Tink 设置
使用集合让一切井井有条
根据您的偏好保存内容并对其进行分类。
您可以从源代码构建 Tink，也可以使用特定于语言的软件包。请按照以下说明开始操作。
安装并设置完 Tink 后，请继续执行本页面末尾的后续步骤。
Python
Tink Python 库 tink-py 支持 macOS (x86-64 和 ARM64)、Linux (x86-64 和 ARM64) 和 Windows (x86-64) 上的 Python 3.9 或更高版本。最新版本为
1.12.0。您可以使用 Pip 在本地安装它，也可以与 Bazel 搭配使用。
Tink Python 支持与 AWS KMS、Google Cloud KMS 和 HashiCorp Vault 集成。
Pip
您可以通过运行以下命令，从 PyPI 为您的系统安装 Tink Python 二进制版本：
pip3 install tink==1.12.0
# Core Tink + Google Cloud KMS extension.
pip3 install tink[gcpkms]==1.12.0
# Core Tink + AWS KMS extension.
pip3 install tink[awskms]==1.12.0
# Core Tink + HashiCorp Vault KMS extension.
pip3 install tink[hcvault]==1.12.0
# Core Tink + all the KMS extensions.
pip3 install tink[all]==1.12.0
如果未针对您的环境发布二进制软件包，pip 会自动改用发布到 PyPI 的源代码分发版来构建项目。如果是这种情况，您需要安装 Bazel 或 Bazelisk 以及 protobuf 编译器，才能成功构建项目。
Bazel
对于 Tink Python 1.12 及更高版本，Bazel 用户需要使用 MODULE.bazel：
bazel_dep(name = "tink_py")
archive_override(
module_name = "tink_py",
urls = ["https://github.com/tink-crypto/tink-py/releases/download/v1.12.0/tink-py-1.12.0.zip"],
strip_prefix = "tink-py-1.12.0",
sha256 = "5968d0ba84f1fc958f685cfdfc667bfb1d8414a22eaa6f502b290a23af2aba43",
)
我们目前不会在 Bazel 中央注册库中发布 Tink Python。
后续步骤
完成 Tink 设置后，请继续执行标准的 Tink 使用步骤：
- 选择基元 - 根据您的用例确定要使用的基元
- 管理密钥 - 使用外部 KMS 保护密钥、生成密钥集以及轮替密钥
如未另行说明，那么本页面中的内容已根据知识共享署名 4.0 许可获得了许可，并且代码示例已根据 Apache 2.0 许可获得了许可。有关详情，请参阅 Google 开发者网站政策。Java 是 Oracle 和/或其关联公司的注册商标。
最后更新时间 (UTC)：2025-07-25。
[null,null,["最后更新时间 (UTC)：2025-07-25。"],[[["\u003cp\u003eTink can be built from source or installed using language-specific packages for C++, Go, Java, Objective-C, and Python.\u003c/p\u003e\n"],["\u003cp\u003eTink offers core libraries and extensions for cloud key management systems like AWS KMS and Google Cloud KMS.\u003c/p\u003e\n"],["\u003cp\u003eAfter installation, users should choose a cryptographic primitive and establish a key management strategy.\u003c/p\u003e\n"],["\u003cp\u003eLanguage-specific instructions and dependencies are detailed for building and using Tink in each supported language.\u003c/p\u003e\n"],["\u003cp\u003eTink supports various operating systems, compilers, and build systems for each language, ensuring flexibility for developers.\u003c/p\u003e\n"]]],["Tink can be set up via source or language-specific packages. For C++, use Bazel or CMake, ensuring dependencies like Protobuf and Abseil are met. Go uses `go get` for core and extension libraries like AWS KMS, Google Cloud KMS, and HashiCorp Vault. Python employs `pip3 install` or Bazel for installation, supporting extensions. After setting up Tink, users should choose a primitive and manage keys.\n"],null,["# Tink setup\n\nYou can build Tink from source or use language-specific packages. The following\ninstructions get you started.\n\nAfter you've finished installing and setting up Tink, continue with the [Next\nSteps](#next_steps) at the end of this page. \n\n### C++\n\n[Set up Tink C++ and extensions](/tink/setup/cc)\n\n### Go\n\n[Set up Tink Go and extensions](/tink/setup/go)\n\n### Java\n\n[Set up Tink Java and extensions](/tink/setup/java)\n\n### ObjC\n\n| **Note:** These instructions are for the newest release, [Tink\n| 1.7.0](https://github.com/google/tink/releases/).\n\nSee the [HOWTO on GitHub](https://github.com/google/tink/blob/v1.7.0/docs/OBJC-HOWTO.md)\n\n### Python\n\n\nThe Tink Python library, [tink-py](https://github.com/tink-crypto/tink-py),\nsupports Python 3.9 or newer on macOS (x86-64 and ARM64), Linux (x86-64 and\nARM64) and Windows (x86-64). The latest release is [1.12.0](https://github.com/tink-crypto/tink-py/releases/tag/v1.12.0). It can be installed locally using\n[Pip](https://pypi.org/project/pip/) or used with\n[Bazel](http://bazel.build).\n\nTink Python provides integrations with [AWS\nKMS](https://aws.amazon.com/kms/), [Google Cloud\nKMS](https://cloud.google.com/kms/) and [HashiCorp\nVault](https://www.vaultproject.io/).\n\nPip\n---\n\nYou can install the Tink Python binary release for your system from\n[PyPI](https://pypi.org/project/tink/), by running the following command: \n\n pip3 install tink==1.12.0\n # Core Tink + Google Cloud KMS extension.\n pip3 install tink[gcpkms]==1.12.0\n # Core Tink + AWS KMS extension.\n pip3 install tink[awskms]==1.12.0\n # Core Tink + HashiCorp Vault KMS extension.\n pip3 install tink[hcvault]==1.12.0\n # Core Tink + all the KMS extensions.\n pip3 install tink[all]==1.12.0\n\nIf a binary package is not published for your environment, `pip`\nautomatically resorts to building the project using the source distribution\npublished to PyPI. If this is the case, you need [Bazel](http://bazel.build)\nor [Bazelisk](https://github.com/bazelbuild/bazelisk) and the [protobuf\ncompiler](https://github.com/protocolbuffers/protobuf#protocol-compiler-installation) installed to successfully build the project.\n\nBazel\n-----\n\nFor Tink Python 1.12 and later, [Bazel](http://bazel.build) users need to\nuse `MODULE.bazel`: \n\n bazel_dep(name = \"tink_py\")\n\n archive_override(\n module_name = \"tink_py\",\n urls = [\"https://github.com/tink-crypto/tink-py/releases/download/v1.12.0/tink-py-1.12.0.zip\"],\n strip_prefix = \"tink-py-1.12.0\",\n sha256 = \"5968d0ba84f1fc958f685cfdfc667bfb1d8414a22eaa6f502b290a23af2aba43\",\n )\n\nWe don't publish Tink Python in the Bazel Central Registry at the moment.\n\nNext steps\n----------\n\nOnce you've finished setting up Tink, continue with the standard Tink usage\nsteps:\n\n- [Choose a primitive](/tink/choose-primitive) -- Decide which primitive to use based on your use case\n- [Manage keys](/tink/key-management-overview) -- Protect your keys with your external KMS, generate keysets, and rotate your keys"]]
