google_api_cloud_kms v0.25.1 GoogleApi.CloudKMS.V1.Model.ImportCryptoKeyVersionRequest View Source

Request message for KeyManagementService.ImportCryptoKeyVersion.

Attributes

  • algorithm (type: String.t, default: nil) - Required. The algorithm of the key being imported. This does not need to match the version_template of the CryptoKey this version imports into.
  • importJob (type: String.t, default: nil) - Required. The name of the ImportJob that was used to wrap this key material.
  • rsaAesWrappedKey (type: String.t, default: nil) - Wrapped key material produced with RSA_OAEP_3072_SHA1_AES_256 or RSA_OAEP_4096_SHA1_AES_256.

    This field contains the concatenation of two wrapped keys: <ol> <li>An ephemeral AES-256 wrapping key wrapped with the

      public_key using RSAES-OAEP with SHA-1,
      MGF1 with SHA-1, and an empty label.

    </li> <li>The key to be imported, wrapped with the ephemeral AES-256 key

      using AES-KWP (RFC 5649).

    </li> </ol>

    If importing symmetric key material, it is expected that the unwrapped key contains plain bytes. If importing asymmetric key material, it is expected that the unwrapped key is in PKCS#8-encoded DER format (the PrivateKeyInfo structure from RFC 5208).

    This format is the same as the format produced by PKCS#11 mechanism CKM_RSA_AES_KEY_WRAP.

Link to this section Summary

Functions

Unwrap a decoded JSON object into its complex fields.

Link to this section Types

Specs

t() :: %GoogleApi.CloudKMS.V1.Model.ImportCryptoKeyVersionRequest{
  algorithm: String.t(),
  importJob: String.t(),
  rsaAesWrappedKey: String.t()
}

Link to this section Functions

Specs

decode(struct(), keyword()) :: struct()

Unwrap a decoded JSON object into its complex fields.