How deeply does Software Security for Developers cover Google Tink?

Explains Tink’s purpose, language coverage, and JCA/JCE layering, but does not develop its cryptographic internals.

Google Tink

As explained in Software Security for Developers

Google Tink is a multi-language cryptographic library that provides safer, simpler APIs for common cryptographic operations.

Google Tink is a developer-friendly, multi-language cryptographic library that reduces common programming errors. Its Java implementation adds a safer layer over the low-level JCA and JCE APIs. section 4.3

Tink is useful when production cryptography must remain practical and harder to misuse:

Use it instead of writing production AES-GCM code directly against low-level cryptography APIs. section 5.5.3
Reuse the same library across Java, C++, Objective-C, Go, Python, and JavaScript implementations. section 4.3
Treat JCA and JCE as APIs worth understanding, but recognize that they are easy to misconfigure or misuse. section 4.3

Hashing a file with Tink

A Java implementation can hash refunds.json with SHA3-256 through Tink’s message-digest integration and produce the same digest as direct JCA usage: 542b49a04073502046b0de5751d5f7a9afe7c1ff2d63524c0863233a53de0c14.

How Software Security for Developers covers it

Cover of Software Security for Developers

liveBook manning.com

Read Software Security for Developers on liveBook Get the book at manning.com

Related concepts

Galois/Counter Modeconfigures · Galois/Counter Mode is an authenticated-encryption mode that combines counter-mode encryption with authentication of ciphertext and associated data.
cryptographic librarykind of · A cryptographic library is reusable software that implements cryptographic algorithms, protocols, and security operations through programming interfaces.
Java Cryptography Architectureimplements · The Java Cryptography Architecture is Java's standard framework of interfaces, classes, and algorithm services for cryptographic operations.
Java Cryptography Extensionsalternative to · The Java Cryptography Extensions are Java APIs and implementations that extend cryptographic support beyond the core Java Cryptography Architecture.

This explainer was generated by Manning's knowledge graph from the text of Software Security for Developers. The section links point to the parts of the book it draws on.