google-cloud-kms-v1 0.9.0 → 0.11.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (22) hide show
  1. checksums.yaml +4 -4
  2. data/.yardopts +1 -1
  3. data/AUTHENTICATION.md +13 -31
  4. data/README.md +4 -4
  5. data/lib/google/cloud/kms/v1/ekm_service/client.rb +731 -0
  6. data/lib/google/cloud/kms/v1/ekm_service/credentials.rb +52 -0
  7. data/lib/google/cloud/kms/v1/ekm_service/paths.rb +90 -0
  8. data/lib/google/cloud/kms/v1/ekm_service.rb +53 -0
  9. data/lib/google/cloud/kms/v1/ekm_service_pb.rb +79 -0
  10. data/lib/google/cloud/kms/v1/ekm_service_services_pb.rb +57 -0
  11. data/lib/google/cloud/kms/v1/iam_policy/client.rb +60 -9
  12. data/lib/google/cloud/kms/v1/key_management_service/client.rb +975 -340
  13. data/lib/google/cloud/kms/v1/resources_pb.rb +13 -1
  14. data/lib/google/cloud/kms/v1/service_pb.rb +3 -0
  15. data/lib/google/cloud/kms/v1/service_services_pb.rb +84 -48
  16. data/lib/google/cloud/kms/v1/version.rb +1 -1
  17. data/lib/google/cloud/kms/v1.rb +2 -1
  18. data/proto_docs/google/api/resource.rb +10 -71
  19. data/proto_docs/google/cloud/kms/v1/ekm_service.rb +226 -0
  20. data/proto_docs/google/cloud/kms/v1/resources.rb +308 -160
  21. data/proto_docs/google/cloud/kms/v1/service.rb +661 -390
  22. metadata +10 -3
data/proto_docs/google/cloud/kms/v1/service.rb CHANGED
@@ -21,17 +21,22 @@ module Google
21
21
  module Cloud
22
22
  module Kms
23
23
  module V1
24
- # Request message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#list_key_rings KeyManagementService.ListKeyRings}.
24
+ # Request message for
25
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#list_key_rings KeyManagementService.ListKeyRings}.
25
26
  # @!attribute [rw] parent
26
27
  # @return [::String]
27
28
  # Required. The resource name of the location associated with the
28
- # {::Google::Cloud::Kms::V1::KeyRing KeyRings}, in the format `projects/*/locations/*`.
29
+ # {::Google::Cloud::Kms::V1::KeyRing KeyRings}, in the format
30
+ # `projects/*/locations/*`.
29
31
  # @!attribute [rw] page_size
30
32
  # @return [::Integer]
31
- # Optional. Optional limit on the number of {::Google::Cloud::Kms::V1::KeyRing KeyRings} to include in the
32
- # response. Further {::Google::Cloud::Kms::V1::KeyRing KeyRings} can subsequently be obtained by
33
- # including the {::Google::Cloud::Kms::V1::ListKeyRingsResponse#next_page_token ListKeyRingsResponse.next_page_token} in a subsequent
34
- # request. If unspecified, the server will pick an appropriate default.
33
+ # Optional. Optional limit on the number of
34
+ # {::Google::Cloud::Kms::V1::KeyRing KeyRings} to include in the response. Further
35
+ # {::Google::Cloud::Kms::V1::KeyRing KeyRings} can subsequently be obtained by
36
+ # including the
37
+ # {::Google::Cloud::Kms::V1::ListKeyRingsResponse#next_page_token ListKeyRingsResponse.next_page_token}
38
+ # in a subsequent request. If unspecified, the server will pick an
39
+ # appropriate default.
35
40
  # @!attribute [rw] page_token
36
41
  # @return [::String]
37
42
  # Optional. Optional pagination token, returned earlier via
@@ -53,17 +58,21 @@ module Google
53
58
  extend ::Google::Protobuf::MessageExts::ClassMethods
54
59
  end
55
60
 
56
- # Request message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#list_crypto_keys KeyManagementService.ListCryptoKeys}.
61
+ # Request message for
62
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#list_crypto_keys KeyManagementService.ListCryptoKeys}.
57
63
  # @!attribute [rw] parent
58
64
  # @return [::String]
59
- # Required. The resource name of the {::Google::Cloud::Kms::V1::KeyRing KeyRing} to list, in the format
60
- # `projects/*/locations/*/keyRings/*`.
65
+ # Required. The resource name of the {::Google::Cloud::Kms::V1::KeyRing KeyRing}
66
+ # to list, in the format `projects/*/locations/*/keyRings/*`.
61
67
  # @!attribute [rw] page_size
62
68
  # @return [::Integer]
63
- # Optional. Optional limit on the number of {::Google::Cloud::Kms::V1::CryptoKey CryptoKeys} to include in the
64
- # response. Further {::Google::Cloud::Kms::V1::CryptoKey CryptoKeys} can subsequently be obtained by
65
- # including the {::Google::Cloud::Kms::V1::ListCryptoKeysResponse#next_page_token ListCryptoKeysResponse.next_page_token} in a subsequent
66
- # request. If unspecified, the server will pick an appropriate default.
69
+ # Optional. Optional limit on the number of
70
+ # {::Google::Cloud::Kms::V1::CryptoKey CryptoKeys} to include in the response.
71
+ # Further {::Google::Cloud::Kms::V1::CryptoKey CryptoKeys} can subsequently be
72
+ # obtained by including the
73
+ # {::Google::Cloud::Kms::V1::ListCryptoKeysResponse#next_page_token ListCryptoKeysResponse.next_page_token}
74
+ # in a subsequent request. If unspecified, the server will pick an
75
+ # appropriate default.
67
76
  # @!attribute [rw] page_token
68
77
  # @return [::String]
69
78
  # Optional. Optional pagination token, returned earlier via
@@ -88,18 +97,22 @@ module Google
88
97
  extend ::Google::Protobuf::MessageExts::ClassMethods
89
98
  end
90
99
 
91
- # Request message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#list_crypto_key_versions KeyManagementService.ListCryptoKeyVersions}.
100
+ # Request message for
101
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#list_crypto_key_versions KeyManagementService.ListCryptoKeyVersions}.
92
102
  # @!attribute [rw] parent
93
103
  # @return [::String]
94
- # Required. The resource name of the {::Google::Cloud::Kms::V1::CryptoKey CryptoKey} to list, in the format
104
+ # Required. The resource name of the
105
+ # {::Google::Cloud::Kms::V1::CryptoKey CryptoKey} to list, in the format
95
106
  # `projects/*/locations/*/keyRings/*/cryptoKeys/*`.
96
107
  # @!attribute [rw] page_size
97
108
  # @return [::Integer]
98
- # Optional. Optional limit on the number of {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersions} to
99
- # include in the response. Further {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersions} can
100
- # subsequently be obtained by including the
101
- # {::Google::Cloud::Kms::V1::ListCryptoKeyVersionsResponse#next_page_token ListCryptoKeyVersionsResponse.next_page_token} in a subsequent request.
102
- # If unspecified, the server will pick an appropriate default.
109
+ # Optional. Optional limit on the number of
110
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersions} to include in the
111
+ # response. Further {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersions}
112
+ # can subsequently be obtained by including the
113
+ # {::Google::Cloud::Kms::V1::ListCryptoKeyVersionsResponse#next_page_token ListCryptoKeyVersionsResponse.next_page_token}
114
+ # in a subsequent request. If unspecified, the server will pick an
115
+ # appropriate default.
103
116
  # @!attribute [rw] page_token
104
117
  # @return [::String]
105
118
  # Optional. Optional pagination token, returned earlier via
@@ -124,17 +137,21 @@ module Google
124
137
  extend ::Google::Protobuf::MessageExts::ClassMethods
125
138
  end
126
139
 
127
- # Request message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#list_import_jobs KeyManagementService.ListImportJobs}.
140
+ # Request message for
141
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#list_import_jobs KeyManagementService.ListImportJobs}.
128
142
  # @!attribute [rw] parent
129
143
  # @return [::String]
130
- # Required. The resource name of the {::Google::Cloud::Kms::V1::KeyRing KeyRing} to list, in the format
131
- # `projects/*/locations/*/keyRings/*`.
144
+ # Required. The resource name of the {::Google::Cloud::Kms::V1::KeyRing KeyRing}
145
+ # to list, in the format `projects/*/locations/*/keyRings/*`.
132
146
  # @!attribute [rw] page_size
133
147
  # @return [::Integer]
134
- # Optional. Optional limit on the number of {::Google::Cloud::Kms::V1::ImportJob ImportJobs} to include in the
135
- # response. Further {::Google::Cloud::Kms::V1::ImportJob ImportJobs} can subsequently be obtained by
136
- # including the {::Google::Cloud::Kms::V1::ListImportJobsResponse#next_page_token ListImportJobsResponse.next_page_token} in a subsequent
137
- # request. If unspecified, the server will pick an appropriate default.
148
+ # Optional. Optional limit on the number of
149
+ # {::Google::Cloud::Kms::V1::ImportJob ImportJobs} to include in the response.
150
+ # Further {::Google::Cloud::Kms::V1::ImportJob ImportJobs} can subsequently be
151
+ # obtained by including the
152
+ # {::Google::Cloud::Kms::V1::ListImportJobsResponse#next_page_token ListImportJobsResponse.next_page_token}
153
+ # in a subsequent request. If unspecified, the server will pick an
154
+ # appropriate default.
138
155
  # @!attribute [rw] page_token
139
156
  # @return [::String]
140
157
  # Optional. Optional pagination token, returned earlier via
@@ -156,152 +173,180 @@ module Google
156
173
  extend ::Google::Protobuf::MessageExts::ClassMethods
157
174
  end
158
175
 
159
- # Response message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#list_key_rings KeyManagementService.ListKeyRings}.
176
+ # Response message for
177
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#list_key_rings KeyManagementService.ListKeyRings}.
160
178
  # @!attribute [rw] key_rings
161
179
  # @return [::Array<::Google::Cloud::Kms::V1::KeyRing>]
162
180
  # The list of {::Google::Cloud::Kms::V1::KeyRing KeyRings}.
163
181
  # @!attribute [rw] next_page_token
164
182
  # @return [::String]
165
183
  # A token to retrieve next page of results. Pass this value in
166
- # {::Google::Cloud::Kms::V1::ListKeyRingsRequest#page_token ListKeyRingsRequest.page_token} to retrieve the next page of results.
184
+ # {::Google::Cloud::Kms::V1::ListKeyRingsRequest#page_token ListKeyRingsRequest.page_token}
185
+ # to retrieve the next page of results.
167
186
  # @!attribute [rw] total_size
168
187
  # @return [::Integer]
169
- # The total number of {::Google::Cloud::Kms::V1::KeyRing KeyRings} that matched the query.
188
+ # The total number of {::Google::Cloud::Kms::V1::KeyRing KeyRings} that matched
189
+ # the query.
170
190
  class ListKeyRingsResponse
171
191
  include ::Google::Protobuf::MessageExts
172
192
  extend ::Google::Protobuf::MessageExts::ClassMethods
173
193
  end
174
194
 
175
- # Response message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#list_crypto_keys KeyManagementService.ListCryptoKeys}.
195
+ # Response message for
196
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#list_crypto_keys KeyManagementService.ListCryptoKeys}.
176
197
  # @!attribute [rw] crypto_keys
177
198
  # @return [::Array<::Google::Cloud::Kms::V1::CryptoKey>]
178
199
  # The list of {::Google::Cloud::Kms::V1::CryptoKey CryptoKeys}.
179
200
  # @!attribute [rw] next_page_token
180
201
  # @return [::String]
181
202
  # A token to retrieve next page of results. Pass this value in
182
- # {::Google::Cloud::Kms::V1::ListCryptoKeysRequest#page_token ListCryptoKeysRequest.page_token} to retrieve the next page of results.
203
+ # {::Google::Cloud::Kms::V1::ListCryptoKeysRequest#page_token ListCryptoKeysRequest.page_token}
204
+ # to retrieve the next page of results.
183
205
  # @!attribute [rw] total_size
184
206
  # @return [::Integer]
185
- # The total number of {::Google::Cloud::Kms::V1::CryptoKey CryptoKeys} that matched the query.
207
+ # The total number of {::Google::Cloud::Kms::V1::CryptoKey CryptoKeys} that
208
+ # matched the query.
186
209
  class ListCryptoKeysResponse
187
210
  include ::Google::Protobuf::MessageExts
188
211
  extend ::Google::Protobuf::MessageExts::ClassMethods
189
212
  end
190
213
 
191
- # Response message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#list_crypto_key_versions KeyManagementService.ListCryptoKeyVersions}.
214
+ # Response message for
215
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#list_crypto_key_versions KeyManagementService.ListCryptoKeyVersions}.
192
216
  # @!attribute [rw] crypto_key_versions
193
217
  # @return [::Array<::Google::Cloud::Kms::V1::CryptoKeyVersion>]
194
218
  # The list of {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersions}.
195
219
  # @!attribute [rw] next_page_token
196
220
  # @return [::String]
197
221
  # A token to retrieve next page of results. Pass this value in
198
- # {::Google::Cloud::Kms::V1::ListCryptoKeyVersionsRequest#page_token ListCryptoKeyVersionsRequest.page_token} to retrieve the next page of
199
- # results.
222
+ # {::Google::Cloud::Kms::V1::ListCryptoKeyVersionsRequest#page_token ListCryptoKeyVersionsRequest.page_token}
223
+ # to retrieve the next page of results.
200
224
  # @!attribute [rw] total_size
201
225
  # @return [::Integer]
202
- # The total number of {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersions} that matched the
226
+ # The total number of
227
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersions} that matched the
203
228
  # query.
204
229
  class ListCryptoKeyVersionsResponse
205
230
  include ::Google::Protobuf::MessageExts
206
231
  extend ::Google::Protobuf::MessageExts::ClassMethods
207
232
  end
208
233
 
209
- # Response message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#list_import_jobs KeyManagementService.ListImportJobs}.
234
+ # Response message for
235
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#list_import_jobs KeyManagementService.ListImportJobs}.
210
236
  # @!attribute [rw] import_jobs
211
237
  # @return [::Array<::Google::Cloud::Kms::V1::ImportJob>]
212
238
  # The list of {::Google::Cloud::Kms::V1::ImportJob ImportJobs}.
213
239
  # @!attribute [rw] next_page_token
214
240
  # @return [::String]
215
241
  # A token to retrieve next page of results. Pass this value in
216
- # {::Google::Cloud::Kms::V1::ListImportJobsRequest#page_token ListImportJobsRequest.page_token} to retrieve the next page of results.
242
+ # {::Google::Cloud::Kms::V1::ListImportJobsRequest#page_token ListImportJobsRequest.page_token}
243
+ # to retrieve the next page of results.
217
244
  # @!attribute [rw] total_size
218
245
  # @return [::Integer]
219
- # The total number of {::Google::Cloud::Kms::V1::ImportJob ImportJobs} that matched the query.
246
+ # The total number of {::Google::Cloud::Kms::V1::ImportJob ImportJobs} that
247
+ # matched the query.
220
248
  class ListImportJobsResponse
221
249
  include ::Google::Protobuf::MessageExts
222
250
  extend ::Google::Protobuf::MessageExts::ClassMethods
223
251
  end
224
252
 
225
- # Request message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#get_key_ring KeyManagementService.GetKeyRing}.
253
+ # Request message for
254
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#get_key_ring KeyManagementService.GetKeyRing}.
226
255
  # @!attribute [rw] name
227
256
  # @return [::String]
228
- # Required. The {::Google::Cloud::Kms::V1::KeyRing#name name} of the {::Google::Cloud::Kms::V1::KeyRing KeyRing} to get.
257
+ # Required. The {::Google::Cloud::Kms::V1::KeyRing#name name} of the
258
+ # {::Google::Cloud::Kms::V1::KeyRing KeyRing} to get.
229
259
  class GetKeyRingRequest
230
260
  include ::Google::Protobuf::MessageExts
231
261
  extend ::Google::Protobuf::MessageExts::ClassMethods
232
262
  end
233
263
 
234
- # Request message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#get_crypto_key KeyManagementService.GetCryptoKey}.
264
+ # Request message for
265
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#get_crypto_key KeyManagementService.GetCryptoKey}.
235
266
  # @!attribute [rw] name
236
267
  # @return [::String]
237
- # Required. The {::Google::Cloud::Kms::V1::CryptoKey#name name} of the {::Google::Cloud::Kms::V1::CryptoKey CryptoKey} to get.
268
+ # Required. The {::Google::Cloud::Kms::V1::CryptoKey#name name} of the
269
+ # {::Google::Cloud::Kms::V1::CryptoKey CryptoKey} to get.
238
270
  class GetCryptoKeyRequest
239
271
  include ::Google::Protobuf::MessageExts
240
272
  extend ::Google::Protobuf::MessageExts::ClassMethods
241
273
  end
242
274
 
243
- # Request message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#get_crypto_key_version KeyManagementService.GetCryptoKeyVersion}.
275
+ # Request message for
276
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#get_crypto_key_version KeyManagementService.GetCryptoKeyVersion}.
244
277
  # @!attribute [rw] name
245
278
  # @return [::String]
246
- # Required. The {::Google::Cloud::Kms::V1::CryptoKeyVersion#name name} of the {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} to get.
279
+ # Required. The {::Google::Cloud::Kms::V1::CryptoKeyVersion#name name} of the
280
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} to get.
247
281
  class GetCryptoKeyVersionRequest
248
282
  include ::Google::Protobuf::MessageExts
249
283
  extend ::Google::Protobuf::MessageExts::ClassMethods
250
284
  end
251
285
 
252
- # Request message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#get_public_key KeyManagementService.GetPublicKey}.
286
+ # Request message for
287
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#get_public_key KeyManagementService.GetPublicKey}.
253
288
  # @!attribute [rw] name
254
289
  # @return [::String]
255
- # Required. The {::Google::Cloud::Kms::V1::CryptoKeyVersion#name name} of the {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} public key to
256
- # get.
290
+ # Required. The {::Google::Cloud::Kms::V1::CryptoKeyVersion#name name} of the
291
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} public key to get.
257
292
  class GetPublicKeyRequest
258
293
  include ::Google::Protobuf::MessageExts
259
294
  extend ::Google::Protobuf::MessageExts::ClassMethods
260
295
  end
261
296
 
262
- # Request message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#get_import_job KeyManagementService.GetImportJob}.
297
+ # Request message for
298
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#get_import_job KeyManagementService.GetImportJob}.
263
299
  # @!attribute [rw] name
264
300
  # @return [::String]
265
- # Required. The {::Google::Cloud::Kms::V1::ImportJob#name name} of the {::Google::Cloud::Kms::V1::ImportJob ImportJob} to get.
301
+ # Required. The {::Google::Cloud::Kms::V1::ImportJob#name name} of the
302
+ # {::Google::Cloud::Kms::V1::ImportJob ImportJob} to get.
266
303
  class GetImportJobRequest
267
304
  include ::Google::Protobuf::MessageExts
268
305
  extend ::Google::Protobuf::MessageExts::ClassMethods
269
306
  end
270
307
 
271
- # Request message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#create_key_ring KeyManagementService.CreateKeyRing}.
308
+ # Request message for
309
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#create_key_ring KeyManagementService.CreateKeyRing}.
272
310
  # @!attribute [rw] parent
273
311
  # @return [::String]
274
312
  # Required. The resource name of the location associated with the
275
- # {::Google::Cloud::Kms::V1::KeyRing KeyRings}, in the format `projects/*/locations/*`.
313
+ # {::Google::Cloud::Kms::V1::KeyRing KeyRings}, in the format
314
+ # `projects/*/locations/*`.
276
315
  # @!attribute [rw] key_ring_id
277
316
  # @return [::String]
278
317
  # Required. It must be unique within a location and match the regular
279
318
  # expression `[a-zA-Z0-9_-]{1,63}`
280
319
  # @!attribute [rw] key_ring
281
320
  # @return [::Google::Cloud::Kms::V1::KeyRing]
282
- # Required. A {::Google::Cloud::Kms::V1::KeyRing KeyRing} with initial field values.
321
+ # Required. A {::Google::Cloud::Kms::V1::KeyRing KeyRing} with initial field
322
+ # values.
283
323
  class CreateKeyRingRequest
284
324
  include ::Google::Protobuf::MessageExts
285
325
  extend ::Google::Protobuf::MessageExts::ClassMethods
286
326
  end
287
327
 
288
- # Request message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#create_crypto_key KeyManagementService.CreateCryptoKey}.
328
+ # Request message for
329
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#create_crypto_key KeyManagementService.CreateCryptoKey}.
289
330
  # @!attribute [rw] parent
290
331
  # @return [::String]
291
- # Required. The {::Google::Cloud::Kms::V1::KeyRing#name name} of the KeyRing associated with the
292
- # {::Google::Cloud::Kms::V1::CryptoKey CryptoKeys}.
332
+ # Required. The {::Google::Cloud::Kms::V1::KeyRing#name name} of the KeyRing
333
+ # associated with the {::Google::Cloud::Kms::V1::CryptoKey CryptoKeys}.
293
334
  # @!attribute [rw] crypto_key_id
294
335
  # @return [::String]
295
336
  # Required. It must be unique within a KeyRing and match the regular
296
337
  # expression `[a-zA-Z0-9_-]{1,63}`
297
338
  # @!attribute [rw] crypto_key
298
339
  # @return [::Google::Cloud::Kms::V1::CryptoKey]
299
- # Required. A {::Google::Cloud::Kms::V1::CryptoKey CryptoKey} with initial field values.
340
+ # Required. A {::Google::Cloud::Kms::V1::CryptoKey CryptoKey} with initial field
341
+ # values.
300
342
  # @!attribute [rw] skip_initial_version_creation
301
343
  # @return [::Boolean]
302
- # If set to true, the request will create a {::Google::Cloud::Kms::V1::CryptoKey CryptoKey} without any
303
- # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersions}. You must manually call
304
- # {::Google::Cloud::Kms::V1::KeyManagementService::Client#create_crypto_key_version CreateCryptoKeyVersion} or
344
+ # If set to true, the request will create a
345
+ # {::Google::Cloud::Kms::V1::CryptoKey CryptoKey} without any
346
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersions}. You must
347
+ # manually call
348
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#create_crypto_key_version CreateCryptoKeyVersion}
349
+ # or
305
350
  # {::Google::Cloud::Kms::V1::KeyManagementService::Client#import_crypto_key_version ImportCryptoKeyVersion}
306
351
  # before you can use this {::Google::Cloud::Kms::V1::CryptoKey CryptoKey}.
307
352
  class CreateCryptoKeyRequest
@@ -309,53 +354,65 @@ module Google
309
354
  extend ::Google::Protobuf::MessageExts::ClassMethods
310
355
  end
311
356
 
312
- # Request message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#create_crypto_key_version KeyManagementService.CreateCryptoKeyVersion}.
357
+ # Request message for
358
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#create_crypto_key_version KeyManagementService.CreateCryptoKeyVersion}.
313
359
  # @!attribute [rw] parent
314
360
  # @return [::String]
315
- # Required. The {::Google::Cloud::Kms::V1::CryptoKey#name name} of the {::Google::Cloud::Kms::V1::CryptoKey CryptoKey} associated with
316
- # the {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersions}.
361
+ # Required. The {::Google::Cloud::Kms::V1::CryptoKey#name name} of the
362
+ # {::Google::Cloud::Kms::V1::CryptoKey CryptoKey} associated with the
363
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersions}.
317
364
  # @!attribute [rw] crypto_key_version
318
365
  # @return [::Google::Cloud::Kms::V1::CryptoKeyVersion]
319
- # Required. A {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} with initial field values.
366
+ # Required. A {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} with
367
+ # initial field values.
320
368
  class CreateCryptoKeyVersionRequest
321
369
  include ::Google::Protobuf::MessageExts
322
370
  extend ::Google::Protobuf::MessageExts::ClassMethods
323
371
  end
324
372
 
325
- # Request message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#import_crypto_key_version KeyManagementService.ImportCryptoKeyVersion}.
373
+ # Request message for
374
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#import_crypto_key_version KeyManagementService.ImportCryptoKeyVersion}.
326
375
  # @!attribute [rw] parent
327
376
  # @return [::String]
328
- # Required. The {::Google::Cloud::Kms::V1::CryptoKey#name name} of the {::Google::Cloud::Kms::V1::CryptoKey CryptoKey} to be imported into.
377
+ # Required. The {::Google::Cloud::Kms::V1::CryptoKey#name name} of the
378
+ # {::Google::Cloud::Kms::V1::CryptoKey CryptoKey} to be imported into.
329
379
  #
330
380
  # The create permission is only required on this key when creating a new
331
381
  # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion}.
332
382
  # @!attribute [rw] crypto_key_version
333
383
  # @return [::String]
334
- # Optional. The optional {::Google::Cloud::Kms::V1::CryptoKeyVersion#name name} of an existing
335
- # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} to target for an import operation.
336
- # If this field is not present, a new {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} containing the
384
+ # Optional. The optional {::Google::Cloud::Kms::V1::CryptoKeyVersion#name name} of
385
+ # an existing {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} to
386
+ # target for an import operation. If this field is not present, a new
387
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} containing the
337
388
  # supplied key material is created.
338
389
  #
339
390
  # If this field is present, the supplied key material is imported into
340
- # the existing {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion}. To import into an existing
341
- # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion}, the {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} must be a child of
342
- # {::Google::Cloud::Kms::V1::ImportCryptoKeyVersionRequest#parent ImportCryptoKeyVersionRequest.parent}, have been previously created via
343
- # [ImportCryptoKeyVersion][], and be in
344
- # {::Google::Cloud::Kms::V1::CryptoKeyVersion::CryptoKeyVersionState::DESTROYED DESTROYED} or
391
+ # the existing {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion}. To
392
+ # import into an existing
393
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion}, the
394
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} must be a child of
395
+ # {::Google::Cloud::Kms::V1::ImportCryptoKeyVersionRequest#parent ImportCryptoKeyVersionRequest.parent},
396
+ # have been previously created via [ImportCryptoKeyVersion][], and be in
397
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion::CryptoKeyVersionState::DESTROYED DESTROYED}
398
+ # or
345
399
  # {::Google::Cloud::Kms::V1::CryptoKeyVersion::CryptoKeyVersionState::IMPORT_FAILED IMPORT_FAILED}
346
400
  # state. The key material and algorithm must match the previous
347
- # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} exactly if the {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} has ever contained
401
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} exactly if the
402
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} has ever contained
348
403
  # key material.
349
404
  # @!attribute [rw] algorithm
350
405
  # @return [::Google::Cloud::Kms::V1::CryptoKeyVersion::CryptoKeyVersionAlgorithm]
351
- # Required. The {::Google::Cloud::Kms::V1::CryptoKeyVersion::CryptoKeyVersionAlgorithm algorithm} of
352
- # the key being imported. This does not need to match the
353
- # {::Google::Cloud::Kms::V1::CryptoKey#version_template version_template} of the {::Google::Cloud::Kms::V1::CryptoKey CryptoKey} this
354
- # version imports into.
406
+ # Required. The
407
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion::CryptoKeyVersionAlgorithm algorithm}
408
+ # of the key being imported. This does not need to match the
409
+ # {::Google::Cloud::Kms::V1::CryptoKey#version_template version_template} of the
410
+ # {::Google::Cloud::Kms::V1::CryptoKey CryptoKey} this version imports into.
355
411
  # @!attribute [rw] import_job
356
412
  # @return [::String]
357
- # Required. The {::Google::Cloud::Kms::V1::ImportJob#name name} of the {::Google::Cloud::Kms::V1::ImportJob ImportJob} that was used to
358
- # wrap this key material.
413
+ # Required. The {::Google::Cloud::Kms::V1::ImportJob#name name} of the
414
+ # {::Google::Cloud::Kms::V1::ImportJob ImportJob} that was used to wrap this key
415
+ # material.
359
416
  # @!attribute [rw] rsa_aes_wrapped_key
360
417
  # @return [::String]
361
418
  # Wrapped key material produced with
@@ -366,8 +423,9 @@ module Google
366
423
  # This field contains the concatenation of two wrapped keys:
367
424
  # <ol>
368
425
  # <li>An ephemeral AES-256 wrapping key wrapped with the
369
- # {::Google::Cloud::Kms::V1::ImportJob#public_key public_key} using RSAES-OAEP with SHA-1,
370
- # MGF1 with SHA-1, and an empty label.
426
+ # {::Google::Cloud::Kms::V1::ImportJob#public_key public_key} using
427
+ # RSAES-OAEP with SHA-1/SHA-256, MGF1 with SHA-1/SHA-256, and an
428
+ # empty label.
371
429
  # </li>
372
430
  # <li>The key to be imported, wrapped with the ephemeral AES-256 key
373
431
  # using AES-KWP (RFC 5649).
@@ -386,10 +444,12 @@ module Google
386
444
  extend ::Google::Protobuf::MessageExts::ClassMethods
387
445
  end
388
446
 
389
- # Request message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#create_import_job KeyManagementService.CreateImportJob}.
447
+ # Request message for
448
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#create_import_job KeyManagementService.CreateImportJob}.
390
449
  # @!attribute [rw] parent
391
450
  # @return [::String]
392
- # Required. The {::Google::Cloud::Kms::V1::KeyRing#name name} of the {::Google::Cloud::Kms::V1::KeyRing KeyRing} associated with the
451
+ # Required. The {::Google::Cloud::Kms::V1::KeyRing#name name} of the
452
+ # {::Google::Cloud::Kms::V1::KeyRing KeyRing} associated with the
393
453
  # {::Google::Cloud::Kms::V1::ImportJob ImportJobs}.
394
454
  # @!attribute [rw] import_job_id
395
455
  # @return [::String]
@@ -397,13 +457,15 @@ module Google
397
457
  # expression `[a-zA-Z0-9_-]{1,63}`
398
458
  # @!attribute [rw] import_job
399
459
  # @return [::Google::Cloud::Kms::V1::ImportJob]
400
- # Required. An {::Google::Cloud::Kms::V1::ImportJob ImportJob} with initial field values.
460
+ # Required. An {::Google::Cloud::Kms::V1::ImportJob ImportJob} with initial field
461
+ # values.
401
462
  class CreateImportJobRequest
402
463
  include ::Google::Protobuf::MessageExts
403
464
  extend ::Google::Protobuf::MessageExts::ClassMethods
404
465
  end
405
466
 
406
- # Request message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#update_crypto_key KeyManagementService.UpdateCryptoKey}.
467
+ # Request message for
468
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#update_crypto_key KeyManagementService.UpdateCryptoKey}.
407
469
  # @!attribute [rw] crypto_key
408
470
  # @return [::Google::Cloud::Kms::V1::CryptoKey]
409
471
  # Required. {::Google::Cloud::Kms::V1::CryptoKey CryptoKey} with updated values.
@@ -415,10 +477,12 @@ module Google
415
477
  extend ::Google::Protobuf::MessageExts::ClassMethods
416
478
  end
417
479
 
418
- # Request message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#update_crypto_key_version KeyManagementService.UpdateCryptoKeyVersion}.
480
+ # Request message for
481
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#update_crypto_key_version KeyManagementService.UpdateCryptoKeyVersion}.
419
482
  # @!attribute [rw] crypto_key_version
420
483
  # @return [::Google::Cloud::Kms::V1::CryptoKeyVersion]
421
- # Required. {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} with updated values.
484
+ # Required. {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} with
485
+ # updated values.
422
486
  # @!attribute [rw] update_mask
423
487
  # @return [::Google::Protobuf::FieldMask]
424
488
  # Required. List of fields to be updated in this request.
@@ -427,106 +491,132 @@ module Google
427
491
  extend ::Google::Protobuf::MessageExts::ClassMethods
428
492
  end
429
493
 
430
- # Request message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#update_crypto_key_primary_version KeyManagementService.UpdateCryptoKeyPrimaryVersion}.
494
+ # Request message for
495
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#update_crypto_key_primary_version KeyManagementService.UpdateCryptoKeyPrimaryVersion}.
431
496
  # @!attribute [rw] name
432
497
  # @return [::String]
433
- # Required. The resource name of the {::Google::Cloud::Kms::V1::CryptoKey CryptoKey} to update.
498
+ # Required. The resource name of the
499
+ # {::Google::Cloud::Kms::V1::CryptoKey CryptoKey} to update.
434
500
  # @!attribute [rw] crypto_key_version_id
435
501
  # @return [::String]
436
- # Required. The id of the child {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} to use as primary.
502
+ # Required. The id of the child
503
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} to use as primary.
437
504
  class UpdateCryptoKeyPrimaryVersionRequest
438
505
  include ::Google::Protobuf::MessageExts
439
506
  extend ::Google::Protobuf::MessageExts::ClassMethods
440
507
  end
441
508
 
442
- # Request message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#destroy_crypto_key_version KeyManagementService.DestroyCryptoKeyVersion}.
509
+ # Request message for
510
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#destroy_crypto_key_version KeyManagementService.DestroyCryptoKeyVersion}.
443
511
  # @!attribute [rw] name
444
512
  # @return [::String]
445
- # Required. The resource name of the {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} to destroy.
513
+ # Required. The resource name of the
514
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} to destroy.
446
515
  class DestroyCryptoKeyVersionRequest
447
516
  include ::Google::Protobuf::MessageExts
448
517
  extend ::Google::Protobuf::MessageExts::ClassMethods
449
518
  end
450
519
 
451
- # Request message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#restore_crypto_key_version KeyManagementService.RestoreCryptoKeyVersion}.
520
+ # Request message for
521
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#restore_crypto_key_version KeyManagementService.RestoreCryptoKeyVersion}.
452
522
  # @!attribute [rw] name
453
523
  # @return [::String]
454
- # Required. The resource name of the {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} to restore.
524
+ # Required. The resource name of the
525
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} to restore.
455
526
  class RestoreCryptoKeyVersionRequest
456
527
  include ::Google::Protobuf::MessageExts
457
528
  extend ::Google::Protobuf::MessageExts::ClassMethods
458
529
  end
459
530
 
460
- # Request message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#encrypt KeyManagementService.Encrypt}.
531
+ # Request message for
532
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#encrypt KeyManagementService.Encrypt}.
461
533
  # @!attribute [rw] name
462
534
  # @return [::String]
463
- # Required. The resource name of the {::Google::Cloud::Kms::V1::CryptoKey CryptoKey} or {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion}
464
- # to use for encryption.
535
+ # Required. The resource name of the
536
+ # {::Google::Cloud::Kms::V1::CryptoKey CryptoKey} or
537
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} to use for
538
+ # encryption.
465
539
  #
466
- # If a {::Google::Cloud::Kms::V1::CryptoKey CryptoKey} is specified, the server will use its
467
- # {::Google::Cloud::Kms::V1::CryptoKey#primary primary version}.
540
+ # If a {::Google::Cloud::Kms::V1::CryptoKey CryptoKey} is specified, the server
541
+ # will use its {::Google::Cloud::Kms::V1::CryptoKey#primary primary version}.
468
542
  # @!attribute [rw] plaintext
469
543
  # @return [::String]
470
544
  # Required. The data to encrypt. Must be no larger than 64KiB.
471
545
  #
472
546
  # The maximum size depends on the key version's
473
- # {::Google::Cloud::Kms::V1::CryptoKeyVersionTemplate#protection_level protection_level}. For
474
- # {::Google::Cloud::Kms::V1::ProtectionLevel::SOFTWARE SOFTWARE} keys, the plaintext must be no larger
475
- # than 64KiB. For {::Google::Cloud::Kms::V1::ProtectionLevel::HSM HSM} keys, the combined length of the
476
- # plaintext and additional_authenticated_data fields must be no larger than
477
- # 8KiB.
547
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersionTemplate#protection_level protection_level}.
548
+ # For {::Google::Cloud::Kms::V1::ProtectionLevel::SOFTWARE SOFTWARE} keys, the
549
+ # plaintext must be no larger than 64KiB. For
550
+ # {::Google::Cloud::Kms::V1::ProtectionLevel::HSM HSM} keys, the combined length of
551
+ # the plaintext and additional_authenticated_data fields must be no larger
552
+ # than 8KiB.
478
553
  # @!attribute [rw] additional_authenticated_data
479
554
  # @return [::String]
480
- # Optional. Optional data that, if specified, must also be provided during decryption
481
- # through {::Google::Cloud::Kms::V1::DecryptRequest#additional_authenticated_data DecryptRequest.additional_authenticated_data}.
555
+ # Optional. Optional data that, if specified, must also be provided during
556
+ # decryption through
557
+ # {::Google::Cloud::Kms::V1::DecryptRequest#additional_authenticated_data DecryptRequest.additional_authenticated_data}.
482
558
  #
483
559
  # The maximum size depends on the key version's
484
- # {::Google::Cloud::Kms::V1::CryptoKeyVersionTemplate#protection_level protection_level}. For
485
- # {::Google::Cloud::Kms::V1::ProtectionLevel::SOFTWARE SOFTWARE} keys, the AAD must be no larger than
486
- # 64KiB. For {::Google::Cloud::Kms::V1::ProtectionLevel::HSM HSM} keys, the combined length of the
487
- # plaintext and additional_authenticated_data fields must be no larger than
488
- # 8KiB.
560
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersionTemplate#protection_level protection_level}.
561
+ # For {::Google::Cloud::Kms::V1::ProtectionLevel::SOFTWARE SOFTWARE} keys, the AAD
562
+ # must be no larger than 64KiB. For
563
+ # {::Google::Cloud::Kms::V1::ProtectionLevel::HSM HSM} keys, the combined length of
564
+ # the plaintext and additional_authenticated_data fields must be no larger
565
+ # than 8KiB.
489
566
  # @!attribute [rw] plaintext_crc32c
490
567
  # @return [::Google::Protobuf::Int64Value]
491
- # Optional. An optional CRC32C checksum of the {::Google::Cloud::Kms::V1::EncryptRequest#plaintext EncryptRequest.plaintext}. If
492
- # specified, {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} will verify the integrity of the
493
- # received {::Google::Cloud::Kms::V1::EncryptRequest#plaintext EncryptRequest.plaintext} using this checksum.
494
- # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} will report an error if the checksum verification
495
- # fails. If you receive a checksum error, your client should verify that
496
- # CRC32C({::Google::Cloud::Kms::V1::EncryptRequest#plaintext EncryptRequest.plaintext}) is equal to
497
- # {::Google::Cloud::Kms::V1::EncryptRequest#plaintext_crc32c EncryptRequest.plaintext_crc32c}, and if so, perform a limited number of
498
- # retries. A persistent mismatch may indicate an issue in your computation of
499
- # the CRC32C checksum.
500
- # Note: This field is defined as int64 for reasons of compatibility across
501
- # different languages. However, it is a non-negative integer, which will
502
- # never exceed 2^32-1, and can be safely downconverted to uint32 in languages
503
- # that support this type.
568
+ # Optional. An optional CRC32C checksum of the
569
+ # {::Google::Cloud::Kms::V1::EncryptRequest#plaintext EncryptRequest.plaintext}.
570
+ # If specified,
571
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} will
572
+ # verify the integrity of the received
573
+ # {::Google::Cloud::Kms::V1::EncryptRequest#plaintext EncryptRequest.plaintext}
574
+ # using this checksum.
575
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} will
576
+ # report an error if the checksum verification fails. If you receive a
577
+ # checksum error, your client should verify that
578
+ # CRC32C({::Google::Cloud::Kms::V1::EncryptRequest#plaintext EncryptRequest.plaintext})
579
+ # is equal to
580
+ # {::Google::Cloud::Kms::V1::EncryptRequest#plaintext_crc32c EncryptRequest.plaintext_crc32c},
581
+ # and if so, perform a limited number of retries. A persistent mismatch may
582
+ # indicate an issue in your computation of the CRC32C checksum. Note: This
583
+ # field is defined as int64 for reasons of compatibility across different
584
+ # languages. However, it is a non-negative integer, which will never exceed
585
+ # 2^32-1, and can be safely downconverted to uint32 in languages that support
586
+ # this type.
504
587
  # @!attribute [rw] additional_authenticated_data_crc32c
505
588
  # @return [::Google::Protobuf::Int64Value]
506
589
  # Optional. An optional CRC32C checksum of the
507
- # {::Google::Cloud::Kms::V1::EncryptRequest#additional_authenticated_data EncryptRequest.additional_authenticated_data}. If specified,
508
- # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} will verify the integrity of the received
509
- # {::Google::Cloud::Kms::V1::EncryptRequest#additional_authenticated_data EncryptRequest.additional_authenticated_data} using this checksum.
510
- # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} will report an error if the checksum verification
511
- # fails. If you receive a checksum error, your client should verify that
512
- # CRC32C({::Google::Cloud::Kms::V1::EncryptRequest#additional_authenticated_data EncryptRequest.additional_authenticated_data}) is equal to
513
- # {::Google::Cloud::Kms::V1::EncryptRequest#additional_authenticated_data_crc32c EncryptRequest.additional_authenticated_data_crc32c}, and if so, perform
514
- # a limited number of retries. A persistent mismatch may indicate an issue in
515
- # your computation of the CRC32C checksum.
516
- # Note: This field is defined as int64 for reasons of compatibility across
517
- # different languages. However, it is a non-negative integer, which will
518
- # never exceed 2^32-1, and can be safely downconverted to uint32 in languages
519
- # that support this type.
590
+ # {::Google::Cloud::Kms::V1::EncryptRequest#additional_authenticated_data EncryptRequest.additional_authenticated_data}.
591
+ # If specified,
592
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} will
593
+ # verify the integrity of the received
594
+ # {::Google::Cloud::Kms::V1::EncryptRequest#additional_authenticated_data EncryptRequest.additional_authenticated_data}
595
+ # using this checksum.
596
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} will
597
+ # report an error if the checksum verification fails. If you receive a
598
+ # checksum error, your client should verify that
599
+ # CRC32C({::Google::Cloud::Kms::V1::EncryptRequest#additional_authenticated_data EncryptRequest.additional_authenticated_data})
600
+ # is equal to
601
+ # {::Google::Cloud::Kms::V1::EncryptRequest#additional_authenticated_data_crc32c EncryptRequest.additional_authenticated_data_crc32c},
602
+ # and if so, perform a limited number of retries. A persistent mismatch may
603
+ # indicate an issue in your computation of the CRC32C checksum. Note: This
604
+ # field is defined as int64 for reasons of compatibility across different
605
+ # languages. However, it is a non-negative integer, which will never exceed
606
+ # 2^32-1, and can be safely downconverted to uint32 in languages that support
607
+ # this type.
520
608
  class EncryptRequest
521
609
  include ::Google::Protobuf::MessageExts
522
610
  extend ::Google::Protobuf::MessageExts::ClassMethods
523
611
  end
524
612
 
525
- # Request message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#decrypt KeyManagementService.Decrypt}.
613
+ # Request message for
614
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#decrypt KeyManagementService.Decrypt}.
526
615
  # @!attribute [rw] name
527
616
  # @return [::String]
528
- # Required. The resource name of the {::Google::Cloud::Kms::V1::CryptoKey CryptoKey} to use for decryption.
529
- # The server will choose the appropriate version.
617
+ # Required. The resource name of the
618
+ # {::Google::Cloud::Kms::V1::CryptoKey CryptoKey} to use for decryption. The
619
+ # server will choose the appropriate version.
530
620
  # @!attribute [rw] ciphertext
531
621
  # @return [::String]
532
622
  # Required. The encrypted data originally returned in
@@ -537,173 +627,253 @@ module Google
537
627
  # {::Google::Cloud::Kms::V1::EncryptRequest#additional_authenticated_data EncryptRequest.additional_authenticated_data}.
538
628
  # @!attribute [rw] ciphertext_crc32c
539
629
  # @return [::Google::Protobuf::Int64Value]
540
- # Optional. An optional CRC32C checksum of the {::Google::Cloud::Kms::V1::DecryptRequest#ciphertext DecryptRequest.ciphertext}. If
541
- # specified, {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} will verify the integrity of the
542
- # received {::Google::Cloud::Kms::V1::DecryptRequest#ciphertext DecryptRequest.ciphertext} using this checksum.
543
- # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} will report an error if the checksum verification
544
- # fails. If you receive a checksum error, your client should verify that
545
- # CRC32C({::Google::Cloud::Kms::V1::DecryptRequest#ciphertext DecryptRequest.ciphertext}) is equal to
546
- # {::Google::Cloud::Kms::V1::DecryptRequest#ciphertext_crc32c DecryptRequest.ciphertext_crc32c}, and if so, perform a limited number
547
- # of retries. A persistent mismatch may indicate an issue in your computation
548
- # of the CRC32C checksum.
549
- # Note: This field is defined as int64 for reasons of compatibility across
550
- # different languages. However, it is a non-negative integer, which will
551
- # never exceed 2^32-1, and can be safely downconverted to uint32 in languages
552
- # that support this type.
630
+ # Optional. An optional CRC32C checksum of the
631
+ # {::Google::Cloud::Kms::V1::DecryptRequest#ciphertext DecryptRequest.ciphertext}.
632
+ # If specified,
633
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} will
634
+ # verify the integrity of the received
635
+ # {::Google::Cloud::Kms::V1::DecryptRequest#ciphertext DecryptRequest.ciphertext}
636
+ # using this checksum.
637
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} will
638
+ # report an error if the checksum verification fails. If you receive a
639
+ # checksum error, your client should verify that
640
+ # CRC32C({::Google::Cloud::Kms::V1::DecryptRequest#ciphertext DecryptRequest.ciphertext})
641
+ # is equal to
642
+ # {::Google::Cloud::Kms::V1::DecryptRequest#ciphertext_crc32c DecryptRequest.ciphertext_crc32c},
643
+ # and if so, perform a limited number of retries. A persistent mismatch may
644
+ # indicate an issue in your computation of the CRC32C checksum. Note: This
645
+ # field is defined as int64 for reasons of compatibility across different
646
+ # languages. However, it is a non-negative integer, which will never exceed
647
+ # 2^32-1, and can be safely downconverted to uint32 in languages that support
648
+ # this type.
553
649
  # @!attribute [rw] additional_authenticated_data_crc32c
554
650
  # @return [::Google::Protobuf::Int64Value]
555
651
  # Optional. An optional CRC32C checksum of the
556
- # {::Google::Cloud::Kms::V1::DecryptRequest#additional_authenticated_data DecryptRequest.additional_authenticated_data}. If specified,
557
- # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} will verify the integrity of the received
558
- # {::Google::Cloud::Kms::V1::DecryptRequest#additional_authenticated_data DecryptRequest.additional_authenticated_data} using this checksum.
559
- # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} will report an error if the checksum verification
560
- # fails. If you receive a checksum error, your client should verify that
561
- # CRC32C({::Google::Cloud::Kms::V1::DecryptRequest#additional_authenticated_data DecryptRequest.additional_authenticated_data}) is equal to
562
- # {::Google::Cloud::Kms::V1::DecryptRequest#additional_authenticated_data_crc32c DecryptRequest.additional_authenticated_data_crc32c}, and if so, perform
563
- # a limited number of retries. A persistent mismatch may indicate an issue in
564
- # your computation of the CRC32C checksum.
565
- # Note: This field is defined as int64 for reasons of compatibility across
566
- # different languages. However, it is a non-negative integer, which will
567
- # never exceed 2^32-1, and can be safely downconverted to uint32 in languages
568
- # that support this type.
652
+ # {::Google::Cloud::Kms::V1::DecryptRequest#additional_authenticated_data DecryptRequest.additional_authenticated_data}.
653
+ # If specified,
654
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} will
655
+ # verify the integrity of the received
656
+ # {::Google::Cloud::Kms::V1::DecryptRequest#additional_authenticated_data DecryptRequest.additional_authenticated_data}
657
+ # using this checksum.
658
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} will
659
+ # report an error if the checksum verification fails. If you receive a
660
+ # checksum error, your client should verify that
661
+ # CRC32C({::Google::Cloud::Kms::V1::DecryptRequest#additional_authenticated_data DecryptRequest.additional_authenticated_data})
662
+ # is equal to
663
+ # {::Google::Cloud::Kms::V1::DecryptRequest#additional_authenticated_data_crc32c DecryptRequest.additional_authenticated_data_crc32c},
664
+ # and if so, perform a limited number of retries. A persistent mismatch may
665
+ # indicate an issue in your computation of the CRC32C checksum. Note: This
666
+ # field is defined as int64 for reasons of compatibility across different
667
+ # languages. However, it is a non-negative integer, which will never exceed
668
+ # 2^32-1, and can be safely downconverted to uint32 in languages that support
669
+ # this type.
569
670
  class DecryptRequest
570
671
  include ::Google::Protobuf::MessageExts
571
672
  extend ::Google::Protobuf::MessageExts::ClassMethods
572
673
  end
573
674
 
574
- # Request message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#asymmetric_sign KeyManagementService.AsymmetricSign}.
675
+ # Request message for
676
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#asymmetric_sign KeyManagementService.AsymmetricSign}.
575
677
  # @!attribute [rw] name
576
678
  # @return [::String]
577
- # Required. The resource name of the {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} to use for signing.
679
+ # Required. The resource name of the
680
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} to use for
681
+ # signing.
578
682
  # @!attribute [rw] digest
579
683
  # @return [::Google::Cloud::Kms::V1::Digest]
580
- # Required. The digest of the data to sign. The digest must be produced with
684
+ # Optional. The digest of the data to sign. The digest must be produced with
581
685
  # the same digest algorithm as specified by the key version's
582
686
  # {::Google::Cloud::Kms::V1::CryptoKeyVersion#algorithm algorithm}.
687
+ #
688
+ # This field may not be supplied if
689
+ # {::Google::Cloud::Kms::V1::AsymmetricSignRequest#data AsymmetricSignRequest.data}
690
+ # is supplied.
583
691
  # @!attribute [rw] digest_crc32c
584
692
  # @return [::Google::Protobuf::Int64Value]
585
- # Optional. An optional CRC32C checksum of the {::Google::Cloud::Kms::V1::AsymmetricSignRequest#digest AsymmetricSignRequest.digest}. If
586
- # specified, {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} will verify the integrity of the
587
- # received {::Google::Cloud::Kms::V1::AsymmetricSignRequest#digest AsymmetricSignRequest.digest} using this checksum.
588
- # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} will report an error if the checksum verification
589
- # fails. If you receive a checksum error, your client should verify that
590
- # CRC32C({::Google::Cloud::Kms::V1::AsymmetricSignRequest#digest AsymmetricSignRequest.digest}) is equal to
591
- # {::Google::Cloud::Kms::V1::AsymmetricSignRequest#digest_crc32c AsymmetricSignRequest.digest_crc32c}, and if so, perform a limited
592
- # number of retries. A persistent mismatch may indicate an issue in your
593
- # computation of the CRC32C checksum.
594
- # Note: This field is defined as int64 for reasons of compatibility across
595
- # different languages. However, it is a non-negative integer, which will
596
- # never exceed 2^32-1, and can be safely downconverted to uint32 in languages
597
- # that support this type.
693
+ # Optional. An optional CRC32C checksum of the
694
+ # {::Google::Cloud::Kms::V1::AsymmetricSignRequest#digest AsymmetricSignRequest.digest}.
695
+ # If specified,
696
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} will
697
+ # verify the integrity of the received
698
+ # {::Google::Cloud::Kms::V1::AsymmetricSignRequest#digest AsymmetricSignRequest.digest}
699
+ # using this checksum.
700
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} will
701
+ # report an error if the checksum verification fails. If you receive a
702
+ # checksum error, your client should verify that
703
+ # CRC32C({::Google::Cloud::Kms::V1::AsymmetricSignRequest#digest AsymmetricSignRequest.digest})
704
+ # is equal to
705
+ # {::Google::Cloud::Kms::V1::AsymmetricSignRequest#digest_crc32c AsymmetricSignRequest.digest_crc32c},
706
+ # and if so, perform a limited number of retries. A persistent mismatch may
707
+ # indicate an issue in your computation of the CRC32C checksum. Note: This
708
+ # field is defined as int64 for reasons of compatibility across different
709
+ # languages. However, it is a non-negative integer, which will never exceed
710
+ # 2^32-1, and can be safely downconverted to uint32 in languages that support
711
+ # this type.
712
+ # @!attribute [rw] data
713
+ # @return [::String]
714
+ # Optional. The data to sign.
715
+ # It can't be supplied if
716
+ # {::Google::Cloud::Kms::V1::AsymmetricSignRequest#digest AsymmetricSignRequest.digest}
717
+ # is supplied.
718
+ # @!attribute [rw] data_crc32c
719
+ # @return [::Google::Protobuf::Int64Value]
720
+ # Optional. An optional CRC32C checksum of the
721
+ # {::Google::Cloud::Kms::V1::AsymmetricSignRequest#data AsymmetricSignRequest.data}.
722
+ # If specified,
723
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} will
724
+ # verify the integrity of the received
725
+ # {::Google::Cloud::Kms::V1::AsymmetricSignRequest#data AsymmetricSignRequest.data}
726
+ # using this checksum.
727
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} will
728
+ # report an error if the checksum verification fails. If you receive a
729
+ # checksum error, your client should verify that
730
+ # CRC32C({::Google::Cloud::Kms::V1::AsymmetricSignRequest#data AsymmetricSignRequest.data})
731
+ # is equal to
732
+ # {::Google::Cloud::Kms::V1::AsymmetricSignRequest#data_crc32c AsymmetricSignRequest.data_crc32c},
733
+ # and if so, perform a limited number of retries. A persistent mismatch may
734
+ # indicate an issue in your computation of the CRC32C checksum. Note: This
735
+ # field is defined as int64 for reasons of compatibility across different
736
+ # languages. However, it is a non-negative integer, which will never exceed
737
+ # 2^32-1, and can be safely downconverted to uint32 in languages that support
738
+ # this type.
598
739
  class AsymmetricSignRequest
599
740
  include ::Google::Protobuf::MessageExts
600
741
  extend ::Google::Protobuf::MessageExts::ClassMethods
601
742
  end
602
743
 
603
- # Request message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#asymmetric_decrypt KeyManagementService.AsymmetricDecrypt}.
744
+ # Request message for
745
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#asymmetric_decrypt KeyManagementService.AsymmetricDecrypt}.
604
746
  # @!attribute [rw] name
605
747
  # @return [::String]
606
- # Required. The resource name of the {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} to use for
748
+ # Required. The resource name of the
749
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} to use for
607
750
  # decryption.
608
751
  # @!attribute [rw] ciphertext
609
752
  # @return [::String]
610
- # Required. The data encrypted with the named {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion}'s public
611
- # key using OAEP.
753
+ # Required. The data encrypted with the named
754
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion}'s public key using
755
+ # OAEP.
612
756
  # @!attribute [rw] ciphertext_crc32c
613
757
  # @return [::Google::Protobuf::Int64Value]
614
- # Optional. An optional CRC32C checksum of the {::Google::Cloud::Kms::V1::AsymmetricDecryptRequest#ciphertext AsymmetricDecryptRequest.ciphertext}.
615
- # If specified, {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} will verify the integrity of the
616
- # received {::Google::Cloud::Kms::V1::AsymmetricDecryptRequest#ciphertext AsymmetricDecryptRequest.ciphertext} using this checksum.
617
- # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} will report an error if the checksum verification
618
- # fails. If you receive a checksum error, your client should verify that
619
- # CRC32C({::Google::Cloud::Kms::V1::AsymmetricDecryptRequest#ciphertext AsymmetricDecryptRequest.ciphertext}) is equal to
620
- # {::Google::Cloud::Kms::V1::AsymmetricDecryptRequest#ciphertext_crc32c AsymmetricDecryptRequest.ciphertext_crc32c}, and if so, perform a
621
- # limited number of retries. A persistent mismatch may indicate an issue in
622
- # your computation of the CRC32C checksum.
623
- # Note: This field is defined as int64 for reasons of compatibility across
624
- # different languages. However, it is a non-negative integer, which will
625
- # never exceed 2^32-1, and can be safely downconverted to uint32 in languages
626
- # that support this type.
758
+ # Optional. An optional CRC32C checksum of the
759
+ # {::Google::Cloud::Kms::V1::AsymmetricDecryptRequest#ciphertext AsymmetricDecryptRequest.ciphertext}.
760
+ # If specified,
761
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} will
762
+ # verify the integrity of the received
763
+ # {::Google::Cloud::Kms::V1::AsymmetricDecryptRequest#ciphertext AsymmetricDecryptRequest.ciphertext}
764
+ # using this checksum.
765
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} will
766
+ # report an error if the checksum verification fails. If you receive a
767
+ # checksum error, your client should verify that
768
+ # CRC32C({::Google::Cloud::Kms::V1::AsymmetricDecryptRequest#ciphertext AsymmetricDecryptRequest.ciphertext})
769
+ # is equal to
770
+ # {::Google::Cloud::Kms::V1::AsymmetricDecryptRequest#ciphertext_crc32c AsymmetricDecryptRequest.ciphertext_crc32c},
771
+ # and if so, perform a limited number of retries. A persistent mismatch may
772
+ # indicate an issue in your computation of the CRC32C checksum. Note: This
773
+ # field is defined as int64 for reasons of compatibility across different
774
+ # languages. However, it is a non-negative integer, which will never exceed
775
+ # 2^32-1, and can be safely downconverted to uint32 in languages that support
776
+ # this type.
627
777
  class AsymmetricDecryptRequest
628
778
  include ::Google::Protobuf::MessageExts
629
779
  extend ::Google::Protobuf::MessageExts::ClassMethods
630
780
  end
631
781
 
632
- # Request message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#mac_sign KeyManagementService.MacSign}.
782
+ # Request message for
783
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#mac_sign KeyManagementService.MacSign}.
633
784
  # @!attribute [rw] name
634
785
  # @return [::String]
635
- # Required. The resource name of the {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} to use for signing.
786
+ # Required. The resource name of the
787
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} to use for
788
+ # signing.
636
789
  # @!attribute [rw] data
637
790
  # @return [::String]
638
- # Required. The data to sign. The MAC tag is computed over this data field based on
639
- # the specific algorithm.
791
+ # Required. The data to sign. The MAC tag is computed over this data field
792
+ # based on the specific algorithm.
640
793
  # @!attribute [rw] data_crc32c
641
794
  # @return [::Google::Protobuf::Int64Value]
642
- # Optional. An optional CRC32C checksum of the {::Google::Cloud::Kms::V1::MacSignRequest#data MacSignRequest.data}. If
643
- # specified, {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} will verify the integrity of the
644
- # received {::Google::Cloud::Kms::V1::MacSignRequest#data MacSignRequest.data} using this checksum.
645
- # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} will report an error if the checksum verification
646
- # fails. If you receive a checksum error, your client should verify that
647
- # CRC32C({::Google::Cloud::Kms::V1::MacSignRequest#data MacSignRequest.data}) is equal to
648
- # {::Google::Cloud::Kms::V1::MacSignRequest#data_crc32c MacSignRequest.data_crc32c}, and if so, perform a limited
649
- # number of retries. A persistent mismatch may indicate an issue in your
650
- # computation of the CRC32C checksum.
651
- # Note: This field is defined as int64 for reasons of compatibility across
652
- # different languages. However, it is a non-negative integer, which will
653
- # never exceed 2^32-1, and can be safely downconverted to uint32 in languages
654
- # that support this type.
795
+ # Optional. An optional CRC32C checksum of the
796
+ # {::Google::Cloud::Kms::V1::MacSignRequest#data MacSignRequest.data}. If
797
+ # specified, {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService}
798
+ # will verify the integrity of the received
799
+ # {::Google::Cloud::Kms::V1::MacSignRequest#data MacSignRequest.data} using this
800
+ # checksum. {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService}
801
+ # will report an error if the checksum verification fails. If you receive a
802
+ # checksum error, your client should verify that
803
+ # CRC32C({::Google::Cloud::Kms::V1::MacSignRequest#data MacSignRequest.data}) is
804
+ # equal to
805
+ # {::Google::Cloud::Kms::V1::MacSignRequest#data_crc32c MacSignRequest.data_crc32c},
806
+ # and if so, perform a limited number of retries. A persistent mismatch may
807
+ # indicate an issue in your computation of the CRC32C checksum. Note: This
808
+ # field is defined as int64 for reasons of compatibility across different
809
+ # languages. However, it is a non-negative integer, which will never exceed
810
+ # 2^32-1, and can be safely downconverted to uint32 in languages that support
811
+ # this type.
655
812
  class MacSignRequest
656
813
  include ::Google::Protobuf::MessageExts
657
814
  extend ::Google::Protobuf::MessageExts::ClassMethods
658
815
  end
659
816
 
660
- # Request message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#mac_verify KeyManagementService.MacVerify}.
817
+ # Request message for
818
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#mac_verify KeyManagementService.MacVerify}.
661
819
  # @!attribute [rw] name
662
820
  # @return [::String]
663
- # Required. The resource name of the {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} to use for verification.
821
+ # Required. The resource name of the
822
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} to use for
823
+ # verification.
664
824
  # @!attribute [rw] data
665
825
  # @return [::String]
666
- # Required. The data used previously as a {::Google::Cloud::Kms::V1::MacSignRequest#data MacSignRequest.data} to generate the MAC
667
- # tag.
826
+ # Required. The data used previously as a
827
+ # {::Google::Cloud::Kms::V1::MacSignRequest#data MacSignRequest.data} to generate
828
+ # the MAC tag.
668
829
  # @!attribute [rw] data_crc32c
669
830
  # @return [::Google::Protobuf::Int64Value]
670
- # Optional. An optional CRC32C checksum of the {::Google::Cloud::Kms::V1::MacVerifyRequest#data MacVerifyRequest.data}. If
671
- # specified, {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} will verify the integrity of the
672
- # received {::Google::Cloud::Kms::V1::MacVerifyRequest#data MacVerifyRequest.data} using this checksum.
673
- # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} will report an error if the checksum verification
674
- # fails. If you receive a checksum error, your client should verify that
675
- # CRC32C({::Google::Cloud::Kms::V1::MacVerifyRequest#data MacVerifyRequest.data}) is equal to
676
- # {::Google::Cloud::Kms::V1::MacVerifyRequest#data_crc32c MacVerifyRequest.data_crc32c}, and if so, perform a limited
677
- # number of retries. A persistent mismatch may indicate an issue in your
678
- # computation of the CRC32C checksum.
679
- # Note: This field is defined as int64 for reasons of compatibility across
680
- # different languages. However, it is a non-negative integer, which will
681
- # never exceed 2^32-1, and can be safely downconverted to uint32 in languages
682
- # that support this type.
831
+ # Optional. An optional CRC32C checksum of the
832
+ # {::Google::Cloud::Kms::V1::MacVerifyRequest#data MacVerifyRequest.data}. If
833
+ # specified, {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService}
834
+ # will verify the integrity of the received
835
+ # {::Google::Cloud::Kms::V1::MacVerifyRequest#data MacVerifyRequest.data} using
836
+ # this checksum.
837
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} will
838
+ # report an error if the checksum verification fails. If you receive a
839
+ # checksum error, your client should verify that
840
+ # CRC32C({::Google::Cloud::Kms::V1::MacVerifyRequest#data MacVerifyRequest.data})
841
+ # is equal to
842
+ # {::Google::Cloud::Kms::V1::MacVerifyRequest#data_crc32c MacVerifyRequest.data_crc32c},
843
+ # and if so, perform a limited number of retries. A persistent mismatch may
844
+ # indicate an issue in your computation of the CRC32C checksum. Note: This
845
+ # field is defined as int64 for reasons of compatibility across different
846
+ # languages. However, it is a non-negative integer, which will never exceed
847
+ # 2^32-1, and can be safely downconverted to uint32 in languages that support
848
+ # this type.
683
849
  # @!attribute [rw] mac
684
850
  # @return [::String]
685
851
  # Required. The signature to verify.
686
852
  # @!attribute [rw] mac_crc32c
687
853
  # @return [::Google::Protobuf::Int64Value]
688
- # Optional. An optional CRC32C checksum of the {::Google::Cloud::Kms::V1::MacVerifyRequest#mac MacVerifyRequest.mac}. If
689
- # specified, {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} will verify the integrity of the
690
- # received {::Google::Cloud::Kms::V1::MacVerifyRequest#mac MacVerifyRequest.mac} using this checksum.
691
- # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} will report an error if the checksum verification
692
- # fails. If you receive a checksum error, your client should verify that
854
+ # Optional. An optional CRC32C checksum of the
855
+ # {::Google::Cloud::Kms::V1::MacVerifyRequest#mac MacVerifyRequest.mac}. If
856
+ # specified, {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService}
857
+ # will verify the integrity of the received
858
+ # {::Google::Cloud::Kms::V1::MacVerifyRequest#mac MacVerifyRequest.mac} using this
859
+ # checksum. {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService}
860
+ # will report an error if the checksum verification fails. If you receive a
861
+ # checksum error, your client should verify that
693
862
  # CRC32C([MacVerifyRequest.tag][]) is equal to
694
- # {::Google::Cloud::Kms::V1::MacVerifyRequest#mac_crc32c MacVerifyRequest.mac_crc32c}, and if so, perform a limited
695
- # number of retries. A persistent mismatch may indicate an issue in your
696
- # computation of the CRC32C checksum.
697
- # Note: This field is defined as int64 for reasons of compatibility across
698
- # different languages. However, it is a non-negative integer, which will
699
- # never exceed 2^32-1, and can be safely downconverted to uint32 in languages
700
- # that support this type.
863
+ # {::Google::Cloud::Kms::V1::MacVerifyRequest#mac_crc32c MacVerifyRequest.mac_crc32c},
864
+ # and if so, perform a limited number of retries. A persistent mismatch may
865
+ # indicate an issue in your computation of the CRC32C checksum. Note: This
866
+ # field is defined as int64 for reasons of compatibility across different
867
+ # languages. However, it is a non-negative integer, which will never exceed
868
+ # 2^32-1, and can be safely downconverted to uint32 in languages that support
869
+ # this type.
701
870
  class MacVerifyRequest
702
871
  include ::Google::Protobuf::MessageExts
703
872
  extend ::Google::Protobuf::MessageExts::ClassMethods
704
873
  end
705
874
 
706
- # Request message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#generate_random_bytes KeyManagementService.GenerateRandomBytes}.
875
+ # Request message for
876
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#generate_random_bytes KeyManagementService.GenerateRandomBytes}.
707
877
  # @!attribute [rw] location
708
878
  # @return [::String]
709
879
  # The project-specific location in which to generate random bytes.
@@ -714,236 +884,329 @@ module Google
714
884
  # bytes, maximum 1024 bytes.
715
885
  # @!attribute [rw] protection_level
716
886
  # @return [::Google::Cloud::Kms::V1::ProtectionLevel]
717
- # The {::Google::Cloud::Kms::V1::ProtectionLevel ProtectionLevel} to use when generating the random data. Defaults to
718
- # {::Google::Cloud::Kms::V1::ProtectionLevel::SOFTWARE SOFTWARE}.
887
+ # The {::Google::Cloud::Kms::V1::ProtectionLevel ProtectionLevel} to use when
888
+ # generating the random data. Currently, only
889
+ # {::Google::Cloud::Kms::V1::ProtectionLevel::HSM HSM} protection level is
890
+ # supported.
719
891
  class GenerateRandomBytesRequest
720
892
  include ::Google::Protobuf::MessageExts
721
893
  extend ::Google::Protobuf::MessageExts::ClassMethods
722
894
  end
723
895
 
724
- # Response message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#encrypt KeyManagementService.Encrypt}.
896
+ # Response message for
897
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#encrypt KeyManagementService.Encrypt}.
725
898
  # @!attribute [rw] name
726
899
  # @return [::String]
727
- # The resource name of the {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} used in encryption. Check
728
- # this field to verify that the intended resource was used for encryption.
900
+ # The resource name of the
901
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} used in
902
+ # encryption. Check this field to verify that the intended resource was used
903
+ # for encryption.
729
904
  # @!attribute [rw] ciphertext
730
905
  # @return [::String]
731
906
  # The encrypted data.
732
907
  # @!attribute [rw] ciphertext_crc32c
733
908
  # @return [::Google::Protobuf::Int64Value]
734
909
  # Integrity verification field. A CRC32C checksum of the returned
735
- # {::Google::Cloud::Kms::V1::EncryptResponse#ciphertext EncryptResponse.ciphertext}. An integrity check of
736
- # {::Google::Cloud::Kms::V1::EncryptResponse#ciphertext EncryptResponse.ciphertext} can be performed by computing the CRC32C
737
- # checksum of {::Google::Cloud::Kms::V1::EncryptResponse#ciphertext EncryptResponse.ciphertext} and comparing your results to
738
- # this field. Discard the response in case of non-matching checksum values,
739
- # and perform a limited number of retries. A persistent mismatch may indicate
740
- # an issue in your computation of the CRC32C checksum.
741
- # Note: This field is defined as int64 for reasons of compatibility across
742
- # different languages. However, it is a non-negative integer, which will
743
- # never exceed 2^32-1, and can be safely downconverted to uint32 in languages
744
- # that support this type.
910
+ # {::Google::Cloud::Kms::V1::EncryptResponse#ciphertext EncryptResponse.ciphertext}.
911
+ # An integrity check of
912
+ # {::Google::Cloud::Kms::V1::EncryptResponse#ciphertext EncryptResponse.ciphertext}
913
+ # can be performed by computing the CRC32C checksum of
914
+ # {::Google::Cloud::Kms::V1::EncryptResponse#ciphertext EncryptResponse.ciphertext}
915
+ # and comparing your results to this field. Discard the response in case of
916
+ # non-matching checksum values, and perform a limited number of retries. A
917
+ # persistent mismatch may indicate an issue in your computation of the CRC32C
918
+ # checksum. Note: This field is defined as int64 for reasons of compatibility
919
+ # across different languages. However, it is a non-negative integer, which
920
+ # will never exceed 2^32-1, and can be safely downconverted to uint32 in
921
+ # languages that support this type.
745
922
  # @!attribute [rw] verified_plaintext_crc32c
746
923
  # @return [::Boolean]
747
924
  # Integrity verification field. A flag indicating whether
748
- # {::Google::Cloud::Kms::V1::EncryptRequest#plaintext_crc32c EncryptRequest.plaintext_crc32c} was received by
749
- # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} and used for the integrity verification of the
750
- # {::Google::Cloud::Kms::V1::EncryptRequest#plaintext plaintext}. A false value of this field
751
- # indicates either that {::Google::Cloud::Kms::V1::EncryptRequest#plaintext_crc32c EncryptRequest.plaintext_crc32c} was left unset or
752
- # that it was not delivered to {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService}. If you've set
753
- # {::Google::Cloud::Kms::V1::EncryptRequest#plaintext_crc32c EncryptRequest.plaintext_crc32c} but this field is still false, discard
754
- # the response and perform a limited number of retries.
925
+ # {::Google::Cloud::Kms::V1::EncryptRequest#plaintext_crc32c EncryptRequest.plaintext_crc32c}
926
+ # was received by
927
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} and used
928
+ # for the integrity verification of the
929
+ # {::Google::Cloud::Kms::V1::EncryptRequest#plaintext plaintext}. A false value of
930
+ # this field indicates either that
931
+ # {::Google::Cloud::Kms::V1::EncryptRequest#plaintext_crc32c EncryptRequest.plaintext_crc32c}
932
+ # was left unset or that it was not delivered to
933
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService}. If you've
934
+ # set
935
+ # {::Google::Cloud::Kms::V1::EncryptRequest#plaintext_crc32c EncryptRequest.plaintext_crc32c}
936
+ # but this field is still false, discard the response and perform a limited
937
+ # number of retries.
755
938
  # @!attribute [rw] verified_additional_authenticated_data_crc32c
756
939
  # @return [::Boolean]
757
940
  # Integrity verification field. A flag indicating whether
758
- # {::Google::Cloud::Kms::V1::EncryptRequest#additional_authenticated_data_crc32c EncryptRequest.additional_authenticated_data_crc32c} was received by
759
- # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} and used for the integrity verification of the
760
- # {::Google::Cloud::Kms::V1::EncryptRequest#additional_authenticated_data AAD}. A false value of this
761
- # field indicates either that
762
- # {::Google::Cloud::Kms::V1::EncryptRequest#additional_authenticated_data_crc32c EncryptRequest.additional_authenticated_data_crc32c} was left unset or
763
- # that it was not delivered to {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService}. If you've set
764
- # {::Google::Cloud::Kms::V1::EncryptRequest#additional_authenticated_data_crc32c EncryptRequest.additional_authenticated_data_crc32c} but this field is
765
- # still false, discard the response and perform a limited number of retries.
941
+ # {::Google::Cloud::Kms::V1::EncryptRequest#additional_authenticated_data_crc32c EncryptRequest.additional_authenticated_data_crc32c}
942
+ # was received by
943
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} and used
944
+ # for the integrity verification of the
945
+ # {::Google::Cloud::Kms::V1::EncryptRequest#additional_authenticated_data AAD}. A
946
+ # false value of this field indicates either that
947
+ # {::Google::Cloud::Kms::V1::EncryptRequest#additional_authenticated_data_crc32c EncryptRequest.additional_authenticated_data_crc32c}
948
+ # was left unset or that it was not delivered to
949
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService}. If you've
950
+ # set
951
+ # {::Google::Cloud::Kms::V1::EncryptRequest#additional_authenticated_data_crc32c EncryptRequest.additional_authenticated_data_crc32c}
952
+ # but this field is still false, discard the response and perform a limited
953
+ # number of retries.
766
954
  # @!attribute [rw] protection_level
767
955
  # @return [::Google::Cloud::Kms::V1::ProtectionLevel]
768
- # The {::Google::Cloud::Kms::V1::ProtectionLevel ProtectionLevel} of the {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} used in encryption.
956
+ # The {::Google::Cloud::Kms::V1::ProtectionLevel ProtectionLevel} of the
957
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} used in
958
+ # encryption.
769
959
  class EncryptResponse
770
960
  include ::Google::Protobuf::MessageExts
771
961
  extend ::Google::Protobuf::MessageExts::ClassMethods
772
962
  end
773
963
 
774
- # Response message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#decrypt KeyManagementService.Decrypt}.
964
+ # Response message for
965
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#decrypt KeyManagementService.Decrypt}.
775
966
  # @!attribute [rw] plaintext
776
967
  # @return [::String]
777
- # The decrypted data originally supplied in {::Google::Cloud::Kms::V1::EncryptRequest#plaintext EncryptRequest.plaintext}.
968
+ # The decrypted data originally supplied in
969
+ # {::Google::Cloud::Kms::V1::EncryptRequest#plaintext EncryptRequest.plaintext}.
778
970
  # @!attribute [rw] plaintext_crc32c
779
971
  # @return [::Google::Protobuf::Int64Value]
780
972
  # Integrity verification field. A CRC32C checksum of the returned
781
- # {::Google::Cloud::Kms::V1::DecryptResponse#plaintext DecryptResponse.plaintext}. An integrity check of
782
- # {::Google::Cloud::Kms::V1::DecryptResponse#plaintext DecryptResponse.plaintext} can be performed by computing the CRC32C
783
- # checksum of {::Google::Cloud::Kms::V1::DecryptResponse#plaintext DecryptResponse.plaintext} and comparing your results to
784
- # this field. Discard the response in case of non-matching checksum values,
785
- # and perform a limited number of retries. A persistent mismatch may indicate
786
- # an issue in your computation of the CRC32C checksum. Note: receiving this
787
- # response message indicates that {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} is able to
788
- # successfully decrypt the {::Google::Cloud::Kms::V1::DecryptRequest#ciphertext ciphertext}.
789
- # Note: This field is defined as int64 for reasons of compatibility across
790
- # different languages. However, it is a non-negative integer, which will
791
- # never exceed 2^32-1, and can be safely downconverted to uint32 in languages
792
- # that support this type.
973
+ # {::Google::Cloud::Kms::V1::DecryptResponse#plaintext DecryptResponse.plaintext}.
974
+ # An integrity check of
975
+ # {::Google::Cloud::Kms::V1::DecryptResponse#plaintext DecryptResponse.plaintext}
976
+ # can be performed by computing the CRC32C checksum of
977
+ # {::Google::Cloud::Kms::V1::DecryptResponse#plaintext DecryptResponse.plaintext}
978
+ # and comparing your results to this field. Discard the response in case of
979
+ # non-matching checksum values, and perform a limited number of retries. A
980
+ # persistent mismatch may indicate an issue in your computation of the CRC32C
981
+ # checksum. Note: receiving this response message indicates that
982
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} is able to
983
+ # successfully decrypt the
984
+ # {::Google::Cloud::Kms::V1::DecryptRequest#ciphertext ciphertext}. Note: This
985
+ # field is defined as int64 for reasons of compatibility across different
986
+ # languages. However, it is a non-negative integer, which will never exceed
987
+ # 2^32-1, and can be safely downconverted to uint32 in languages that support
988
+ # this type.
793
989
  # @!attribute [rw] used_primary
794
990
  # @return [::Boolean]
795
991
  # Whether the Decryption was performed using the primary key version.
796
992
  # @!attribute [rw] protection_level
797
993
  # @return [::Google::Cloud::Kms::V1::ProtectionLevel]
798
- # The {::Google::Cloud::Kms::V1::ProtectionLevel ProtectionLevel} of the {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} used in decryption.
994
+ # The {::Google::Cloud::Kms::V1::ProtectionLevel ProtectionLevel} of the
995
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} used in
996
+ # decryption.
799
997
  class DecryptResponse
800
998
  include ::Google::Protobuf::MessageExts
801
999
  extend ::Google::Protobuf::MessageExts::ClassMethods
802
1000
  end
803
1001
 
804
- # Response message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#asymmetric_sign KeyManagementService.AsymmetricSign}.
1002
+ # Response message for
1003
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#asymmetric_sign KeyManagementService.AsymmetricSign}.
805
1004
  # @!attribute [rw] signature
806
1005
  # @return [::String]
807
1006
  # The created signature.
808
1007
  # @!attribute [rw] signature_crc32c
809
1008
  # @return [::Google::Protobuf::Int64Value]
810
1009
  # Integrity verification field. A CRC32C checksum of the returned
811
- # {::Google::Cloud::Kms::V1::AsymmetricSignResponse#signature AsymmetricSignResponse.signature}. An integrity check of
812
- # {::Google::Cloud::Kms::V1::AsymmetricSignResponse#signature AsymmetricSignResponse.signature} can be performed by computing the
813
- # CRC32C checksum of {::Google::Cloud::Kms::V1::AsymmetricSignResponse#signature AsymmetricSignResponse.signature} and comparing your
814
- # results to this field. Discard the response in case of non-matching
815
- # checksum values, and perform a limited number of retries. A persistent
816
- # mismatch may indicate an issue in your computation of the CRC32C checksum.
817
- # Note: This field is defined as int64 for reasons of compatibility across
818
- # different languages. However, it is a non-negative integer, which will
819
- # never exceed 2^32-1, and can be safely downconverted to uint32 in languages
820
- # that support this type.
1010
+ # {::Google::Cloud::Kms::V1::AsymmetricSignResponse#signature AsymmetricSignResponse.signature}.
1011
+ # An integrity check of
1012
+ # {::Google::Cloud::Kms::V1::AsymmetricSignResponse#signature AsymmetricSignResponse.signature}
1013
+ # can be performed by computing the CRC32C checksum of
1014
+ # {::Google::Cloud::Kms::V1::AsymmetricSignResponse#signature AsymmetricSignResponse.signature}
1015
+ # and comparing your results to this field. Discard the response in case of
1016
+ # non-matching checksum values, and perform a limited number of retries. A
1017
+ # persistent mismatch may indicate an issue in your computation of the CRC32C
1018
+ # checksum. Note: This field is defined as int64 for reasons of compatibility
1019
+ # across different languages. However, it is a non-negative integer, which
1020
+ # will never exceed 2^32-1, and can be safely downconverted to uint32 in
1021
+ # languages that support this type.
821
1022
  # @!attribute [rw] verified_digest_crc32c
822
1023
  # @return [::Boolean]
823
1024
  # Integrity verification field. A flag indicating whether
824
- # {::Google::Cloud::Kms::V1::AsymmetricSignRequest#digest_crc32c AsymmetricSignRequest.digest_crc32c} was received by
825
- # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} and used for the integrity verification of the
826
- # {::Google::Cloud::Kms::V1::AsymmetricSignRequest#digest digest}. A false value of this field
827
- # indicates either that {::Google::Cloud::Kms::V1::AsymmetricSignRequest#digest_crc32c AsymmetricSignRequest.digest_crc32c} was left
828
- # unset or that it was not delivered to {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService}. If you've
829
- # set {::Google::Cloud::Kms::V1::AsymmetricSignRequest#digest_crc32c AsymmetricSignRequest.digest_crc32c} but this field is still false,
830
- # discard the response and perform a limited number of retries.
1025
+ # {::Google::Cloud::Kms::V1::AsymmetricSignRequest#digest_crc32c AsymmetricSignRequest.digest_crc32c}
1026
+ # was received by
1027
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} and used
1028
+ # for the integrity verification of the
1029
+ # {::Google::Cloud::Kms::V1::AsymmetricSignRequest#digest digest}. A false value
1030
+ # of this field indicates either that
1031
+ # {::Google::Cloud::Kms::V1::AsymmetricSignRequest#digest_crc32c AsymmetricSignRequest.digest_crc32c}
1032
+ # was left unset or that it was not delivered to
1033
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService}. If you've
1034
+ # set
1035
+ # {::Google::Cloud::Kms::V1::AsymmetricSignRequest#digest_crc32c AsymmetricSignRequest.digest_crc32c}
1036
+ # but this field is still false, discard the response and perform a limited
1037
+ # number of retries.
831
1038
  # @!attribute [rw] name
832
1039
  # @return [::String]
833
- # The resource name of the {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} used for signing. Check
834
- # this field to verify that the intended resource was used for signing.
1040
+ # The resource name of the
1041
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} used for signing.
1042
+ # Check this field to verify that the intended resource was used for signing.
1043
+ # @!attribute [rw] verified_data_crc32c
1044
+ # @return [::Boolean]
1045
+ # Integrity verification field. A flag indicating whether
1046
+ # {::Google::Cloud::Kms::V1::AsymmetricSignRequest#data_crc32c AsymmetricSignRequest.data_crc32c}
1047
+ # was received by
1048
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} and used
1049
+ # for the integrity verification of the
1050
+ # {::Google::Cloud::Kms::V1::AsymmetricSignRequest#data data}. A false value of
1051
+ # this field indicates either that
1052
+ # {::Google::Cloud::Kms::V1::AsymmetricSignRequest#data_crc32c AsymmetricSignRequest.data_crc32c}
1053
+ # was left unset or that it was not delivered to
1054
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService}. If you've
1055
+ # set
1056
+ # {::Google::Cloud::Kms::V1::AsymmetricSignRequest#data_crc32c AsymmetricSignRequest.data_crc32c}
1057
+ # but this field is still false, discard the response and perform a limited
1058
+ # number of retries.
835
1059
  # @!attribute [rw] protection_level
836
1060
  # @return [::Google::Cloud::Kms::V1::ProtectionLevel]
837
- # The {::Google::Cloud::Kms::V1::ProtectionLevel ProtectionLevel} of the {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} used for signing.
1061
+ # The {::Google::Cloud::Kms::V1::ProtectionLevel ProtectionLevel} of the
1062
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} used for signing.
838
1063
  class AsymmetricSignResponse
839
1064
  include ::Google::Protobuf::MessageExts
840
1065
  extend ::Google::Protobuf::MessageExts::ClassMethods
841
1066
  end
842
1067
 
843
- # Response message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#asymmetric_decrypt KeyManagementService.AsymmetricDecrypt}.
1068
+ # Response message for
1069
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#asymmetric_decrypt KeyManagementService.AsymmetricDecrypt}.
844
1070
  # @!attribute [rw] plaintext
845
1071
  # @return [::String]
846
1072
  # The decrypted data originally encrypted with the matching public key.
847
1073
  # @!attribute [rw] plaintext_crc32c
848
1074
  # @return [::Google::Protobuf::Int64Value]
849
1075
  # Integrity verification field. A CRC32C checksum of the returned
850
- # {::Google::Cloud::Kms::V1::AsymmetricDecryptResponse#plaintext AsymmetricDecryptResponse.plaintext}. An integrity check of
851
- # {::Google::Cloud::Kms::V1::AsymmetricDecryptResponse#plaintext AsymmetricDecryptResponse.plaintext} can be performed by computing the
852
- # CRC32C checksum of {::Google::Cloud::Kms::V1::AsymmetricDecryptResponse#plaintext AsymmetricDecryptResponse.plaintext} and comparing
853
- # your results to this field. Discard the response in case of non-matching
854
- # checksum values, and perform a limited number of retries. A persistent
855
- # mismatch may indicate an issue in your computation of the CRC32C checksum.
856
- # Note: This field is defined as int64 for reasons of compatibility across
857
- # different languages. However, it is a non-negative integer, which will
858
- # never exceed 2^32-1, and can be safely downconverted to uint32 in languages
859
- # that support this type.
1076
+ # {::Google::Cloud::Kms::V1::AsymmetricDecryptResponse#plaintext AsymmetricDecryptResponse.plaintext}.
1077
+ # An integrity check of
1078
+ # {::Google::Cloud::Kms::V1::AsymmetricDecryptResponse#plaintext AsymmetricDecryptResponse.plaintext}
1079
+ # can be performed by computing the CRC32C checksum of
1080
+ # {::Google::Cloud::Kms::V1::AsymmetricDecryptResponse#plaintext AsymmetricDecryptResponse.plaintext}
1081
+ # and comparing your results to this field. Discard the response in case of
1082
+ # non-matching checksum values, and perform a limited number of retries. A
1083
+ # persistent mismatch may indicate an issue in your computation of the CRC32C
1084
+ # checksum. Note: This field is defined as int64 for reasons of compatibility
1085
+ # across different languages. However, it is a non-negative integer, which
1086
+ # will never exceed 2^32-1, and can be safely downconverted to uint32 in
1087
+ # languages that support this type.
860
1088
  # @!attribute [rw] verified_ciphertext_crc32c
861
1089
  # @return [::Boolean]
862
1090
  # Integrity verification field. A flag indicating whether
863
- # {::Google::Cloud::Kms::V1::AsymmetricDecryptRequest#ciphertext_crc32c AsymmetricDecryptRequest.ciphertext_crc32c} was received by
864
- # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} and used for the integrity verification of the
865
- # {::Google::Cloud::Kms::V1::AsymmetricDecryptRequest#ciphertext ciphertext}. A false value of this
866
- # field indicates either that {::Google::Cloud::Kms::V1::AsymmetricDecryptRequest#ciphertext_crc32c AsymmetricDecryptRequest.ciphertext_crc32c}
867
- # was left unset or that it was not delivered to {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService}. If
868
- # you've set {::Google::Cloud::Kms::V1::AsymmetricDecryptRequest#ciphertext_crc32c AsymmetricDecryptRequest.ciphertext_crc32c} but this field is
869
- # still false, discard the response and perform a limited number of retries.
1091
+ # {::Google::Cloud::Kms::V1::AsymmetricDecryptRequest#ciphertext_crc32c AsymmetricDecryptRequest.ciphertext_crc32c}
1092
+ # was received by
1093
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} and used
1094
+ # for the integrity verification of the
1095
+ # {::Google::Cloud::Kms::V1::AsymmetricDecryptRequest#ciphertext ciphertext}. A
1096
+ # false value of this field indicates either that
1097
+ # {::Google::Cloud::Kms::V1::AsymmetricDecryptRequest#ciphertext_crc32c AsymmetricDecryptRequest.ciphertext_crc32c}
1098
+ # was left unset or that it was not delivered to
1099
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService}. If you've
1100
+ # set
1101
+ # {::Google::Cloud::Kms::V1::AsymmetricDecryptRequest#ciphertext_crc32c AsymmetricDecryptRequest.ciphertext_crc32c}
1102
+ # but this field is still false, discard the response and perform a limited
1103
+ # number of retries.
870
1104
  # @!attribute [rw] protection_level
871
1105
  # @return [::Google::Cloud::Kms::V1::ProtectionLevel]
872
- # The {::Google::Cloud::Kms::V1::ProtectionLevel ProtectionLevel} of the {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} used in decryption.
1106
+ # The {::Google::Cloud::Kms::V1::ProtectionLevel ProtectionLevel} of the
1107
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} used in
1108
+ # decryption.
873
1109
  class AsymmetricDecryptResponse
874
1110
  include ::Google::Protobuf::MessageExts
875
1111
  extend ::Google::Protobuf::MessageExts::ClassMethods
876
1112
  end
877
1113
 
878
- # Response message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#mac_sign KeyManagementService.MacSign}.
1114
+ # Response message for
1115
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#mac_sign KeyManagementService.MacSign}.
879
1116
  # @!attribute [rw] name
880
1117
  # @return [::String]
881
- # The resource name of the {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} used for signing. Check
882
- # this field to verify that the intended resource was used for signing.
1118
+ # The resource name of the
1119
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} used for signing.
1120
+ # Check this field to verify that the intended resource was used for signing.
883
1121
  # @!attribute [rw] mac
884
1122
  # @return [::String]
885
1123
  # The created signature.
886
1124
  # @!attribute [rw] mac_crc32c
887
1125
  # @return [::Google::Protobuf::Int64Value]
888
1126
  # Integrity verification field. A CRC32C checksum of the returned
889
- # {::Google::Cloud::Kms::V1::MacSignResponse#mac MacSignResponse.mac}. An integrity check of
890
- # {::Google::Cloud::Kms::V1::MacSignResponse#mac MacSignResponse.mac} can be performed by computing the
891
- # CRC32C checksum of {::Google::Cloud::Kms::V1::MacSignResponse#mac MacSignResponse.mac} and comparing your
892
- # results to this field. Discard the response in case of non-matching
893
- # checksum values, and perform a limited number of retries. A persistent
894
- # mismatch may indicate an issue in your computation of the CRC32C checksum.
895
- # Note: This field is defined as int64 for reasons of compatibility across
896
- # different languages. However, it is a non-negative integer, which will
897
- # never exceed 2^32-1, and can be safely downconverted to uint32 in languages
898
- # that support this type.
1127
+ # {::Google::Cloud::Kms::V1::MacSignResponse#mac MacSignResponse.mac}. An
1128
+ # integrity check of
1129
+ # {::Google::Cloud::Kms::V1::MacSignResponse#mac MacSignResponse.mac} can be
1130
+ # performed by computing the CRC32C checksum of
1131
+ # {::Google::Cloud::Kms::V1::MacSignResponse#mac MacSignResponse.mac} and
1132
+ # comparing your results to this field. Discard the response in case of
1133
+ # non-matching checksum values, and perform a limited number of retries. A
1134
+ # persistent mismatch may indicate an issue in your computation of the CRC32C
1135
+ # checksum. Note: This field is defined as int64 for reasons of compatibility
1136
+ # across different languages. However, it is a non-negative integer, which
1137
+ # will never exceed 2^32-1, and can be safely downconverted to uint32 in
1138
+ # languages that support this type.
899
1139
  # @!attribute [rw] verified_data_crc32c
900
1140
  # @return [::Boolean]
901
1141
  # Integrity verification field. A flag indicating whether
902
- # {::Google::Cloud::Kms::V1::MacSignRequest#data_crc32c MacSignRequest.data_crc32c} was received by
903
- # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} and used for the integrity verification of the
904
- # {::Google::Cloud::Kms::V1::MacSignRequest#data data}. A false value of this field
905
- # indicates either that {::Google::Cloud::Kms::V1::MacSignRequest#data_crc32c MacSignRequest.data_crc32c} was left
906
- # unset or that it was not delivered to {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService}. If you've
907
- # set {::Google::Cloud::Kms::V1::MacSignRequest#data_crc32c MacSignRequest.data_crc32c} but this field is still false,
908
- # discard the response and perform a limited number of retries.
1142
+ # {::Google::Cloud::Kms::V1::MacSignRequest#data_crc32c MacSignRequest.data_crc32c}
1143
+ # was received by
1144
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} and used
1145
+ # for the integrity verification of the
1146
+ # {::Google::Cloud::Kms::V1::MacSignRequest#data data}. A false value of this
1147
+ # field indicates either that
1148
+ # {::Google::Cloud::Kms::V1::MacSignRequest#data_crc32c MacSignRequest.data_crc32c}
1149
+ # was left unset or that it was not delivered to
1150
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService}. If you've
1151
+ # set
1152
+ # {::Google::Cloud::Kms::V1::MacSignRequest#data_crc32c MacSignRequest.data_crc32c}
1153
+ # but this field is still false, discard the response and perform a limited
1154
+ # number of retries.
909
1155
  # @!attribute [rw] protection_level
910
1156
  # @return [::Google::Cloud::Kms::V1::ProtectionLevel]
911
- # The {::Google::Cloud::Kms::V1::ProtectionLevel ProtectionLevel} of the {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} used for signing.
1157
+ # The {::Google::Cloud::Kms::V1::ProtectionLevel ProtectionLevel} of the
1158
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} used for signing.
912
1159
  class MacSignResponse
913
1160
  include ::Google::Protobuf::MessageExts
914
1161
  extend ::Google::Protobuf::MessageExts::ClassMethods
915
1162
  end
916
1163
 
917
- # Response message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#mac_verify KeyManagementService.MacVerify}.
1164
+ # Response message for
1165
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#mac_verify KeyManagementService.MacVerify}.
918
1166
  # @!attribute [rw] name
919
1167
  # @return [::String]
920
- # The resource name of the {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} used for verification.
921
- # Check this field to verify that the intended resource was used for
922
- # verification.
1168
+ # The resource name of the
1169
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} used for
1170
+ # verification. Check this field to verify that the intended resource was
1171
+ # used for verification.
923
1172
  # @!attribute [rw] success
924
1173
  # @return [::Boolean]
925
1174
  # This field indicates whether or not the verification operation for
926
- # {::Google::Cloud::Kms::V1::MacVerifyRequest#mac MacVerifyRequest.mac} over {::Google::Cloud::Kms::V1::MacVerifyRequest#data MacVerifyRequest.data} was successful.
1175
+ # {::Google::Cloud::Kms::V1::MacVerifyRequest#mac MacVerifyRequest.mac} over
1176
+ # {::Google::Cloud::Kms::V1::MacVerifyRequest#data MacVerifyRequest.data} was
1177
+ # successful.
927
1178
  # @!attribute [rw] verified_data_crc32c
928
1179
  # @return [::Boolean]
929
1180
  # Integrity verification field. A flag indicating whether
930
- # {::Google::Cloud::Kms::V1::MacVerifyRequest#data_crc32c MacVerifyRequest.data_crc32c} was received by
931
- # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} and used for the integrity verification of the
932
- # {::Google::Cloud::Kms::V1::MacVerifyRequest#data data}. A false value of this field
933
- # indicates either that {::Google::Cloud::Kms::V1::MacVerifyRequest#data_crc32c MacVerifyRequest.data_crc32c} was left
934
- # unset or that it was not delivered to {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService}. If you've
935
- # set {::Google::Cloud::Kms::V1::MacVerifyRequest#data_crc32c MacVerifyRequest.data_crc32c} but this field is still false,
936
- # discard the response and perform a limited number of retries.
1181
+ # {::Google::Cloud::Kms::V1::MacVerifyRequest#data_crc32c MacVerifyRequest.data_crc32c}
1182
+ # was received by
1183
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} and used
1184
+ # for the integrity verification of the
1185
+ # {::Google::Cloud::Kms::V1::MacVerifyRequest#data data}. A false value of this
1186
+ # field indicates either that
1187
+ # {::Google::Cloud::Kms::V1::MacVerifyRequest#data_crc32c MacVerifyRequest.data_crc32c}
1188
+ # was left unset or that it was not delivered to
1189
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService}. If you've
1190
+ # set
1191
+ # {::Google::Cloud::Kms::V1::MacVerifyRequest#data_crc32c MacVerifyRequest.data_crc32c}
1192
+ # but this field is still false, discard the response and perform a limited
1193
+ # number of retries.
937
1194
  # @!attribute [rw] verified_mac_crc32c
938
1195
  # @return [::Boolean]
939
1196
  # Integrity verification field. A flag indicating whether
940
- # {::Google::Cloud::Kms::V1::MacVerifyRequest#mac_crc32c MacVerifyRequest.mac_crc32c} was received by
941
- # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} and used for the integrity verification of the
942
- # {::Google::Cloud::Kms::V1::MacVerifyRequest#mac data}. A false value of this field
943
- # indicates either that {::Google::Cloud::Kms::V1::MacVerifyRequest#mac_crc32c MacVerifyRequest.mac_crc32c} was left
944
- # unset or that it was not delivered to {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService}. If you've
945
- # set {::Google::Cloud::Kms::V1::MacVerifyRequest#mac_crc32c MacVerifyRequest.mac_crc32c} but this field is still false,
946
- # discard the response and perform a limited number of retries.
1197
+ # {::Google::Cloud::Kms::V1::MacVerifyRequest#mac_crc32c MacVerifyRequest.mac_crc32c}
1198
+ # was received by
1199
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService} and used
1200
+ # for the integrity verification of the
1201
+ # {::Google::Cloud::Kms::V1::MacVerifyRequest#mac data}. A false value of this
1202
+ # field indicates either that
1203
+ # {::Google::Cloud::Kms::V1::MacVerifyRequest#mac_crc32c MacVerifyRequest.mac_crc32c}
1204
+ # was left unset or that it was not delivered to
1205
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client KeyManagementService}. If you've
1206
+ # set
1207
+ # {::Google::Cloud::Kms::V1::MacVerifyRequest#mac_crc32c MacVerifyRequest.mac_crc32c}
1208
+ # but this field is still false, discard the response and perform a limited
1209
+ # number of retries.
947
1210
  # @!attribute [rw] verified_success_integrity
948
1211
  # @return [::Boolean]
949
1212
  # Integrity verification field. This value is used for the integrity
@@ -952,29 +1215,34 @@ module Google
952
1215
  # and perform a limited number of retries.
953
1216
  # @!attribute [rw] protection_level
954
1217
  # @return [::Google::Cloud::Kms::V1::ProtectionLevel]
955
- # The {::Google::Cloud::Kms::V1::ProtectionLevel ProtectionLevel} of the {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} used for verification.
1218
+ # The {::Google::Cloud::Kms::V1::ProtectionLevel ProtectionLevel} of the
1219
+ # {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion} used for
1220
+ # verification.
956
1221
  class MacVerifyResponse
957
1222
  include ::Google::Protobuf::MessageExts
958
1223
  extend ::Google::Protobuf::MessageExts::ClassMethods
959
1224
  end
960
1225
 
961
- # Response message for {::Google::Cloud::Kms::V1::KeyManagementService::Client#generate_random_bytes KeyManagementService.GenerateRandomBytes}.
1226
+ # Response message for
1227
+ # {::Google::Cloud::Kms::V1::KeyManagementService::Client#generate_random_bytes KeyManagementService.GenerateRandomBytes}.
962
1228
  # @!attribute [rw] data
963
1229
  # @return [::String]
964
1230
  # The generated data.
965
1231
  # @!attribute [rw] data_crc32c
966
1232
  # @return [::Google::Protobuf::Int64Value]
967
1233
  # Integrity verification field. A CRC32C checksum of the returned
968
- # {::Google::Cloud::Kms::V1::GenerateRandomBytesResponse#data GenerateRandomBytesResponse.data}. An integrity check of
969
- # {::Google::Cloud::Kms::V1::GenerateRandomBytesResponse#data GenerateRandomBytesResponse.data} can be performed by computing the
970
- # CRC32C checksum of {::Google::Cloud::Kms::V1::GenerateRandomBytesResponse#data GenerateRandomBytesResponse.data} and comparing your
971
- # results to this field. Discard the response in case of non-matching
972
- # checksum values, and perform a limited number of retries. A persistent
973
- # mismatch may indicate an issue in your computation of the CRC32C checksum.
974
- # Note: This field is defined as int64 for reasons of compatibility across
975
- # different languages. However, it is a non-negative integer, which will
976
- # never exceed 2^32-1, and can be safely downconverted to uint32 in languages
977
- # that support this type.
1234
+ # {::Google::Cloud::Kms::V1::GenerateRandomBytesResponse#data GenerateRandomBytesResponse.data}.
1235
+ # An integrity check of
1236
+ # {::Google::Cloud::Kms::V1::GenerateRandomBytesResponse#data GenerateRandomBytesResponse.data}
1237
+ # can be performed by computing the CRC32C checksum of
1238
+ # {::Google::Cloud::Kms::V1::GenerateRandomBytesResponse#data GenerateRandomBytesResponse.data}
1239
+ # and comparing your results to this field. Discard the response in case of
1240
+ # non-matching checksum values, and perform a limited number of retries. A
1241
+ # persistent mismatch may indicate an issue in your computation of the CRC32C
1242
+ # checksum. Note: This field is defined as int64 for reasons of compatibility
1243
+ # across different languages. However, it is a non-negative integer, which
1244
+ # will never exceed 2^32-1, and can be safely downconverted to uint32 in
1245
+ # languages that support this type.
978
1246
  class GenerateRandomBytesResponse
979
1247
  include ::Google::Protobuf::MessageExts
980
1248
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -995,17 +1263,20 @@ module Google
995
1263
  extend ::Google::Protobuf::MessageExts::ClassMethods
996
1264
  end
997
1265
 
998
- # Cloud KMS metadata for the given [google.cloud.location.Location][google.cloud.location.Location].
1266
+ # Cloud KMS metadata for the given
1267
+ # [google.cloud.location.Location][google.cloud.location.Location].
999
1268
  # @!attribute [rw] hsm_available
1000
1269
  # @return [::Boolean]
1001
1270
  # Indicates whether {::Google::Cloud::Kms::V1::CryptoKey CryptoKeys} with
1002
1271
  # {::Google::Cloud::Kms::V1::CryptoKeyVersionTemplate#protection_level protection_level}
1003
- # {::Google::Cloud::Kms::V1::ProtectionLevel::HSM HSM} can be created in this location.
1272
+ # {::Google::Cloud::Kms::V1::ProtectionLevel::HSM HSM} can be created in this
1273
+ # location.
1004
1274
  # @!attribute [rw] ekm_available
1005
1275
  # @return [::Boolean]
1006
1276
  # Indicates whether {::Google::Cloud::Kms::V1::CryptoKey CryptoKeys} with
1007
1277
  # {::Google::Cloud::Kms::V1::CryptoKeyVersionTemplate#protection_level protection_level}
1008
- # {::Google::Cloud::Kms::V1::ProtectionLevel::EXTERNAL EXTERNAL} can be created in this location.
1278
+ # {::Google::Cloud::Kms::V1::ProtectionLevel::EXTERNAL EXTERNAL} can be created in
1279
+ # this location.
1009
1280
  class LocationMetadata
1010
1281
  include ::Google::Protobuf::MessageExts
1011
1282
  extend ::Google::Protobuf::MessageExts::ClassMethods