Tink is a multi-language, cross-platform library that provides simple and misuse-proof APIs for common cryptographic tasks.

This is the Tink C++ GCP KMS Extension v2.5.0

What's new

The complete list of changes since 2.4.0 can be found here.

• Added support for MAC computation and verification.
• Dependency upgrades:
  • WORKSPACE:
    • protobuf to v30.2
    • gRPC to 1.73.1
    • Abseil to 20250814.1
• Added Checksum Verification to GetPublicKey responses.
• Enforced use of NIST_PQC public key format for PQC algorithms.
• Upgraded Bazel to 7.6.2
• Added Bzlmod configuration

Future work

To see what we're working towards, check our project roadmap.

Getting started

Bazel

workspace(name = "example")

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "tink_cc_gcpkms",
    urls = ["https://github.com/tink-crypto/tink-cc-gcpkms/releases/download/v2.5.0/tink-cc-gcpkms-2.5.0.zip"],
    strip_prefix = "tink-cc-gcpkms-2.5.0",
    sha256 = "36feff9e45e8f81c500aac8321968197f69b4f0fe23c78698430d683423c1961",
)

load("@tink_cc_gcpkms//:tink_cc_gcpkms_deps.bzl", "tink_cc_gcpkms_deps")

tink_cc_gcpkms_deps()

load("@tink_cc_gcpkms//:tink_cc_gcpkms_deps_init.bzl", "tink_cc_gcpkms_deps_init")

tink_cc_gcpkms_deps_init(register_go = True)


# ... Your dependencies here ...