# Functions
GetPrimaryKey returns a Tink AEAD encryption key from KMS Supports GCP and AWS.
KeyHandleToSigner converts a key handle to the crypto.Signer interface.
NewTinkCA creates a signer from an encrypted Tink keyset, encrypted with a GCP KMS key.
NewTinkCAFromHandle creates a signer from an encrypted Tink keyset, encrypted with an AEAD key.