Reference documentation and code samples for the Google Cloud Key Management Service v1 API enum ImportJob.Types.ImportMethod.
[ImportMethod][google.cloud.kms.v1.ImportJob.ImportMethod] describes the
key wrapping method chosen for this
[ImportJob][google.cloud.kms.v1.ImportJob].
This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping
scheme defined in the PKCS #11 standard. In summary, this involves
wrapping the raw key with an ephemeral AES key, and wrapping the
ephemeral AES key with a 3072 bit RSA key. For more details, see
RSA AES key wrap
mechanism.
RsaOaep3072Sha256
This ImportMethod represents RSAES-OAEP with a 3072 bit RSA key. The
key material to be imported is wrapped directly with the RSA key. Due
to technical limitations of RSA wrapping, this method cannot be used to
wrap RSA keys for import.
RsaOaep3072Sha256Aes256
This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping
scheme defined in the PKCS #11 standard. In summary, this involves
wrapping the raw key with an ephemeral AES key, and wrapping the
ephemeral AES key with a 3072 bit RSA key. For more details, see
RSA AES key wrap
mechanism.
RsaOaep4096Sha1Aes256
This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping
scheme defined in the PKCS #11 standard. In summary, this involves
wrapping the raw key with an ephemeral AES key, and wrapping the
ephemeral AES key with a 4096 bit RSA key. For more details, see
RSA AES key wrap
mechanism.
RsaOaep4096Sha256
This ImportMethod represents RSAES-OAEP with a 4096 bit RSA key. The
key material to be imported is wrapped directly with the RSA key. Due
to technical limitations of RSA wrapping, this method cannot be used to
wrap RSA keys for import.
RsaOaep4096Sha256Aes256
This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping
scheme defined in the PKCS #11 standard. In summary, this involves
wrapping the raw key with an ephemeral AES key, and wrapping the
ephemeral AES key with a 4096 bit RSA key. For more details, see
RSA AES key wrap
mechanism.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThis page provides reference documentation for the \u003ccode\u003eImportJob.Types.ImportMethod\u003c/code\u003e enum within the Google Cloud Key Management Service v1 API for .NET, detailing various key wrapping methods.\u003c/p\u003e\n"],["\u003cp\u003eThe latest version of the Google Cloud Key Management Service v1 API documented here is 3.16.0, and the documentation also covers versions back to 2.2.0, each linked for access.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eImportJob.Types.ImportMethod\u003c/code\u003e enum defines several key wrapping methods, including \u003ccode\u003eRsaOaep3072Sha1Aes256\u003c/code\u003e, \u003ccode\u003eRsaOaep3072Sha256\u003c/code\u003e, \u003ccode\u003eRsaOaep4096Sha1Aes256\u003c/code\u003e, \u003ccode\u003eRsaOaep4096Sha256\u003c/code\u003e, and \u003ccode\u003eRsaOaep4096Sha256Aes256\u003c/code\u003e as well as an \u003ccode\u003eUnspecified\u003c/code\u003e field.\u003c/p\u003e\n"],["\u003cp\u003eSpecific implementation details of methods like \u003ccode\u003eRsaOaep3072Sha1Aes256\u003c/code\u003e are provided, referencing the PKCS #11 standard and explaining the use of ephemeral AES keys wrapped with RSA keys of varying bit lengths.\u003c/p\u003e\n"],["\u003cp\u003eSome RSA-based methods like \u003ccode\u003eRsaOaep3072Sha256\u003c/code\u003e and \u003ccode\u003eRsaOaep4096Sha256\u003c/code\u003e are highlighted as unsuitable for wrapping RSA keys due to technical constraints.\u003c/p\u003e\n"]]],[],null,[]]
