Method: cryptoKeyVersions.getPublicKey

Full name: projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.getPublicKey

Returns the public key for the given CryptoKeyVersion. The CryptoKey.purpose must be ASYMMETRIC_SIGN or ASYMMETRIC_DECRYPT.

HTTP request


The URL uses gRPC Transcoding syntax.

Path parameters



Required. The name of the CryptoKeyVersion public key to get.

Authorization requires the following Google IAM permission on the specified resource name:

  • cloudkms.cryptoKeyVersions.viewPublicKey

Request body

The request body must be empty.

Response body

If successful, the response body contains data with the following structure:

The public key for a given CryptoKeyVersion. Obtained via cryptoKeyVersions.getPublicKey.

JSON representation
  "pem": string,
  "algorithm": enum (CryptoKeyVersionAlgorithm)


The public key, encoded in PEM format. For more information, see the RFC 7468 sections for General Considerations and Textual Encoding of Subject Public Key Info.


enum (CryptoKeyVersionAlgorithm)

The Algorithm associated with this key.

Authorization Scopes

Requires one of the following OAuth scopes:


For more information, see the Authentication Overview.

Try it!

Was this page helpful? Let us know how we did:

Send feedback about...

Cloud KMS Documentation