points to a remote key, i.e., in a KMS.

Key data does not exist in this Keyset any more.

Cannot be used, but exists and can become ENABLED.

Can be used for crypto operations.

Enum value maps for KeyData_KeyMaterialType.

Enum value maps for KeyData_KeyMaterialType.

Enum value maps for KeyStatusType.

Enum value maps for KeyStatusType.

Enum value maps for OutputPrefixType.

Enum value maps for OutputPrefixType.

Represents a keyset that is encrypted with a master key.

The actual *Key-proto is wrapped in a KeyData message, which in addition to this serialized proto contains also type_url identifying the definition of *Key-proto (as in KeyFormat-message), and some extra metadata about the type key material.

A Tink user works usually not with single keys, but with keysets, to enable key rotation.

Represents a "safe" Keyset that doesn't contain any actual key material, thus can be used for logging or monitoring.

Tink produces and accepts ciphertexts or signatures that consist of a prefix and a payload.