Cloud KMS V1 Client - Class ImportMethod (2.11.0)

Reference documentation and code samples for the Cloud KMS V1 Client class ImportMethod.

ImportMethod describes the key wrapping method chosen for this ImportJob.

Protobuf type google.cloud.kms.v1.ImportJob.ImportMethod

Namespace

Google \ Cloud \ Kms \ V1 \ ImportJob

Methods

static::name

Parameter
Name Description
value mixed

static::value

Parameter
Name Description
name mixed

Constants

IMPORT_METHOD_UNSPECIFIED

Value: 0

Not specified.

Generated from protobuf enum IMPORT_METHOD_UNSPECIFIED = 0;

RSA_OAEP_3072_SHA1_AES_256

Value: 1

This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. In summary, this involves wrapping the raw key with an ephemeral AES key, and wrapping the ephemeral AES key with a 3072 bit RSA key. For more details, see RSA AES key wrap mechanism.

Generated from protobuf enum RSA_OAEP_3072_SHA1_AES_256 = 1;

RSA_OAEP_4096_SHA1_AES_256

Value: 2

This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. In summary, this involves wrapping the raw key with an ephemeral AES key, and wrapping the ephemeral AES key with a 4096 bit RSA key. For more details, see RSA AES key wrap mechanism.

Generated from protobuf enum RSA_OAEP_4096_SHA1_AES_256 = 2;

RSA_OAEP_3072_SHA256_AES_256

Value: 3

This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. In summary, this involves wrapping the raw key with an ephemeral AES key, and wrapping the ephemeral AES key with a 3072 bit RSA key. For more details, see RSA AES key wrap mechanism.

Generated from protobuf enum RSA_OAEP_3072_SHA256_AES_256 = 3;

RSA_OAEP_4096_SHA256_AES_256

Value: 4

This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. In summary, this involves wrapping the raw key with an ephemeral AES key, and wrapping the ephemeral AES key with a 4096 bit RSA key. For more details, see RSA AES key wrap mechanism.

Generated from protobuf enum RSA_OAEP_4096_SHA256_AES_256 = 4;

RSA_OAEP_3072_SHA256

Value: 5

This ImportMethod represents RSAES-OAEP with a 3072 bit RSA key. The key material to be imported is wrapped directly with the RSA key. Due to technical limitations of RSA wrapping, this method cannot be used to wrap RSA keys for import.

Generated from protobuf enum RSA_OAEP_3072_SHA256 = 5;

RSA_OAEP_4096_SHA256

Value: 6

This ImportMethod represents RSAES-OAEP with a 4096 bit RSA key. The key material to be imported is wrapped directly with the RSA key. Due to technical limitations of RSA wrapping, this method cannot be used to wrap RSA keys for import.

Generated from protobuf enum RSA_OAEP_4096_SHA256 = 6;

HPKE_KEM_ML_KEM_768_HKDF_SHA256_AES_256_GCM

Value: 8

Represents the Hybrid Public Key Encryption (HPKE) Scheme originally defined in RFC 9180. It involves wrapping the raw key with an ephemeral AES key, derived with HKDF-SHA256 from an encryption context, that is, in turn obtained from the receiver’s public key with the help of the ML-KEM-768 KEM. For more details, see the ML-KEM HPKE standard.

Generated from protobuf enum HPKE_KEM_ML_KEM_768_HKDF_SHA256_AES_256_GCM = 8;

HPKE_KEM_ML_KEM_1024_HKDF_SHA256_AES_256_GCM

Value: 9

Represents the Hybrid Public Key Encryption (HPKE) Scheme originally defined in RFC 9180. It involves wrapping the raw key with an ephemeral AES key, derived with HKDF-SHA256 from an encryption context, that is, in turn obtained from the receiver’s public key with the help of the ML-KEM-1024 KEM. For more details, see the ML-KEM HPKE standard.

Generated from protobuf enum HPKE_KEM_ML_KEM_1024_HKDF_SHA256_AES_256_GCM = 9;

HPKE_KEM_XWING_HKDF_SHA256_AES_256_GCM

Value: 10

Represents the Hybrid Public Key Encryption (HPKE) Scheme originally defined in RFC 9180. It involves wrapping the raw key with an ephemeral AES key, derived with HKDF-SHA256 from an encryption context, that is, in turn obtained from the receiver’s public key with the help of the X-Wing hybrid KEM. For more details, see the X-Wing standard.

Generated from protobuf enum HPKE_KEM_XWING_HKDF_SHA256_AES_256_GCM = 10;