Class CryptoKey (3.1.1)

  CryptoKey 
 ( 
 mapping 
 = 
 None 
 , 
 * 
 , 
 ignore_unknown_fields 
 = 
 False 
 , 
 ** 
 kwargs 
 )

This is a data encryption key (DEK) (as opposed to a key encryption key (KEK) stored by KMS). When using KMS to wrap/unwrap DEKs, be sure to set an appropriate IAM policy on the KMS CryptoKey (KEK) to ensure an attacker cannot unwrap the data crypto key.

Attributes

Name

Description

transient

 google.cloud.dlp_v2.types.TransientCryptoKey

Transient crypto key

unwrapped

 google.cloud.dlp_v2.types.UnwrappedCryptoKey

Unwrapped crypto key

kms_wrapped

 google.cloud.dlp_v2.types.KmsWrappedCryptoKey

Kms wrapped key

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License , and code samples are licensed under the Apache 2.0 License . For details, see the Google Developers Site Policies . Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-09-04 UTC.

Design a Mobile Site

View Site in Mobile | Classic

Share by:

Class CryptoKey (3.1.1) Stay organized with collections Save and categorize content based on your preferences.

Attributes

Class CryptoKey (3.1.1)