[ImportMethod][google.cloud.kms.v1.ImportJob.ImportMethod] describes the
key wrapping method chosen for this
[ImportJob][google.cloud.kms.v1.ImportJob].
This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping
scheme defined in the PKCS #11 standard. In summary, this involves
wrapping the raw key with an ephemeral AES key, and wrapping the
ephemeral AES key with a 3072 bit RSA key. For more details, see
RSA AES key wrap
mechanism.
RsaOaep4096Sha1Aes256
This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping
scheme defined in the PKCS #11 standard. In summary, this involves
wrapping the raw key with an ephemeral AES key, and wrapping the
ephemeral AES key with a 4096 bit RSA key. For more details, see
RSA AES key wrap
mechanism.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThe content describes different versions of the \u003ccode\u003eImportMethod\u003c/code\u003e enum within the \u003ccode\u003eGoogle.Cloud.Kms.V1\u003c/code\u003e namespace, ranging from version 2.2.0 to the latest version 3.16.0.\u003c/p\u003e\n"],["\u003cp\u003e\u003ccode\u003eImportMethod\u003c/code\u003e specifies the key wrapping technique used for an \u003ccode\u003eImportJob\u003c/code\u003e within Google Cloud KMS.\u003c/p\u003e\n"],["\u003cp\u003eThere are three fields available for the \u003ccode\u003eImportMethod\u003c/code\u003e enum: \u003ccode\u003eRsaOaep3072Sha1Aes256\u003c/code\u003e, \u003ccode\u003eRsaOaep4096Sha1Aes256\u003c/code\u003e, and \u003ccode\u003eUnspecified\u003c/code\u003e.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eRsaOaep3072Sha1Aes256\u003c/code\u003e and \u003ccode\u003eRsaOaep4096Sha1Aes256\u003c/code\u003e fields use the CKM_RSA_AES_KEY_WRAP mechanism, wrapping the raw key with an ephemeral AES key and further wrapping that AES key with either a 3072-bit or 4096-bit RSA key, respectively.\u003c/p\u003e\n"]]],[],null,[]]
