google-cloud-kms-inventory-v1 0.21.0 → 0.23.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c7d340468d9d81eff73839b072c6e72b7a06caf2622001646897ab2754786fd4
-  data.tar.gz: 0727a382cef447f97527cb4b8453347dd05f42f919c7ae95cd3744ee51ea4734
+  metadata.gz: a58babb840f453d00c1f034bb2acdf71e0b28f5ecc20fcdf79c08cd7d015f855
+  data.tar.gz: 100f2d9b901dd62a0c0ed8701f0c60b7ff429371ab9e8fc272fccd52a47c9ebf
 SHA512:
-  metadata.gz: 169801a1e8ee84cb6376c3095d3fd44447c1ffd790cf2c77bf37d95f80dbd04e09db24179aa318927ab622e02fac2af0780bb98d8115f4d876d07bb4718c39c3
-  data.tar.gz: d1ab0e469c344126c4dc9ac32539ff0075006c7dc46496b493f5f7f688e2fd00c7b71b5c152be4228fe0349c8d4db158b330af115abe19106d2fb1c35b4d6cc3
+  metadata.gz: c8627408b9e2ac5794bbe2867bba41145e4a6c596d1e5aa9f1c0f4a6d282c069e74bfba72f4f9deb4f35880fb713ab93fccff9cf7d8a82f0202374d7e3f89f12
+  data.tar.gz: 9e70da234a6f2d683d0d0db95bcae01cc7b46731779dc2c77f06c8d0368697270ad0cdcb8e5f03d5ac455fcb18b587beb7cde9aff87f1a61140818919ccf48a4

data/lib/google/cloud/kms/inventory/v1/version.rb

@@ -22,7 +22,7 @@ module Google
     module Kms
       module Inventory
         module V1
-          VERSION = "0.21.0"
+          VERSION = "0.23.0"
         end
       end
     end

data/proto_docs/google/cloud/kms/v1/resources.rb

@@ -213,6 +213,10 @@ module Google
             # [GetPublicKey][google.cloud.kms.v1.KeyManagementService.GetPublicKey]
             # and [Decapsulate][google.cloud.kms.v1.KeyManagementService.Decapsulate].
             KEY_ENCAPSULATION = 10
+
+            # {::Google::Cloud::Kms::V1::CryptoKey CryptoKeys} with this purpose may be used
+            # for AES key
+            AES_WRAPPING = 11
           end
         end
 
@@ -397,6 +401,24 @@ module Google
         #     Output only. Whether or not this key version is eligible for reimport, by
         #     being specified as a target in
         #     [ImportCryptoKeyVersionRequest.crypto_key_version][google.cloud.kms.v1.ImportCryptoKeyVersionRequest.crypto_key_version].
+        # @!attribute [rw] trusted_wrapping_enabled
+        #   @return [::Boolean]
+        #     Immutable. Field indicating that the key may be wrapped by a trusted key.
+        #     This field can be set for all key purposes except
+        #     {::Google::Cloud::Kms::V1::CryptoKey::CryptoKeyPurpose::ENCRYPT_DECRYPT ENCRYPT_DECRYPT},
+        #     and is only valid for keys with protection level
+        #     {::Google::Cloud::Kms::V1::ProtectionLevel::HSM_SINGLE_TENANT HSM_SINGLE_TENANT}.
+        #     This field can only be set at creation or import time via
+        #     [CreateCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.CreateCryptoKeyVersion],
+        #     or
+        #     [ImportCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.ImportCryptoKeyVersion].
+        # @!attribute [r] hsm_trusted
+        #   @return [::Boolean]
+        #     Output only. Field indicating that the key wrapping key is trusted.
+        #     This field is only valid for key purpose
+        #     [AES_256_WRAPPING][CryptoKey.CryptoKeyPurpose.AES_256_WRAPPING], and
+        #     protection level
+        #     {::Google::Cloud::Kms::V1::ProtectionLevel::HSM_SINGLE_TENANT HSM_SINGLE_TENANT}.
         class CryptoKeyVersion
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -608,6 +630,10 @@ module Google
             # security level 5. Randomized version supporting externally-computed
             # message representatives.
             PQ_SIGN_ML_DSA_87_EXTERNAL_MU = 71
+
+            # AES key wrap with zero padding algorithm (RFC 5649). Can only be used
+            # by keys with purpose AES_WRAPPING.
+            AES_256_KWP = 73
           end
 
           # The state of a {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion},
@@ -895,6 +921,13 @@ module Google
         #     Output only. The public key with which to wrap key material prior to
         #     import. Only returned if {::Google::Cloud::Kms::V1::ImportJob#state state} is
         #     {::Google::Cloud::Kms::V1::ImportJob::ImportJobState::ACTIVE ACTIVE}.
+        # @!attribute [r] public_key_format
+        #   @return [::Google::Cloud::Kms::V1::PublicKey::PublicKeyFormat]
+        #     Output only. Specifies the
+        #     {::Google::Cloud::Kms::V1::ImportJob::WrappingPublicKey WrappingPublicKey} format
+        #     provided by the customer in the
+        #     [KeyManagementService.GetImportJob][google.cloud.kms.v1.KeyManagementService.GetImportJob]
+        #     request.
         # @!attribute [r] attestation
         #   @return [::Google::Cloud::Kms::V1::KeyOperationAttestation]
         #     Output only. Statement that was generated and signed by the key creator
@@ -926,6 +959,19 @@ module Google
           #     Considerations](https://tools.ietf.org/html/rfc7468#section-2) and
           #     [Textual Encoding of Subject Public Key Info]
           #     (https://tools.ietf.org/html/rfc7468#section-13).
+          #     This field gets populated by default for RSA-based import methods, if no
+          #     public_key_format is specified in the request.
+          #     If you want to retrieve the wrapping key of an
+          #     {::Google::Cloud::Kms::V1::ImportJob ImportJob} in some other format, use
+          #     [KeyManagementService.GetImportJob][google.cloud.kms.v1.KeyManagementService.GetImportJob]
+          #     and set the public_key_format to the desired public key format.
+          # @!attribute [r] data
+          #   @return [::String]
+          #     Output only. Contains the public key, formatted according to the
+          #     {::Google::Cloud::Kms::V1::PublicKey::PublicKeyFormat PublicKey.PublicKeyFormat}
+          #     specified in the
+          #     [KeyManagementService.GetImportJob][google.cloud.kms.v1.KeyManagementService.GetImportJob]
+          #     request.
           class WrappingPublicKey
             include ::Google::Protobuf::MessageExts
             extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -981,6 +1027,33 @@ module Google
             # to technical limitations of RSA wrapping, this method cannot be used to
             # wrap RSA keys for import.
             RSA_OAEP_4096_SHA256 = 6
+
+            # Represents the Hybrid Public Key Encryption (HPKE) Scheme originally
+            # defined in [RFC 9180](https://www.rfc-editor.org/rfc/rfc9180). It
+            # involves wrapping the raw key with an ephemeral AES key, derived with
+            # HKDF-SHA256 from an encryption context, that is, in turn obtained from
+            # the receiver’s public key with the help of the ML-KEM-768 KEM. For more
+            # details, see the [ML-KEM HPKE
+            # standard](http://datatracker.ietf.org/doc/draft-ietf-hpke-pq/01/).
+            HPKE_KEM_ML_KEM_768_HKDF_SHA256_AES_256_GCM = 8
+
+            # Represents the Hybrid Public Key Encryption (HPKE) Scheme originally
+            # defined in [RFC 9180](https://www.rfc-editor.org/rfc/rfc9180). It
+            # involves wrapping the raw key with an ephemeral AES key, derived with
+            # HKDF-SHA256 from an encryption context, that is, in turn obtained from
+            # the receiver’s public key with the help of the ML-KEM-1024 KEM. For more
+            # details, see the [ML-KEM HPKE
+            # standard](http://datatracker.ietf.org/doc/draft-ietf-hpke-pq/01/).
+            HPKE_KEM_ML_KEM_1024_HKDF_SHA256_AES_256_GCM = 9
+
+            # Represents the Hybrid Public Key Encryption (HPKE) Scheme originally
+            # defined in [RFC 9180](https://www.rfc-editor.org/rfc/rfc9180). It
+            # involves wrapping the raw key with an ephemeral AES key, derived with
+            # HKDF-SHA256 from an encryption context, that is, in turn obtained from
+            # the receiver’s public key with the help of the X-Wing hybrid KEM. For
+            # more details, see the [X-Wing
+            # standard](http://datatracker.ietf.org/doc/draft-connolly-cfrg-xwing-kem/09/).
+            HPKE_KEM_XWING_HKDF_SHA256_AES_256_GCM = 10
           end
 
           # The state of the {::Google::Cloud::Kms::V1::ImportJob ImportJob}, indicating if

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: google-cloud-kms-inventory-v1
 version: !ruby/object:Gem::Version
-  version: 0.21.0
+  version: 0.23.0
 platform: ruby
 authors:
 - Google LLC