Tink 設定
透過集合功能整理內容
你可以依據偏好儲存及分類內容。
您可以從原始碼建構 Tink，也可以使用特定語言的套件。請按照下列操作說明開始使用。
安裝及設定 Tink 後，請繼續執行本頁底部的後續步驟。
Python
Tink Python 程式庫 tink-py 支援 macOS (x86-64 和 ARM64)、Linux (x86-64 和 ARM64) 和 Windows (x86-64) 上的 Python 3.9 以上版本。最新版本為
1.12.0。您可以使用 Pip 在本機安裝，也可以搭配 Bazel 使用。
Tink Python 提供與 AWS KMS、Google Cloud KMS 和 HashiCorp Vault 的整合功能。
Pip
您可以執行下列指令，從 PyPI 為系統安裝 Tink Python 二進位版本：
pip3 install tink==1.12.0
# Core Tink + Google Cloud KMS extension.
pip3 install tink[gcpkms]==1.12.0
# Core Tink + AWS KMS extension.
pip3 install tink[awskms]==1.12.0
# Core Tink + HashiCorp Vault KMS extension.
pip3 install tink[hcvault]==1.12.0
# Core Tink + all the KMS extensions.
pip3 install tink[all]==1.12.0
如果沒有為您的環境發布二進位元檔案包，pip 會自動改用發布至 PyPI 的原始碼發布來建構專案。在這種情況下，您必須安裝 Bazel 或 Bazelisk 以及 protobuf 編譯器，才能順利建構專案。
Bazel
針對 Tink Python 1.12 以上版本，Bazel 使用者需要使用 MODULE.bazel：
bazel_dep(name = "tink_py")
archive_override(
module_name = "tink_py",
urls = ["https://github.com/tink-crypto/tink-py/releases/download/v1.12.0/tink-py-1.12.0.zip"],
strip_prefix = "tink-py-1.12.0",
sha256 = "5968d0ba84f1fc958f685cfdfc667bfb1d8414a22eaa6f502b290a23af2aba43",
)
我們目前不會在 Bazel 中央註冊中心發布 Tink Python。
後續步驟
完成 Tink 設定後，請繼續執行標準的 Tink 使用步驟：
- 選擇基本元素：根據用途決定要使用的元素
- 管理金鑰：使用外部 KMS 保護金鑰、產生金鑰組合，以及輪替金鑰
除非另有註明，否則本頁面中的內容是採用創用 CC 姓名標示 4.0 授權，程式碼範例則為阿帕契 2.0 授權。詳情請參閱《Google Developers 網站政策》。Java 是 Oracle 和/或其關聯企業的註冊商標。
上次更新時間：2025-07-25 (世界標準時間)。
[null,null,["上次更新時間：2025-07-25 (世界標準時間)。"],[[["\u003cp\u003eTink can be built from source or installed using language-specific packages for C++, Go, Java, Objective-C, and Python.\u003c/p\u003e\n"],["\u003cp\u003eTink offers core libraries and extensions for cloud key management systems like AWS KMS and Google Cloud KMS.\u003c/p\u003e\n"],["\u003cp\u003eAfter installation, users should choose a cryptographic primitive and establish a key management strategy.\u003c/p\u003e\n"],["\u003cp\u003eLanguage-specific instructions and dependencies are detailed for building and using Tink in each supported language.\u003c/p\u003e\n"],["\u003cp\u003eTink supports various operating systems, compilers, and build systems for each language, ensuring flexibility for developers.\u003c/p\u003e\n"]]],["Tink can be set up via source or language-specific packages. For C++, use Bazel or CMake, ensuring dependencies like Protobuf and Abseil are met. Go uses `go get` for core and extension libraries like AWS KMS, Google Cloud KMS, and HashiCorp Vault. Python employs `pip3 install` or Bazel for installation, supporting extensions. After setting up Tink, users should choose a primitive and manage keys.\n"],null,["# Tink setup\n\nYou can build Tink from source or use language-specific packages. The following\ninstructions get you started.\n\nAfter you've finished installing and setting up Tink, continue with the [Next\nSteps](#next_steps) at the end of this page. \n\n### C++\n\n[Set up Tink C++ and extensions](/tink/setup/cc)\n\n### Go\n\n[Set up Tink Go and extensions](/tink/setup/go)\n\n### Java\n\n[Set up Tink Java and extensions](/tink/setup/java)\n\n### ObjC\n\n| **Note:** These instructions are for the newest release, [Tink\n| 1.7.0](https://github.com/google/tink/releases/).\n\nSee the [HOWTO on GitHub](https://github.com/google/tink/blob/v1.7.0/docs/OBJC-HOWTO.md)\n\n### Python\n\n\nThe Tink Python library, [tink-py](https://github.com/tink-crypto/tink-py),\nsupports Python 3.9 or newer on macOS (x86-64 and ARM64), Linux (x86-64 and\nARM64) and Windows (x86-64). The latest release is [1.12.0](https://github.com/tink-crypto/tink-py/releases/tag/v1.12.0). It can be installed locally using\n[Pip](https://pypi.org/project/pip/) or used with\n[Bazel](http://bazel.build).\n\nTink Python provides integrations with [AWS\nKMS](https://aws.amazon.com/kms/), [Google Cloud\nKMS](https://cloud.google.com/kms/) and [HashiCorp\nVault](https://www.vaultproject.io/).\n\nPip\n---\n\nYou can install the Tink Python binary release for your system from\n[PyPI](https://pypi.org/project/tink/), by running the following command: \n\n pip3 install tink==1.12.0\n # Core Tink + Google Cloud KMS extension.\n pip3 install tink[gcpkms]==1.12.0\n # Core Tink + AWS KMS extension.\n pip3 install tink[awskms]==1.12.0\n # Core Tink + HashiCorp Vault KMS extension.\n pip3 install tink[hcvault]==1.12.0\n # Core Tink + all the KMS extensions.\n pip3 install tink[all]==1.12.0\n\nIf a binary package is not published for your environment, `pip`\nautomatically resorts to building the project using the source distribution\npublished to PyPI. If this is the case, you need [Bazel](http://bazel.build)\nor [Bazelisk](https://github.com/bazelbuild/bazelisk) and the [protobuf\ncompiler](https://github.com/protocolbuffers/protobuf#protocol-compiler-installation) installed to successfully build the project.\n\nBazel\n-----\n\nFor Tink Python 1.12 and later, [Bazel](http://bazel.build) users need to\nuse `MODULE.bazel`: \n\n bazel_dep(name = \"tink_py\")\n\n archive_override(\n module_name = \"tink_py\",\n urls = [\"https://github.com/tink-crypto/tink-py/releases/download/v1.12.0/tink-py-1.12.0.zip\"],\n strip_prefix = \"tink-py-1.12.0\",\n sha256 = \"5968d0ba84f1fc958f685cfdfc667bfb1d8414a22eaa6f502b290a23af2aba43\",\n )\n\nWe don't publish Tink Python in the Bazel Central Registry at the moment.\n\nNext steps\n----------\n\nOnce you've finished setting up Tink, continue with the standard Tink usage\nsteps:\n\n- [Choose a primitive](/tink/choose-primitive) -- Decide which primitive to use based on your use case\n- [Manage keys](/tink/key-management-overview) -- Protect your keys with your external KMS, generate keysets, and rotate your keys"]]
