Schemas

ID of the data encryption key. (UUID format)

Symmetric encryption algorithm of the data encryption key (AES-256-GCM).

Data encryption key ciphertext. Your data encryption key's ciphertext can be stored safely. It can only be decrypted through the keys you create in Key Manager, using the relevant key ID.

Data encryption key plaintext. (Optional) Your data encryption key's plaintext allows you to use the key immediately upon creation. It must neither be stored or shared.

Data encryption key creation date. (RFC 3339 format)

ID of the key used for decryption. (UUID format)

Key's decrypted data.

(Optional) Data encrypted with the latest key rotation. If the data was already encrypted with the latest key rotation, no output will be returned in the response object.

ID of the key used for encryption. (UUID format)

Key's encrypted data.

ID of the key. (UUID format)

ID of the Project containing the key. (UUID format)

Name of the key.

Key usage. See the Key.Usage enum for a description of possible values.

Key state. See the Key.State enum for a description of possible values.

Number of key rotations. The rotation count tracks the number of times the key has been rotated.

Key creation date. (RFC 3339 format)

Key last modification date. (RFC 3339 format)

Returns true if key protection is applied to the key.

Returns true if the key is locked.

Description of the key.

List of the key's tags.

Key last rotation date. (RFC 3339 format)

Key rotation policy.

Key origin. Refer to the Key.Origin enum for a description of values.

Returns the time at which deletion was requested. (RFC 3339 format)

Region where the key is stored.

Returns a list of algorithms matching the requested criteria.

Single page of keys matching the requested criteria.

Total count of keys matching the requested criteria.

ID of the key used to generate the signature. (UUID format)

The message signature.

ID of the key used for verification. (UUID format)

Defines whether the signature is valid. Returns true if the signature is valid for the digest and key, and false otherwise.