This tag is for questions about Google Cloud KMS, a Google Cloud Platform service which allows developers to store and make use of encryption keys to secure data.
Questions tagged [google-cloud-kms]
230 questions
0
votes
2 answers
C# Hash and Verify JWT using Google KMS
We need to hash and verify the JWT token using a custom AsymmetricSecurityKey which uses Google Cloud KMS API to sign/verify the token.
The hash logic is working fine, here is implementation:
public override byte[] Sign(byte[] input)
{
string…
Ahmed Yehia
- 138
- 1
- 8
0
votes
0 answers
GCP Cloud KMS Authorization failure using service account
I am following instructions as per link to use Service account authorization without OAuth to create a key ring. https://developers.google.com/identity/protocols/OAuth2ServiceAccount#jwt-auth
I am getting an authorization error: Here's my command. …
0
votes
0 answers
404 Error regarding unrapping KMS Crypto key
Seeing the following error when attempting to unwrap KMS key. Key ring exists in us-east1
google.api_core.exceptions.NotFound: 404 Received the following error message from Cloud KMS when unwrapping KmsWrappedCryptoKey…
scotbotmosh
- 11
- 4
0
votes
0 answers
googleapi: Error 403: Permission 'cloudkms.cryptoKeyVersions.useToEncrypt' denied on resource
I am using golang as backend language using Google Cloud KMS. I have enabled KMS service and created keyrings in Cryptographic Keys tabs.
Assigned Cloud KMS CryptoKey Encrypter/Decrypter role to google user and service account, though it returns…
user6016913
- 181
- 2
- 10
0
votes
0 answers
Encrypting and decrypting data with a symmetric key
I have encrypted file inside the bucket in storage and now I am decrypting that file in my application using java programming like below-
public static byte[] decrypt(byte[] ciphertext) throws Exception {
DecryptResponse response = null;
try…
0
votes
1 answer
NodeJs crypto key create(google kms key import) NodeJs
i try import my pem key to Google KMS(with hsm support). I have google guide how it create with openssl:
Wrap the key
Generate a temporary random AES key that is 32 bytes long.
openssl rand -out temp_aes_key.bin 32
Wrap the temporary AES key with…
0
votes
1 answer
Digital Signature of Google Cloud Function response message
I try to sign a response message using Google Cloud KMS.
But immediately get an error.
index.js:
// Imports the Google Cloud client library
const kms = require('@google-cloud/kms');
exports.helloKms = (req, res) => {
let message =…
BT3
- 433
- 6
- 21
0
votes
1 answer
Cloud Composer airflow webserver issue with KMS
I'm attempting to utilize the KMS library in one of my DAGs which is running the PythonOperator, but I'm encountering an error in the airflow webserver:
details = "Cloud Key Management Service (KMS) API has not been used in project…
jpoudroux
- 1
- 1
0
votes
2 answers
Encrypt Mongodb with Google Cloud Key Management Service
Is it possible to use Google KMS with Mongodb server on Ubuntu 18.04 (GCP) to encrypt data at rest? What are the requirements? How is it done? I want to use mongodb encryption feature for additional security.
The documentation mentions KMIP protocol…
Salitha
- 1,022
- 1
- 12
- 32
0
votes
1 answer
Can't generate valid jwt signature with google kms
I am using Google KMS (https://cloud.google.com/kms/) with an asymmetric signing key to sign JSON Web tokens (jwt) in a node.js application.
I am able to create header and payload and with the Google KMS nodejs library…
Raman
- 548
- 1
- 7
- 17
0
votes
2 answers
Can Google Cloud HSM host KEK's for local Oracle databases TDE?
We are currently looking for a setup to implement Transparent Data Encyption on Oracle databases.
We are looking for Cloud HSM solutions. Can Google Cloud HSM interface with local Oracle databases for TDE encryption?
Thanks!
Olivier
Olivier
- 1
0
votes
1 answer
How to store/retrieve KMS encrypted .enc file in/from kubernetes secrets
I have an .enc file that has been encrypted by a GCP KMS key. I stored this encrypted file as a secret in kubernetes . Kubernetes cluster has permissions to access KMS key. Now i want to decrypt stored encrypted file using key when container is…
Nipu
- 653
- 1
- 8
- 15
0
votes
1 answer
How to set protection level for key ring using java KMS API?
I need to set ProtectionLevel to HSM for a key ring for both cases during creation and for an existing one.
I am trying to use the same way to set this option as any other option:
CreateKeyRingRequest.newBuilder().//I see nothing to set…
Septentrio
- 57
- 6
0
votes
1 answer
Calling Google Cloud KMS from AWS Lambda
I'm new to Google's Cloud services and to Java, but I'm trying to set up a Java function on AWS Lambda that makes a call to Google Cloud KMS. I have working Java code locally, but from what I can tell the only way to authenticate the Google client…
dvanderb
- 757
- 2
- 8
- 20
0
votes
2 answers
Can I use a 3DES key within google KMS HSM?
I have been looking across the different HSM provides alike Azure, AWS, IBM and Google but I haven't find any documentation about google HSM explicitely supporting 3DES keys.
However I can see the type…
Lorenzo SU
- 45
- 2
- 5