public sealed class CryptoKey : IMessage<CryptoKey>, IEquatable<CryptoKey>, IDeepCloneable<CryptoKey>, IBufferMessage, IMessage
This is a data encryption key (DEK) (as opposed to
a key encryption key (KEK) stored by KMS).
When using KMS to wrap/unwrap DEKs, be sure to set an appropriate
IAM policy on the KMS CryptoKey (KEK) to ensure an attacker cannot
unwrap the data crypto key.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-04-17 UTC."],[[["This webpage details the `CryptoKey` class within the `Google.Cloud.Dlp.V2` namespace, a data encryption key (DEK) used in Google Cloud's Data Loss Prevention (DLP) API."],["The `CryptoKey` class is part of the .NET library and supports multiple versions of the API, from 2.15.0 to 4.16.0, with 4.16.0 being the latest version available."],["The class implements several interfaces including `IMessage`, `IEquatable`, `IDeepCloneable`, and `IBufferMessage` and inherits from `Object`."],["`CryptoKey` objects can be created with no arguments or by copying another `CryptoKey` object, offering flexibility in its instantiation, and can come in the form of `KmsWrapped`, `Transient` and `Unwrapped`."],["When utilizing KMS for key wrapping/unwrapping, it's important to implement a secure IAM policy on the KMS CryptoKey to prevent unauthorized unwrapping of the data crypto key."]]],[]]
