NewBinaryReader returns new BinaryReader that will read from r.

NewBinaryWriter returns a new BinaryWriter that will write to w.

NewHandle creates a keyset handle that contains a single fresh key generated according to the given KeyTemplate.

NewHandleWithNoSecrets creates a new instance of KeysetHandle using the given keyset which does not contain any secret key material.

NewJSONReader returns new JSONReader that will read from r.

NewJSONWriter returns a new JSONWriter that will write to w.

NewManager creates a new instance with an empty Keyset.

NewManagerFromHandle creates a new instance from the given Handle.

Read tries to create a Handle from an encrypted keyset obtained via reader.

ReadWithAssociatedData tries to create a Handle from an encrypted keyset obtained via reader using the provided associated data.

ReadWithNoSecrets tries to create a keyset.Handle from a keyset obtained via reader.

Validate validates the given key set.

ValidateKeyVersion checks whether the given version is valid.

BinaryReader deserializes a keyset from binary proto format.

BinaryWriter serializes a keyset into binary proto format.

Handle provides access to a Keyset protobuf, to limit the exposure of actual protocol buffers that hold sensitive key material.

JSONReader deserializes a keyset from json format.

JSONWriter serializes a keyset into json format.

Manager manages a Keyset-proto, with convenience methods that rotate, disable, enable or destroy keys.

MemReaderWriter implements keyset.Reader and keyset.Writer for *tinkpb.Keyset and *tinkpb.EncryptedKeyset.

Reader knows how to read a Keyset or an EncryptedKeyset from some source.

Writer knows how to write a Keyset or an EncryptedKeyset to some source.