This tag is for questions about Google Cloud KMS, a Google Cloud Platform service which allows developers to store and make use of encryption keys to secure data.
Questions tagged [google-cloud-kms]
230 questions
0
votes
0 answers
GCP KMS Signing JWT using Python
I am new to GCP, I created RSA_SIGN_PKCS1_2048_SHA256 for ASYMMETRIC_SIGN purpose.
Now I have to sign a JWT header and payload before I send request to another Webservice(which already has my Public key).
JWT Header
{
"alg": RS256
…
anthony
- 1
- 1
0
votes
0 answers
Google cloud KMS permission issue when using Spring Cloud GCP Core to import credentials
I followed the Spring Cloud GCP documentation to import credentials with spring.cloud.gcp.credentials.encoded-key
and I tried to call KeyManagementServiceClient.asymmetricSign to sign some data
but there's an error that…
0
votes
1 answer
Why does my Java Base64 decode give me different results each run?
Effectively, this is my code (irrelevant stuff removed):
public enum GoogleCertificateProvider {
...
public byte[] signDigest(Digest digest) {
AsymmetricSignResponse result = client.asymmetricSign(keyVersionName, digest);
…
gear4
- 745
- 6
- 13
0
votes
1 answer
400 Error on KMS Permissions when creating a VM in GCP using a custom service account
I'm using Terraform to create a VM instance and Network, Compute Disk, that gets attached to said instance, a Snapshot of that disk and a KMS Key Ring and key to encrypt the data.
I authenticate to GCP using a Service Account created by myself,…
aiana
- 21
- 3
0
votes
1 answer
Does gcp's java kms client supports creating "EXTERNAL" keys?
could not find any official example in https://cloud.google.com/kms/docs/samples,
on how to create an EXTERNAL key using gcp's java kms client.
liorn
- 1
0
votes
1 answer
Google Cloud KMS: The checksum in field ciphertext_crc32c did not match the data in field ciphertext
I am having issues setting up a system to encrypt and decrypt data in my Node.js backend. I am following this guide in the process.
I wrote a helper class KMSEncryption to abstract the logic from the example. Here's the code where I call it:
const…
FrenchMajesty
- 1,101
- 2
- 14
- 29
0
votes
1 answer
(gcloud.kms.encrypt) Failed to read plaintext file
I want to encrypt a key file with the gcloud command line tool.
The command I am running is:
gcloud kms encrypt --project=pname --location=global --keyring=keyring \
--key=key-credential…
user2212461
- 3,105
- 8
- 49
- 87
0
votes
1 answer
Uploading Custom Private Keys for use in Google Cloud KMS
Topic - Google Cloud KMS and support for custom keys
I was exploring the documentation for the google cloud KMS. It mentions that the Cloud KMS is more of management service that helps controlling and managing the DEKs which are used by google in 2…
Murli Krishnan
- 35
- 5
0
votes
1 answer
Encrypting Multiple Items with Cloud KMS
How to invoke encryption API when we have multiple data to be encrypted at a single time? Suppose if we have 10 records and our requirement is to use encryption API only once. Then how it can be done?
Ashish Sahu
- 23
- 1
0
votes
1 answer
Key rotation in Google Cloud KMS
I have set the key rotation duration to 1 day in my google service account and I want to decrypt the older ciphertext with the latest generated key. But how can I get the latest key details? Please help here.
Ashish Sahu
- 23
- 1
0
votes
1 answer
How to manage your own Master Key in Gcloud KMS
How to have one Master key in Gcloud and create Data Keys to encrypt.
And using the Master Key to decrypt the actual data.?
This is possible in AWS KMS. How to implement the same in Gcloud?
Thanks
Rajesh Deb
- 23
- 1
- 5
0
votes
1 answer
GCP - DLP - Decryption failed: the ciphertext is invalid error when using KMS wrapped key
While trying out on a POC with GCP DLP, facing the below issue:
log:
Received the following error message from Cloud KMS when unwrapping KmsWrappedCryptoKey
…
Akhil Ghatiki
- 1,140
- 12
- 29
0
votes
1 answer
IllegalAccessError: tried to access field com.google.protobuf.AbstractMessage.memoizedSize while using KMS decrypt
Am facing the following error while trying to decrpyt a cipher string using Google KSM SDK version 1.40.0.
Code used:
try (KeyManagementServiceClient keyManagementServiceClient = KeyManagementServiceClient.create()) {
CryptoKeyName name =…
vizsatiz
- 1,933
- 1
- 17
- 36
0
votes
1 answer
Using Google Cloud KMS on behalf of user
I have a CLI tool that interacts with Google KMS. In order for it to work, I fetch the user credentials as a JSON file which is stored on disk. Now a new requirement came along. I need to make a web app out of this CLI tool. The web app will be…
Liviu
- 1,023
- 2
- 12
- 33
0
votes
2 answers
C/C++ interface for Google Cloud KMS API
I find it extraordinary that there isn't a PKCS#11 interface let alone the fact there is support for C#, Go, Java, Node.JS, PHP, Python and Ruby but no direct API support for C/C++. Did I miss something? Is it just a REST interface where you have to…
Jon Scobie
- 490
- 4
- 10