@AccessesPartialKey
  private static AesCmacPrfKey newKey(
      AesCmacPrfParameters parameters, @Nullable Integer idRequirement)
      throws GeneralSecurityException {
    if (idRequirement != null) {
      throw new GeneralSecurityException("Id Requirement is not supported for AES CMAC PRF keys");
    }
    validate(parameters);
    return AesCmacPrfKey.create(parameters, SecretBytes.randomBytes(parameters.getKeySizeBytes()));
  }
This key manager generates new {@code AesCmacKeyPrf} keys and produces new instances of {@code
AesCmacPrf}.
java_src/src/main/java/com/google/crypto/tink/prf/AesCmacPrfKeyManager.java