Key Management Service API, gRPC: SymmetricCryptoService.Encrypt

Written by

Updated at November 26, 2024

Encrypts given plaintext with the specified key.

gRPC request

{
  "key_id": "string",
  "version_id": "string",
  "aad_context": "bytes",
  "plaintext": "bytes"
}

Field	Description
key_id	string Required field. ID of the symmetric KMS key to use for encryption.
version_id	string ID of the key version to encrypt plaintext with. Defaults to the primary version if not specified.
aad_context	bytes Additional authenticated data (AAD context), optional. If specified, this data will be required for decryption with the SymmetricDecryptRequest. Should be encoded with base64.
plaintext	bytes Required field. Plaintext to be encrypted. Should be encoded with base64.

{
  "key_id": "string",
  "version_id": "string",
  "ciphertext": "bytes"
}

Field	Description
key_id	string Required field. ID of the symmetric KMS key that was used for encryption.
version_id	string ID of the key version that was used for encryption.
ciphertext	bytes Resulting ciphertext.