An optional parameter to set the Customer-Supplied Encryption key for rewrite source object.
Application developers can generate their own encryption keys to protect the data in GCS. This is known as a Customer-Supplied Encryption key (CSEK). If the application provides a CSEK, GCS does not retain the key. The object data, the object CRC32 checksum, and its MD5 hash (if applicable) are all encrypted with this key, and the key is required to read any of these elements back.
Care must be taken to save and protect these keys, if lost, the data is not recoverable. Also, applications should avoid generating predictable keys, as this weakens the encryption.
This option is used only in rewrite operations and it defines the key used for the source object.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-04-02 UTC."],[[["This document outlines the `SourceEncryptionKey` structure used in Google Cloud Storage (GCS) for specifying Customer-Supplied Encryption Keys (CSEK) for rewrite source objects."],["CSEK allows application developers to protect data in GCS using their own encryption keys, which are not retained by GCS, ensuring that only those who have the key can read the data, and the loss of the key results in irretrievable data."],["The document details the use of the `SourceEncryptionKey` option exclusively in rewrite operations, as it is required to specify the key used for the source object."],["The document provides two static functions, `FromBinaryKey` and `FromBase64Key`, which allow creating a source encryption key parameter from a binary key, or from a base64-encoded key, respectively, both requiring a 32-byte length."],["The different version numbers of the storage source are presented, from version 2.37.0-rc (latest) all the way down to version 2.11.0."]]],[]]
