Reference documentation and code samples for the Google Cloud Key Management Service v1 API enum ImportJob.Types.ImportMethod.
[ImportMethod][google.cloud.kms.v1.ImportJob.ImportMethod] describes the
key wrapping method chosen for this
[ImportJob][google.cloud.kms.v1.ImportJob].
This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping
scheme defined in the PKCS #11 standard. In summary, this involves
wrapping the raw key with an ephemeral AES key, and wrapping the
ephemeral AES key with a 3072 bit RSA key. For more details, see
RSA AES key wrap
mechanism.
RsaOaep3072Sha256
This ImportMethod represents RSAES-OAEP with a 3072 bit RSA key. The
key material to be imported is wrapped directly with the RSA key. Due
to technical limitations of RSA wrapping, this method cannot be used to
wrap RSA keys for import.
RsaOaep3072Sha256Aes256
This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping
scheme defined in the PKCS #11 standard. In summary, this involves
wrapping the raw key with an ephemeral AES key, and wrapping the
ephemeral AES key with a 3072 bit RSA key. For more details, see
RSA AES key wrap
mechanism.
RsaOaep4096Sha1Aes256
This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping
scheme defined in the PKCS #11 standard. In summary, this involves
wrapping the raw key with an ephemeral AES key, and wrapping the
ephemeral AES key with a 4096 bit RSA key. For more details, see
RSA AES key wrap
mechanism.
RsaOaep4096Sha256
This ImportMethod represents RSAES-OAEP with a 4096 bit RSA key. The
key material to be imported is wrapped directly with the RSA key. Due
to technical limitations of RSA wrapping, this method cannot be used to
wrap RSA keys for import.
RsaOaep4096Sha256Aes256
This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping
scheme defined in the PKCS #11 standard. In summary, this involves
wrapping the raw key with an ephemeral AES key, and wrapping the
ephemeral AES key with a 4096 bit RSA key. For more details, see
RSA AES key wrap
mechanism.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThis page provides reference documentation for the \u003ccode\u003eImportJob.Types.ImportMethod\u003c/code\u003e enum within the Google Cloud Key Management Service v1 API, which is used for specifying key wrapping methods.\u003c/p\u003e\n"],["\u003cp\u003eThe latest version documented is 3.16.0, and the page includes a list of versions ranging from 2.2.0 to 3.16.0 of this enum, with corresponding links to each version's documentation.\u003c/p\u003e\n"],["\u003cp\u003eThe enum defines several key wrapping methods, including \u003ccode\u003eRsaOaep3072Sha1Aes256\u003c/code\u003e, \u003ccode\u003eRsaOaep3072Sha256\u003c/code\u003e, \u003ccode\u003eRsaOaep4096Sha1Aes256\u003c/code\u003e, \u003ccode\u003eRsaOaep4096Sha256\u003c/code\u003e and their respective descriptions, as well as \u003ccode\u003eRsaOaep3072Sha256Aes256\u003c/code\u003e, \u003ccode\u003eRsaOaep4096Sha256Aes256\u003c/code\u003e, and \u003ccode\u003eUnspecified\u003c/code\u003e.\u003c/p\u003e\n"],["\u003cp\u003eThe documented key wrapping schemes include those defined in the PKCS #11 standard, such as CKM_RSA_AES_KEY_WRAP, which involve using either a 3072 or 4096 bit RSA key to wrap an ephemeral AES key that in turn wraps the raw key.\u003c/p\u003e\n"],["\u003cp\u003eThere are a couple of methods that will not be able to wrap RSA keys for import due to technical limitations of RSA wrapping, specifically the \u003ccode\u003eRsaOaep3072Sha256\u003c/code\u003e and \u003ccode\u003eRsaOaep4096Sha256\u003c/code\u003e methods.\u003c/p\u003e\n"]]],[],null,[]]
