public interface KmsEnvelopeAeadKeyFormatOrBuilder
extends com.google.protobuf.MessageLiteOrBuilder
| Modifier and Type | Method and Description |
|---|---|
KeyTemplate |
getDekTemplate()
Key template of the Data Encryption Key, e.g., AesCtrHmacAeadKeyFormat.
|
String |
getKekUri()
Required.
|
com.google.protobuf.ByteString |
getKekUriBytes()
Required.
|
boolean |
hasDekTemplate()
Key template of the Data Encryption Key, e.g., AesCtrHmacAeadKeyFormat.
|
String getKekUri()
Required. The location of the KEK in a remote KMS. With Google Cloud KMS, valid values have this format: gcp-kms://projects/*/locations/*/keyRings/*/cryptoKeys/*. With AWS KMS, valid values have this format: aws-kms://arn:aws:kms:<region>:<account-id>:key/<key-id>
string kek_uri = 1;com.google.protobuf.ByteString getKekUriBytes()
Required. The location of the KEK in a remote KMS. With Google Cloud KMS, valid values have this format: gcp-kms://projects/*/locations/*/keyRings/*/cryptoKeys/*. With AWS KMS, valid values have this format: aws-kms://arn:aws:kms:<region>:<account-id>:key/<key-id>
string kek_uri = 1;boolean hasDekTemplate()
Key template of the Data Encryption Key, e.g., AesCtrHmacAeadKeyFormat. Required.
.google.crypto.tink.KeyTemplate dek_template = 2;KeyTemplate getDekTemplate()
Key template of the Data Encryption Key, e.g., AesCtrHmacAeadKeyFormat. Required.
.google.crypto.tink.KeyTemplate dek_template = 2;