Class: Google::Cloud::Kms::V1::KeyOperationAttestation

Inherits:
Object
  • Object
show all
Extended by:
Protobuf::MessageExts::ClassMethods
Includes:
Protobuf::MessageExts
Defined in:
proto_docs/google/cloud/kms/v1/resources.rb

Overview

Contains an HSM-generated attestation about a key operation. For more information, see Verifying attestations.

Defined Under Namespace

Modules: AttestationFormat Classes: CertificateChains

Instance Attribute Summary collapse

Instance Attribute Details

#cert_chains ⇒ ::Google::Cloud::Kms::V1::KeyOperationAttestation::CertificateChains (readonly)

Returns Output only. The certificate chains needed to validate the attestation.

Returns:



246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
 
# File 'proto_docs/google/cloud/kms/v1/resources.rb', line 246

class KeyOperationAttestation
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # Certificate chains needed to verify the attestation.
  # Certificates in chains are PEM-encoded and are ordered based on
  # https://tools.ietf.org/html/rfc5246#section-7.4.2.
  # @!attribute [rw] cavium_certs
  #   @return [::Array<::String>]
  #     Cavium certificate chain corresponding to the attestation.
  # @!attribute [rw] google_card_certs
  #   @return [::Array<::String>]
  #     Google card certificate chain corresponding to the attestation.
  # @!attribute [rw] google_partition_certs
  #   @return [::Array<::String>]
  #     Google partition certificate chain corresponding to the attestation.
  class CertificateChains
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end

  # Attestation formats provided by the HSM.
  module AttestationFormat
    # Not specified.
    ATTESTATION_FORMAT_UNSPECIFIED = 0

    # Cavium HSM attestation compressed with gzip. Note that this format is
    # defined by Cavium and subject to change at any time.
    #
    # See
    # https://www.marvell.com/products/security-solutions/nitrox-hs-adapters/software-key-attestation.html.
    CAVIUM_V1_COMPRESSED = 3

    # Cavium HSM attestation V2 compressed with gzip. This is a new format
    # introduced in Cavium's version 3.2-08.
    CAVIUM_V2_COMPRESSED = 4
  end
end

#content ⇒ ::String (readonly)

Returns Output only. The attestation data provided by the HSM when the key operation was performed.

Returns:

  • (::String) —

    Output only. The attestation data provided by the HSM when the key operation was performed.



246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
 
# File 'proto_docs/google/cloud/kms/v1/resources.rb', line 246

class KeyOperationAttestation
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # Certificate chains needed to verify the attestation.
  # Certificates in chains are PEM-encoded and are ordered based on
  # https://tools.ietf.org/html/rfc5246#section-7.4.2.
  # @!attribute [rw] cavium_certs
  #   @return [::Array<::String>]
  #     Cavium certificate chain corresponding to the attestation.
  # @!attribute [rw] google_card_certs
  #   @return [::Array<::String>]
  #     Google card certificate chain corresponding to the attestation.
  # @!attribute [rw] google_partition_certs
  #   @return [::Array<::String>]
  #     Google partition certificate chain corresponding to the attestation.
  class CertificateChains
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end

  # Attestation formats provided by the HSM.
  module AttestationFormat
    # Not specified.
    ATTESTATION_FORMAT_UNSPECIFIED = 0

    # Cavium HSM attestation compressed with gzip. Note that this format is
    # defined by Cavium and subject to change at any time.
    #
    # See
    # https://www.marvell.com/products/security-solutions/nitrox-hs-adapters/software-key-attestation.html.
    CAVIUM_V1_COMPRESSED = 3

    # Cavium HSM attestation V2 compressed with gzip. This is a new format
    # introduced in Cavium's version 3.2-08.
    CAVIUM_V2_COMPRESSED = 4
  end
end

#format ⇒ ::Google::Cloud::Kms::V1::KeyOperationAttestation::AttestationFormat (readonly)

Returns Output only. The format of the attestation data.

Returns:



246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
 
# File 'proto_docs/google/cloud/kms/v1/resources.rb', line 246

class KeyOperationAttestation
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # Certificate chains needed to verify the attestation.
  # Certificates in chains are PEM-encoded and are ordered based on
  # https://tools.ietf.org/html/rfc5246#section-7.4.2.
  # @!attribute [rw] cavium_certs
  #   @return [::Array<::String>]
  #     Cavium certificate chain corresponding to the attestation.
  # @!attribute [rw] google_card_certs
  #   @return [::Array<::String>]
  #     Google card certificate chain corresponding to the attestation.
  # @!attribute [rw] google_partition_certs
  #   @return [::Array<::String>]
  #     Google partition certificate chain corresponding to the attestation.
  class CertificateChains
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end

  # Attestation formats provided by the HSM.
  module AttestationFormat
    # Not specified.
    ATTESTATION_FORMAT_UNSPECIFIED = 0

    # Cavium HSM attestation compressed with gzip. Note that this format is
    # defined by Cavium and subject to change at any time.
    #
    # See
    # https://www.marvell.com/products/security-solutions/nitrox-hs-adapters/software-key-attestation.html.
    CAVIUM_V1_COMPRESSED = 3

    # Cavium HSM attestation V2 compressed with gzip. This is a new format
    # introduced in Cavium's version 3.2-08.
    CAVIUM_V2_COMPRESSED = 4
  end
end