Concepts

• Object hierarchy

  Learn about different resource types in Cloud KMS including key rings, keys, and key versions.

• Key purposes and algorithms

  Learn about the key purposes and supported algorithms in Cloud KMS.

• Key states

  Learn about the different states that can apply to keys stored in Cloud KMS.

• Symmetric key rotation

  Learn how symmetric key rotation works in Cloud KMS.

• Asymmetric key rotation (Beta)

  Learn how asymmetric key rotation works in Cloud KMS.

• Separation of duties

  Learn how to implement best practice separation of duties for Cloud KMS.

• Secret management

  Learn about managing secrets with Cloud KMS.

• Additional authenticated data

  Learn about additional authenticated data and how to use it when encrypting/decrypting.

• Envelope encryption

  Learn about multi-level encryption using Cloud KMS.

• Asymmetric encryption (Beta)

  Learn about asymmetric encryption using Cloud KMS.

• Digital signatures (Beta)

  Learn about digital signatures using Cloud KMS.

• Resource consistency

  Learn about the impact of consistency when Cloud KMS resources are created or modified.

• Locations

  Learn about the locations available for storing your Cloud KMS resources.