private void validateKey(AesGcmHkdfStreamingKey key) throws GeneralSecurityException {
    Validators.validateAesKeySize(key.getParams().getDerivedKeySize());
    if (key.getParams().getHkdfHashType() != HashType.SHA1
        && key.getParams().getHkdfHashType() != HashType.SHA256
        && key.getParams().getHkdfHashType() != HashType.SHA512) {
      throw new GeneralSecurityException("Invalid HKDF hash type");
    }
    if (key.getParams().getCiphertextSegmentSize()
        < key.getParams().getDerivedKeySize() + NONCE_PREFIX_IN_BYTES + TAG_SIZE_IN_BYTES + 2) {
      throw new GeneralSecurityException(
          "ciphertext_segment_size must be at least (derived_key_size + NONCE_PREFIX_IN_BYTES + "
              + "TAG_SIZE_IN_BYTES + 2)");
    }
  }
Type url that this manager does support.
java_src/src/main/java/com/google/crypto/tink/streamingaead/internal/LegacyAesGcmHkdfStreamingTestKeyManager.java