public sealed class RawDecryptResponse : IMessage<RawDecryptResponse>, IEquatable<RawDecryptResponse>, IDeepCloneable<RawDecryptResponse>, IBufferMessage, IMessage
Reference documentation and code samples for the Google Cloud Key Management Service v1 API class RawDecryptResponse.
Response message for
[KeyManagementService.RawDecrypt][google.cloud.kms.v1.KeyManagementService.RawDecrypt].
Integrity verification field. A CRC32C checksum of the returned
[RawDecryptResponse.plaintext][google.cloud.kms.v1.RawDecryptResponse.plaintext].
An integrity check of plaintext can be performed by computing the CRC32C
checksum of plaintext and comparing your results to this field. Discard the
response in case of non-matching checksum values, and perform a limited
number of retries. A persistent mismatch may indicate an issue in your
computation of the CRC32C checksum. Note: receiving this response message
indicates that
[KeyManagementService][google.cloud.kms.v1.KeyManagementService] is able to
successfully decrypt the
[ciphertext][google.cloud.kms.v1.RawDecryptRequest.ciphertext].
Note: This field is defined as int64 for reasons of compatibility across
different languages. However, it is a non-negative integer, which will
never exceed 2^32-1, and can be safely downconverted to uint32 in languages
that support this type.
Property Value
Type
Description
System.Int64
ProtectionLevel
public ProtectionLevel ProtectionLevel { get; set; }
The [ProtectionLevel][google.cloud.kms.v1.ProtectionLevel] of the
[CryptoKeyVersion][google.cloud.kms.v1.CryptoKeyVersion] used in
decryption.
public bool VerifiedAdditionalAuthenticatedDataCrc32C { get; set; }
Integrity verification field. A flag indicating whether
[RawDecryptRequest.additional_authenticated_data_crc32c][google.cloud.kms.v1.RawDecryptRequest.additional_authenticated_data_crc32c]
was received by
[KeyManagementService][google.cloud.kms.v1.KeyManagementService] and used
for the integrity verification of additional_authenticated_data. A false
value of this field indicates either that //
[RawDecryptRequest.additional_authenticated_data_crc32c][google.cloud.kms.v1.RawDecryptRequest.additional_authenticated_data_crc32c]
was left unset or that it was not delivered to
[KeyManagementService][google.cloud.kms.v1.KeyManagementService]. If you've
set
[RawDecryptRequest.additional_authenticated_data_crc32c][google.cloud.kms.v1.RawDecryptRequest.additional_authenticated_data_crc32c]
but this field is still false, discard the response and perform a limited
number of retries.
public bool VerifiedCiphertextCrc32C { get; set; }
Integrity verification field. A flag indicating whether
[RawDecryptRequest.ciphertext_crc32c][google.cloud.kms.v1.RawDecryptRequest.ciphertext_crc32c]
was received by
[KeyManagementService][google.cloud.kms.v1.KeyManagementService] and used
for the integrity verification of the ciphertext. A false value of this
field indicates either that
[RawDecryptRequest.ciphertext_crc32c][google.cloud.kms.v1.RawDecryptRequest.ciphertext_crc32c]
was left unset or that it was not delivered to
[KeyManagementService][google.cloud.kms.v1.KeyManagementService]. If you've
set
[RawDecryptRequest.ciphertext_crc32c][google.cloud.kms.v1.RawDecryptRequest.ciphertext_crc32c]
but this field is still false, discard the response and perform a limited
number of retries.
public bool VerifiedInitializationVectorCrc32C { get; set; }
Integrity verification field. A flag indicating whether
[RawDecryptRequest.initialization_vector_crc32c][google.cloud.kms.v1.RawDecryptRequest.initialization_vector_crc32c]
was received by
[KeyManagementService][google.cloud.kms.v1.KeyManagementService] and used
for the integrity verification of initialization_vector. A false value of
this field indicates either that
[RawDecryptRequest.initialization_vector_crc32c][google.cloud.kms.v1.RawDecryptRequest.initialization_vector_crc32c]
was left unset or that it was not delivered to
[KeyManagementService][google.cloud.kms.v1.KeyManagementService]. If you've
set
[RawDecryptRequest.initialization_vector_crc32c][google.cloud.kms.v1.RawDecryptRequest.initialization_vector_crc32c]
but this field is still false, discard the response and perform a limited
number of retries.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThe webpage provides reference documentation for the \u003ccode\u003eRawDecryptResponse\u003c/code\u003e class within the Google Cloud Key Management Service v1 API for .NET.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eRawDecryptResponse\u003c/code\u003e class is used as a response message for the \u003ccode\u003eKeyManagementService.RawDecrypt\u003c/code\u003e method, used to return decrypted data.\u003c/p\u003e\n"],["\u003cp\u003eThis class has several integrity verification fields like \u003ccode\u003ePlaintextCrc32C\u003c/code\u003e, \u003ccode\u003eVerifiedAdditionalAuthenticatedDataCrc32C\u003c/code\u003e, \u003ccode\u003eVerifiedCiphertextCrc32C\u003c/code\u003e, and \u003ccode\u003eVerifiedInitializationVectorCrc32C\u003c/code\u003e, along with the \u003ccode\u003ePlaintext\u003c/code\u003e property to retrieve the decrypted data.\u003c/p\u003e\n"],["\u003cp\u003eThere are multiple versions of the \u003ccode\u003eRawDecryptResponse\u003c/code\u003e class documented, ranging from version 2.2.0 to the latest version 3.16.0.\u003c/p\u003e\n"],["\u003cp\u003eThe class also displays the \u003ccode\u003eProtectionLevel\u003c/code\u003e property showing the level of the CryptoKeyVersion used in the decryption.\u003c/p\u003e\n"]]],[],null,["# Google Cloud Key Management Service v1 API - Class RawDecryptResponse (3.18.0)\n\nVersion latestkeyboard_arrow_down\n\n- [3.18.0 (latest)](/dotnet/docs/reference/Google.Cloud.Kms.V1/latest/Google.Cloud.Kms.V1.RawDecryptResponse)\n- [3.17.0](/dotnet/docs/reference/Google.Cloud.Kms.V1/3.17.0/Google.Cloud.Kms.V1.RawDecryptResponse)\n- [3.16.0](/dotnet/docs/reference/Google.Cloud.Kms.V1/3.16.0/Google.Cloud.Kms.V1.RawDecryptResponse)\n- [3.15.0](/dotnet/docs/reference/Google.Cloud.Kms.V1/3.15.0/Google.Cloud.Kms.V1.RawDecryptResponse)\n- [3.14.0](/dotnet/docs/reference/Google.Cloud.Kms.V1/3.14.0/Google.Cloud.Kms.V1.RawDecryptResponse)\n- [3.13.0](/dotnet/docs/reference/Google.Cloud.Kms.V1/3.13.0/Google.Cloud.Kms.V1.RawDecryptResponse)\n- [3.12.0](/dotnet/docs/reference/Google.Cloud.Kms.V1/3.12.0/Google.Cloud.Kms.V1.RawDecryptResponse)\n- [3.11.0](/dotnet/docs/reference/Google.Cloud.Kms.V1/3.11.0/Google.Cloud.Kms.V1.RawDecryptResponse)\n- [3.10.0](/dotnet/docs/reference/Google.Cloud.Kms.V1/3.10.0/Google.Cloud.Kms.V1.RawDecryptResponse)\n- [3.9.0](/dotnet/docs/reference/Google.Cloud.Kms.V1/3.9.0/Google.Cloud.Kms.V1.RawDecryptResponse)\n- [3.8.0](/dotnet/docs/reference/Google.Cloud.Kms.V1/3.8.0/Google.Cloud.Kms.V1.RawDecryptResponse)\n- [3.7.0](/dotnet/docs/reference/Google.Cloud.Kms.V1/3.7.0/Google.Cloud.Kms.V1.RawDecryptResponse)\n- [3.6.0](/dotnet/docs/reference/Google.Cloud.Kms.V1/3.6.0/Google.Cloud.Kms.V1.RawDecryptResponse)\n- [3.5.0](/dotnet/docs/reference/Google.Cloud.Kms.V1/3.5.0/Google.Cloud.Kms.V1.RawDecryptResponse)\n- [3.4.0](/dotnet/docs/reference/Google.Cloud.Kms.V1/3.4.0/Google.Cloud.Kms.V1.RawDecryptResponse)\n- [3.3.0](/dotnet/docs/reference/Google.Cloud.Kms.V1/3.3.0/Google.Cloud.Kms.V1.RawDecryptResponse)\n- [3.2.0](/dotnet/docs/reference/Google.Cloud.Kms.V1/3.2.0/Google.Cloud.Kms.V1.RawDecryptResponse)\n- [3.1.0](/dotnet/docs/reference/Google.Cloud.Kms.V1/3.1.0/Google.Cloud.Kms.V1.RawDecryptResponse)\n- [3.0.0](/dotnet/docs/reference/Google.Cloud.Kms.V1/3.0.0/Google.Cloud.Kms.V1.RawDecryptResponse)\n- [2.9.0](/dotnet/docs/reference/Google.Cloud.Kms.V1/2.9.0/Google.Cloud.Kms.V1.RawDecryptResponse)\n- [2.8.0](/dotnet/docs/reference/Google.Cloud.Kms.V1/2.8.0/Google.Cloud.Kms.V1.RawDecryptResponse)\n- [2.7.0](/dotnet/docs/reference/Google.Cloud.Kms.V1/2.7.0/Google.Cloud.Kms.V1.RawDecryptResponse)\n- [2.6.0](/dotnet/docs/reference/Google.Cloud.Kms.V1/2.6.0/Google.Cloud.Kms.V1.RawDecryptResponse)\n- [2.5.0](/dotnet/docs/reference/Google.Cloud.Kms.V1/2.5.0/Google.Cloud.Kms.V1.RawDecryptResponse)\n- [2.4.0](/dotnet/docs/reference/Google.Cloud.Kms.V1/2.4.0/Google.Cloud.Kms.V1.RawDecryptResponse)\n- [2.3.0](/dotnet/docs/reference/Google.Cloud.Kms.V1/2.3.0/Google.Cloud.Kms.V1.RawDecryptResponse)\n- [2.2.0](/dotnet/docs/reference/Google.Cloud.Kms.V1/2.2.0/Google.Cloud.Kms.V1.RawDecryptResponse) \n\n public sealed class RawDecryptResponse : IMessage\u003cRawDecryptResponse\u003e, IEquatable\u003cRawDecryptResponse\u003e, IDeepCloneable\u003cRawDecryptResponse\u003e, IBufferMessage, IMessage\n\nReference documentation and code samples for the Google Cloud Key Management Service v1 API class RawDecryptResponse.\n\nResponse message for\n\\[KeyManagementService.RawDecrypt\\]\\[google.cloud.kms.v1.KeyManagementService.RawDecrypt\\]. \n\nInheritance\n-----------\n\n[object](https://learn.microsoft.com/dotnet/api/system.object) \\\u003e RawDecryptResponse \n\nImplements\n----------\n\n[IMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IMessage-1.html)[RawDecryptResponse](/dotnet/docs/reference/Google.Cloud.Kms.V1/latest/Google.Cloud.Kms.V1.RawDecryptResponse), [IEquatable](https://learn.microsoft.com/dotnet/api/system.iequatable-1)[RawDecryptResponse](/dotnet/docs/reference/Google.Cloud.Kms.V1/latest/Google.Cloud.Kms.V1.RawDecryptResponse), [IDeepCloneable](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IDeepCloneable-1.html)[RawDecryptResponse](/dotnet/docs/reference/Google.Cloud.Kms.V1/latest/Google.Cloud.Kms.V1.RawDecryptResponse), [IBufferMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IBufferMessage.html), [IMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IMessage.html) \n\nInherited Members\n-----------------\n\n[object.GetHashCode()](https://learn.microsoft.com/dotnet/api/system.object.gethashcode) \n[object.GetType()](https://learn.microsoft.com/dotnet/api/system.object.gettype) \n[object.ToString()](https://learn.microsoft.com/dotnet/api/system.object.tostring)\n\nNamespace\n---------\n\n[Google.Cloud.Kms.V1](/dotnet/docs/reference/Google.Cloud.Kms.V1/latest/Google.Cloud.Kms.V1)\n\nAssembly\n--------\n\nGoogle.Cloud.Kms.V1.dll\n\nConstructors\n------------\n\n### RawDecryptResponse()\n\n public RawDecryptResponse()\n\n### RawDecryptResponse(RawDecryptResponse)\n\n public RawDecryptResponse(RawDecryptResponse other)\n\nProperties\n----------\n\n### Plaintext\n\n public ByteString Plaintext { get; set; }\n\nThe decrypted data.\n\n### PlaintextCrc32C\n\n public long? PlaintextCrc32C { get; set; }\n\nIntegrity verification field. A CRC32C checksum of the returned\n\\[RawDecryptResponse.plaintext\\]\\[google.cloud.kms.v1.RawDecryptResponse.plaintext\\].\nAn integrity check of plaintext can be performed by computing the CRC32C\nchecksum of plaintext and comparing your results to this field. Discard the\nresponse in case of non-matching checksum values, and perform a limited\nnumber of retries. A persistent mismatch may indicate an issue in your\ncomputation of the CRC32C checksum. Note: receiving this response message\nindicates that\n\\[KeyManagementService\\]\\[google.cloud.kms.v1.KeyManagementService\\] is able to\nsuccessfully decrypt the\n\\[ciphertext\\]\\[google.cloud.kms.v1.RawDecryptRequest.ciphertext\\].\nNote: This field is defined as int64 for reasons of compatibility across\ndifferent languages. However, it is a non-negative integer, which will\nnever exceed 2\\^32-1, and can be safely downconverted to uint32 in languages\nthat support this type.\n\n### ProtectionLevel\n\n public ProtectionLevel ProtectionLevel { get; set; }\n\nThe \\[ProtectionLevel\\]\\[google.cloud.kms.v1.ProtectionLevel\\] of the\n\\[CryptoKeyVersion\\]\\[google.cloud.kms.v1.CryptoKeyVersion\\] used in\ndecryption.\n\n### VerifiedAdditionalAuthenticatedDataCrc32C\n\n public bool VerifiedAdditionalAuthenticatedDataCrc32C { get; set; }\n\nIntegrity verification field. A flag indicating whether\n\\[RawDecryptRequest.additional_authenticated_data_crc32c\\]\\[google.cloud.kms.v1.RawDecryptRequest.additional_authenticated_data_crc32c\\]\nwas received by\n\\[KeyManagementService\\]\\[google.cloud.kms.v1.KeyManagementService\\] and used\nfor the integrity verification of additional_authenticated_data. A false\nvalue of this field indicates either that //\n\\[RawDecryptRequest.additional_authenticated_data_crc32c\\]\\[google.cloud.kms.v1.RawDecryptRequest.additional_authenticated_data_crc32c\\]\nwas left unset or that it was not delivered to\n\\[KeyManagementService\\]\\[google.cloud.kms.v1.KeyManagementService\\]. If you've\nset\n\\[RawDecryptRequest.additional_authenticated_data_crc32c\\]\\[google.cloud.kms.v1.RawDecryptRequest.additional_authenticated_data_crc32c\\]\nbut this field is still false, discard the response and perform a limited\nnumber of retries.\n\n### VerifiedCiphertextCrc32C\n\n public bool VerifiedCiphertextCrc32C { get; set; }\n\nIntegrity verification field. A flag indicating whether\n\\[RawDecryptRequest.ciphertext_crc32c\\]\\[google.cloud.kms.v1.RawDecryptRequest.ciphertext_crc32c\\]\nwas received by\n\\[KeyManagementService\\]\\[google.cloud.kms.v1.KeyManagementService\\] and used\nfor the integrity verification of the ciphertext. A false value of this\nfield indicates either that\n\\[RawDecryptRequest.ciphertext_crc32c\\]\\[google.cloud.kms.v1.RawDecryptRequest.ciphertext_crc32c\\]\nwas left unset or that it was not delivered to\n\\[KeyManagementService\\]\\[google.cloud.kms.v1.KeyManagementService\\]. If you've\nset\n\\[RawDecryptRequest.ciphertext_crc32c\\]\\[google.cloud.kms.v1.RawDecryptRequest.ciphertext_crc32c\\]\nbut this field is still false, discard the response and perform a limited\nnumber of retries.\n\n### VerifiedInitializationVectorCrc32C\n\n public bool VerifiedInitializationVectorCrc32C { get; set; }\n\nIntegrity verification field. A flag indicating whether\n\\[RawDecryptRequest.initialization_vector_crc32c\\]\\[google.cloud.kms.v1.RawDecryptRequest.initialization_vector_crc32c\\]\nwas received by\n\\[KeyManagementService\\]\\[google.cloud.kms.v1.KeyManagementService\\] and used\nfor the integrity verification of initialization_vector. A false value of\nthis field indicates either that\n\\[RawDecryptRequest.initialization_vector_crc32c\\]\\[google.cloud.kms.v1.RawDecryptRequest.initialization_vector_crc32c\\]\nwas left unset or that it was not delivered to\n\\[KeyManagementService\\]\\[google.cloud.kms.v1.KeyManagementService\\]. If you've\nset\n\\[RawDecryptRequest.initialization_vector_crc32c\\]\\[google.cloud.kms.v1.RawDecryptRequest.initialization_vector_crc32c\\]\nbut this field is still false, discard the response and perform a limited\nnumber of retries."]]
