Add cross-language tests with KMS Envelope AEAD with Tink prefix.

In tink-crypto/tink-go#10 it
was mentioned that KMS Envelope Keys can and are used with a TINK prefix.

Add this test to make sure that all languages that currently support this are consistent. At the moment it does not work in Java.

PiperOrigin-RevId: 615699070
Change-Id: I0ecdb1e356688db6c06a760a42104aee5934ee16

Author: juergw

cross_language/cross_language/BUILD.bazel

@@ -90,6 +90,7 @@ py_test(
         requirement("absl-py"),
         "@tink_py//tink:tink_python",
         "@tink_py//tink/aead",
+        "@tink_py//tink/proto:kms_envelope_py_pb2",
         "@tink_py//tink/proto:tink_py_pb2",
         "@tink_py//tink/testing:keyset_builder",
     ],
@@ -315,8 +316,8 @@ py_library(
     name = "test_key",
     srcs = ["test_key.py"],
     deps = [
-        "@tink_py//tink/proto:tink_py_pb2",
         "//cross_language/tink_config",
+        "@tink_py//tink/proto:tink_py_pb2",
     ],
 )
 

cross_language/cross_language/aead_test.py

@@ -24,6 +24,7 @@
 import tink
 from tink import aead
 
+from tink.proto import kms_envelope_pb2
 from tink.proto import tink_pb2
 from tink.testing import keyset_builder
 from cross_language import tink_config
@@ -123,6 +124,20 @@ def tearDownModule():
         ),
         utilities.SUPPORTED_LANGUAGES_BY_TEMPLATE_NAME['XCHACHA20_POLY1305'],
     ),
+    '_FAKE_KMS_ENVELOPE_AEAD_WITH_AES128_GCM_WITH_TINK_PREFIX': (
+        tink_pb2.KeyTemplate(
+            value=kms_envelope_pb2.KmsEnvelopeAeadKeyFormat(
+                kek_uri=_FAKE_KMS_KEY_URI,
+                dek_template=aead.aead_key_templates.AES128_GCM,
+            ).SerializeToString(),
+            type_url=(
+                'type.googleapis.com/google.crypto.tink.KmsEnvelopeAeadKey'
+            ),
+            output_prefix_type=tink_pb2.TINK,
+        ),
+        # TODO(b/329404375): This currently fails in Java.
+        ['cc', 'go', 'python'],
+    ),
 }