Class KeyOperationAttestation (2.20.0)

KeyOperationAttestation(mapping=None, *, ignore_unknown_fields=False, **kwargs)

Contains an HSM-generated attestation about a key operation. For more information, see Verifying attestations.

Attributes

NameDescription
format google.cloud.kms_v1.types.KeyOperationAttestation.AttestationFormat
Output only. The format of the attestation data.
content bytes
Output only. The attestation data provided by the HSM when the key operation was performed.
cert_chains google.cloud.kms_v1.types.KeyOperationAttestation.CertificateChains
Output only. The certificate chains needed to validate the attestation

Classes

AttestationFormat

AttestationFormat(value)

Attestation formats provided by the HSM.

Values: ATTESTATION_FORMAT_UNSPECIFIED (0): Not specified. CAVIUM_V1_COMPRESSED (3): Cavium HSM attestation compressed with gzip. Note that this format is defined by Cavium and subject to change at any time.

    See
    https://www.marvell.com/products/security-solutions/nitrox-hs-adapters/software-key-attestation.html.
CAVIUM_V2_COMPRESSED (4):
    Cavium HSM attestation V2 compressed with
    gzip. This is a new format introduced in
    Cavium's version 3.2-08.

CertificateChains

CertificateChains(mapping=None, *, ignore_unknown_fields=False, **kwargs)

Certificate chains needed to verify the attestation. Certificates in chains are PEM-encoded and are ordered based on https://tools.ietf.org/html/rfc5246#section-7.4.2.