public sealed class CryptoKey : IMessage<CryptoKey>, IEquatable<CryptoKey>, IDeepCloneable<CryptoKey>, IBufferMessage, IMessage
Reference documentation and code samples for the Google Cloud Data Loss Prevention v2 API class CryptoKey.
This is a data encryption key (DEK) (as opposed to
a key encryption key (KEK) stored by Cloud Key Management Service
(Cloud KMS).
When using Cloud KMS to wrap or unwrap a DEK, be sure to set an appropriate
IAM policy on the KEK to ensure an attacker cannot
unwrap the DEK.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThis webpage provides documentation for the \u003ccode\u003eCryptoKey\u003c/code\u003e class within the Google Cloud Data Loss Prevention v2 API for .NET, with version 4.9.0 being the current version of focus.\u003c/p\u003e\n"],["\u003cp\u003e\u003ccode\u003eCryptoKey\u003c/code\u003e is a data encryption key (DEK) used in conjunction with Cloud Key Management Service (Cloud KMS), which stores key encryption keys (KEKs) and it has several versions documented on this page, from 4.16.0 (latest) down to 2.15.0.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eCryptoKey\u003c/code\u003e class implements multiple interfaces, including \u003ccode\u003eIMessage\u003c/code\u003e, \u003ccode\u003eIEquatable\u003c/code\u003e, \u003ccode\u003eIDeepCloneable\u003c/code\u003e, and \u003ccode\u003eIBufferMessage\u003c/code\u003e, and it inherits from \u003ccode\u003eobject\u003c/code\u003e.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eCryptoKey\u003c/code\u003e class has properties such as \u003ccode\u003eKmsWrapped\u003c/code\u003e, \u003ccode\u003eSourceCase\u003c/code\u003e, \u003ccode\u003eTransient\u003c/code\u003e, and \u003ccode\u003eUnwrapped\u003c/code\u003e, to manage various aspects of key handling and different key types, and there are also public constructors to instantiate the class.\u003c/p\u003e\n"]]],[],null,[]]