...
In Tink, operations are isolated in a distinguished interface grouped by the type of crypto used. There are interfaces for deterministic aead (payload re encryptions yield the same output, this implementation is not recommend), aead (direct mode, no key wrapping), hybrid aead (with key wrapping including key derivation defined as ECDH-ES), signatures and MAC hashing. For the purpose of Aries Agents, only AEAD, Signer and Verifier primitives will be used. The implementation of 1PU will require additional work to see if a new Tink primitive is required or can be implemented separately in the Crypto plugin.