Reference documentation and code samples for the KMS Inventory V1 API module Google::Cloud::Kms::V1::ImportJob::ImportMethod.
ImportMethod describes the key wrapping method chosen for this ImportJob.
Constants
IMPORT_METHOD_UNSPECIFIED
value: 0
Not specified.
RSA_OAEP_3072_SHA1_AES_256
value: 1
This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping
scheme defined in the PKCS #11 standard. In summary, this involves
wrapping the raw key with an ephemeral AES key, and wrapping the
ephemeral AES key with a 3072 bit RSA key. For more details, see
RSA AES key wrap
mechanism.
RSA_OAEP_4096_SHA1_AES_256
value: 2
This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping
scheme defined in the PKCS #11 standard. In summary, this involves
wrapping the raw key with an ephemeral AES key, and wrapping the
ephemeral AES key with a 4096 bit RSA key. For more details, see
RSA AES key wrap
mechanism.
RSA_OAEP_3072_SHA256_AES_256
value: 3
This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping
scheme defined in the PKCS #11 standard. In summary, this involves
wrapping the raw key with an ephemeral AES key, and wrapping the
ephemeral AES key with a 3072 bit RSA key. For more details, see
RSA AES key wrap
mechanism.
RSA_OAEP_4096_SHA256_AES_256
value: 4
This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping
scheme defined in the PKCS #11 standard. In summary, this involves
wrapping the raw key with an ephemeral AES key, and wrapping the
ephemeral AES key with a 4096 bit RSA key. For more details, see
RSA AES key wrap
mechanism.
RSA_OAEP_3072_SHA256
value: 5
This ImportMethod represents RSAES-OAEP with a 3072 bit RSA key. The
key material to be imported is wrapped directly with the RSA key. Due
to technical limitations of RSA wrapping, this method cannot be used to
wrap RSA keys for import.
RSA_OAEP_4096_SHA256
value: 6
This ImportMethod represents RSAES-OAEP with a 4096 bit RSA key. The
key material to be imported is wrapped directly with the RSA key. Due
to technical limitations of RSA wrapping, this method cannot be used to
wrap RSA keys for import.