Class: Google::Apis::DlpV2::GooglePrivacyDlpV2CryptoReplaceFfxFpeConfig
- Inherits:
-
Object
- Object
- Google::Apis::DlpV2::GooglePrivacyDlpV2CryptoReplaceFfxFpeConfig
- Includes:
- Core::Hashable, Core::JsonObjectSupport
- Defined in:
- lib/google/apis/dlp_v2/classes.rb,
lib/google/apis/dlp_v2/representations.rb,
lib/google/apis/dlp_v2/representations.rb
Overview
Replaces an identifier with a surrogate using Format Preserving Encryption (
FPE) with the FFX mode of operation; however when used in the
ReidentifyContent
API method, it serves the opposite function by reversing
the surrogate back into the original identifier. The identifier must be
encoded as ASCII. For a given crypto key and context, the same identifier will
be replaced with the same surrogate. Identifiers must be at least two
characters long. In the case that the identifier is the empty string, it will
be skipped. See https://cloud.google.com/sensitive-data-protection/docs/
pseudonymization to learn more. Note: We recommend using
CryptoDeterministicConfig for all use cases which do not require preserving
the input alphabet space and size, plus warrant referential integrity.
Instance Attribute Summary collapse
-
#common_alphabet ⇒ String
Common alphabets.
-
#context ⇒ Google::Apis::DlpV2::GooglePrivacyDlpV2FieldId
General identifier of a data field in a storage service.
-
#crypto_key ⇒ Google::Apis::DlpV2::GooglePrivacyDlpV2CryptoKey
This is a data encryption key (DEK) (as opposed to a key encryption key (KEK) stored by Cloud Key Management Service (Cloud KMS). When using Cloud KMS to wrap or unwrap a DEK, be sure to set an appropriate IAM policy on the KEK to ensure an attacker cannot unwrap the DEK. Corresponds to the JSON property
cryptoKey
. -
#custom_alphabet ⇒ String
This is supported by mapping these to the alphanumeric characters that the FFX mode natively supports.
-
#radix ⇒ Fixnum
The native way to select the alphabet.
-
#surrogate_info_type ⇒ Google::Apis::DlpV2::GooglePrivacyDlpV2InfoType
Type of information detected by the API.
Instance Method Summary collapse
-
#initialize(**args) ⇒ GooglePrivacyDlpV2CryptoReplaceFfxFpeConfig
constructor
A new instance of GooglePrivacyDlpV2CryptoReplaceFfxFpeConfig.
-
#update!(**args) ⇒ Object
Update properties of this object.
Constructor Details
#initialize(**args) ⇒ GooglePrivacyDlpV2CryptoReplaceFfxFpeConfig
Returns a new instance of GooglePrivacyDlpV2CryptoReplaceFfxFpeConfig.
2301 2302 2303 |
# File 'lib/google/apis/dlp_v2/classes.rb', line 2301 def initialize(**args) update!(**args) end |
Instance Attribute Details
#common_alphabet ⇒ String
Common alphabets.
Corresponds to the JSON property commonAlphabet
2265 2266 2267 |
# File 'lib/google/apis/dlp_v2/classes.rb', line 2265 def common_alphabet @common_alphabet end |
#context ⇒ Google::Apis::DlpV2::GooglePrivacyDlpV2FieldId
General identifier of a data field in a storage service.
Corresponds to the JSON property context
2270 2271 2272 |
# File 'lib/google/apis/dlp_v2/classes.rb', line 2270 def context @context end |
#crypto_key ⇒ Google::Apis::DlpV2::GooglePrivacyDlpV2CryptoKey
This is a data encryption key (DEK) (as opposed to a key encryption key (KEK)
stored by Cloud Key Management Service (Cloud KMS). When using Cloud KMS to
wrap or unwrap a DEK, be sure to set an appropriate IAM policy on the KEK to
ensure an attacker cannot unwrap the DEK.
Corresponds to the JSON property cryptoKey
2278 2279 2280 |
# File 'lib/google/apis/dlp_v2/classes.rb', line 2278 def crypto_key @crypto_key end |
#custom_alphabet ⇒ String
This is supported by mapping these to the alphanumeric characters that the FFX
mode natively supports. This happens before/after encryption/decryption. Each
character listed must appear only once. Number of characters must be in the
range [2, 95]. This must be encoded as ASCII. The order of characters does not
matter. The full list of allowed characters is:
0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz~`!@#$%^&*()_-+=`
[`]|\:;"'<,>.?/
Corresponds to the JSON property customAlphabet
2289 2290 2291 |
# File 'lib/google/apis/dlp_v2/classes.rb', line 2289 def custom_alphabet @custom_alphabet end |
#radix ⇒ Fixnum
The native way to select the alphabet. Must be in the range [2, 95].
Corresponds to the JSON property radix
2294 2295 2296 |
# File 'lib/google/apis/dlp_v2/classes.rb', line 2294 def radix @radix end |
#surrogate_info_type ⇒ Google::Apis::DlpV2::GooglePrivacyDlpV2InfoType
Type of information detected by the API.
Corresponds to the JSON property surrogateInfoType
2299 2300 2301 |
# File 'lib/google/apis/dlp_v2/classes.rb', line 2299 def surrogate_info_type @surrogate_info_type end |
Instance Method Details
#update!(**args) ⇒ Object
Update properties of this object
2306 2307 2308 2309 2310 2311 2312 2313 |
# File 'lib/google/apis/dlp_v2/classes.rb', line 2306 def update!(**args) @common_alphabet = args[:common_alphabet] if args.key?(:common_alphabet) @context = args[:context] if args.key?(:context) @crypto_key = args[:crypto_key] if args.key?(:crypto_key) @custom_alphabet = args[:custom_alphabet] if args.key?(:custom_alphabet) @radix = args[:radix] if args.key?(:radix) @surrogate_info_type = args[:surrogate_info_type] if args.key?(:surrogate_info_type) end |