Reference documentation and code samples for the Google Cloud Key Management Service v1 API enum ImportJob.Types.ImportMethod.
[ImportMethod][google.cloud.kms.v1.ImportJob.ImportMethod] describes the
key wrapping method chosen for this
[ImportJob][google.cloud.kms.v1.ImportJob].
This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping
scheme defined in the PKCS #11 standard. In summary, this involves
wrapping the raw key with an ephemeral AES key, and wrapping the
ephemeral AES key with a 3072 bit RSA key. For more details, see
RSA AES key wrap
mechanism.
RsaOaep3072Sha256
This ImportMethod represents RSAES-OAEP with a 3072 bit RSA key. The
key material to be imported is wrapped directly with the RSA key. Due
to technical limitations of RSA wrapping, this method cannot be used to
wrap RSA keys for import.
RsaOaep3072Sha256Aes256
This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping
scheme defined in the PKCS #11 standard. In summary, this involves
wrapping the raw key with an ephemeral AES key, and wrapping the
ephemeral AES key with a 3072 bit RSA key. For more details, see
RSA AES key wrap
mechanism.
RsaOaep4096Sha1Aes256
This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping
scheme defined in the PKCS #11 standard. In summary, this involves
wrapping the raw key with an ephemeral AES key, and wrapping the
ephemeral AES key with a 4096 bit RSA key. For more details, see
RSA AES key wrap
mechanism.
RsaOaep4096Sha256
This ImportMethod represents RSAES-OAEP with a 4096 bit RSA key. The
key material to be imported is wrapped directly with the RSA key. Due
to technical limitations of RSA wrapping, this method cannot be used to
wrap RSA keys for import.
RsaOaep4096Sha256Aes256
This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping
scheme defined in the PKCS #11 standard. In summary, this involves
wrapping the raw key with an ephemeral AES key, and wrapping the
ephemeral AES key with a 4096 bit RSA key. For more details, see
RSA AES key wrap
mechanism.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThis document provides reference documentation for the \u003ccode\u003eImportJob.Types.ImportMethod\u003c/code\u003e enum within the Google Cloud Key Management Service v1 API.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eImportMethod\u003c/code\u003e enum specifies the key wrapping methods available for \u003ccode\u003eImportJob\u003c/code\u003e, which include various RSA-based methods such as \u003ccode\u003eRsaOaep3072Sha256\u003c/code\u003e and \u003ccode\u003eRsaOaep4096Sha256\u003c/code\u003e.\u003c/p\u003e\n"],["\u003cp\u003eMultiple versions of the API documentation are available, ranging from version 2.2.0 up to the latest version 3.16.0, with this particular page focusing on the 3.9.0 version.\u003c/p\u003e\n"],["\u003cp\u003eThere are key wrapping schemes defined in the PKCS #11 standard, such as \u003ccode\u003eRsaOaep3072Sha1Aes256\u003c/code\u003e, \u003ccode\u003eRsaOaep3072Sha256Aes256\u003c/code\u003e, \u003ccode\u003eRsaOaep4096Sha1Aes256\u003c/code\u003e, and \u003ccode\u003eRsaOaep4096Sha256Aes256\u003c/code\u003e, which involve wrapping a raw key with an ephemeral AES key, and wrapping that key with either a 3072-bit or 4096-bit RSA key.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eUnspecified\u003c/code\u003e field in the enum indicates a method that is not specifically defined for key wrapping, while methods like \u003ccode\u003eRsaOaep3072Sha256\u003c/code\u003e and \u003ccode\u003eRsaOaep4096Sha256\u003c/code\u003e cannot be used to wrap RSA keys for import due to technical limitations.\u003c/p\u003e\n"]]],[],null,[]]
