Module: Google::Cloud::Kms::V1::CryptoKey::CryptoKeyPurpose

Defined in:

proto_docs/google/cloud/kms/v1/resources.rb

Overview

CryptoKeyPurpose describes the cryptographic capabilities of a CryptoKey. A given key can only be used for the operations allowed by its purpose. For more information, see Key purposes.

Constant Summary

CRYPTO_KEY_PURPOSE_UNSPECIFIED =

Not specified.

0

ENCRYPT_DECRYPT =

CryptoKeys with this purpose may be used with [Encrypt][google.cloud.kms.v1.KeyManagementService.Encrypt] and [Decrypt][google.cloud.kms.v1.KeyManagementService.Decrypt].

1

ASYMMETRIC_SIGN =

CryptoKeys with this purpose may be used with [AsymmetricSign][google.cloud.kms.v1.KeyManagementService.AsymmetricSign] and [GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey].

5

ASYMMETRIC_DECRYPT =

CryptoKeys with this purpose may be used with [AsymmetricDecrypt][google.cloud.kms.v1.KeyManagementService.AsymmetricDecrypt] and [GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey].

6

RAW_ENCRYPT_DECRYPT =

CryptoKeys with this purpose may be used with [RawEncrypt][google.cloud.kms.v1.KeyManagementService.RawEncrypt] and [RawDecrypt][google.cloud.kms.v1.KeyManagementService.RawDecrypt]. This purpose is meant to be used for interoperable symmetric encryption and does not support automatic CryptoKey rotation.

7

MAC =

CryptoKeys with this purpose may be used with [MacSign][google.cloud.kms.v1.KeyManagementService.MacSign].

9