Package org.forgerock.secrets.gcpkms
A secret store implementation that can retrieve keys from a Google Cloud Platform Key Management Service.
-
Class Summary Class Description ChfHttpTransport Implementation of the Google Cloud APIHttpTransport
interface using CHF.GoogleKmsAesCipher A Cipher implementation using Google KMS symmetric encryption/decryption.GoogleKmsEncryptedPropertyFormat ASecretPropertyFormat
for thePropertyResolverSecretStore
that can decrypt secrets using a Google KMS decryption key.GoogleKmsKey Abstract base class for keys stored in Google KMS.GoogleKmsPrivateKey Represents a private key stored in the Google Cloud Platform Key Management Service.GoogleKmsProvider Provides implementations of Java Cryptography Architecture primitives that use the Google Cloud Platform Key Management Service.GoogleKmsRsaCipher A cipher implementation for RSA-OAEP based on Google Cloud KMS.GoogleKmsSecretKey A symmetric secret key stored in Google KMS.GoogleKmsSecretStore A secret store that can provide cryptographic keys based on the Google Cloud Platform Key Management Service.GoogleKmsSecretStore.Builder Builder class forGoogleKmsSecretStore
.GoogleKmsSignature Implementation of the Java Signature SPI that delegates signature operations to the Google Cloud Platform Key Management Service.GoogleKmsSignature.RSAPSS Implements generic RSA-PSS signing.GoogleKmsSignature.WithSHA256 Implements signing with the SHA-256 message digest.GoogleKmsSignature.WithSHA384 Implements signing with the SHA-384 message digest.GoogleKmsSignature.WithSHA512 Implements signing with the SHA-512 message digest.SecretsApiBearerTokenCredentials Provides Google SDK credentials from the secrets API.