public sealed class EncryptionKey : IEquatable<EncryptionKey>
An AES-256 key passed to the Google Cloud Storage servers via headers to allow objects to be encrypted at
rest using a client-supplied key rather than a server-supplied default key. An alternative to
customer-supplied encryption keys is to use customer-managed encryption keys, via Cloud KMS.
A "don't encrypt" key, used in call-specific options to indicate that a particular request should
not use encryption even if the client has a default encryption key.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThe latest version available for \u003ccode\u003eEncryptionKey\u003c/code\u003e within the \u003ccode\u003eGoogle.Cloud.Storage.V1\u003c/code\u003e library is 4.11.0, and the page lists versions going back to 3.4.0.\u003c/p\u003e\n"],["\u003cp\u003e\u003ccode\u003eEncryptionKey\u003c/code\u003e is an AES-256 key used for client-supplied encryption at rest in Google Cloud Storage, offering an alternative to server-supplied or customer-managed keys.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eEncryptionKey\u003c/code\u003e class includes properties like \u003ccode\u003eBase64Hash\u003c/code\u003e and \u003ccode\u003eBase64Key\u003c/code\u003e, which are 45-character base64 representations of the key's hash and key data, respectively, or \u003ccode\u003enull\u003c/code\u003e for the \u003ccode\u003eNone\u003c/code\u003e property.\u003c/p\u003e\n"],["\u003cp\u003eYou can create encryption keys using raw bytes via the \u003ccode\u003eCreate()\u003c/code\u003e method or generate random encryption keys using the \u003ccode\u003eGenerate()\u003c/code\u003e method.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eModifyRequest\u003c/code\u003e method allows for the addition of encryption headers to an \u003ccode\u003eHttpRequestMessage\u003c/code\u003e, unless the key is \u003ccode\u003eNone\u003c/code\u003e.\u003c/p\u003e\n"]]],[],null,[]]
