python (65.2k questions)

javascript (44.3k questions)

reactjs (22.7k questions)

java (20.8k questions)

c# (17.4k questions)

html (16.3k questions)

r (13.7k questions)

android (13k questions)

Questions - google-cloud-kms

Convert Google KMS signatures from DER-encoded format to .Net IEEE 1363 format

I would like to convert signature in DER-encoded format (which I get from google KMS service) to IEEE 1363 format using C# (in order to validate the signature) How it is done in C#, .Net Core 5 ?
test-img

Lior Schwimmer

c#

cryptography

public-key-encryption

der

google-cloud-kms

Votes: 0

Answers: 1

Latest Answer

Since .NET 5, both the ASN.1/DER and the IEEE P1363 formats are supported for ECDSA signatures, see e.g. SignData() and VerifyData() (similarly SignHash() and VerifyHash()). A specification of the fo...
test-img

Topaco

How to verify signature authenticity that was signed using google KMS (Asymmetric sign, Elliptic Curve P-256 key SHA256 Digest) in C#

I have some string data which I signed with google key defined by Algorithm: Elliptic Curve P-256 key, SHA256 Digest. I wrote a program that should verify that the data and the signature (that was ret...
test-img

Lior Schwimmer

c#

.net-core

cryptography

elliptic-curve

google-cloud-kms

Votes: 0

Answers: 1

Latest Answer

It is not working because Cloud KMS returns signatures in DER-encoded format. DER is part of the ITU-T Recommendation X.690, and .NET requires signatures to be in IEEE 1363 format. Before the verifica...
test-img

Gabriel Robledo Ahumada

GCP policy to enforce to use EKM (externally managed key) in KMS

Anyone knows how can we enforce the use of EKM (externally managed key) in the GCP KMS? I would like to avoid using Google-generated keys in the KMS as per our company policy. Thanks
test-img

PJS

google-cloud-platform

google-cloud-kms

Votes: 0

Answers: 1

Latest Answer

External key manager (EKM) is the key manager used outside of Google Cloud to manage your keys. You can create and manage external keys either via the internet or via a Virtual Private Cloud (VPC). T...
test-img

Ramesh kollisetty

Grant permission to use specific KMS key in GCP

I created a keyring and a key in the keyring in GCP, how can I grant a specific service account or user account access to this key only? It seems that to use the key in the KMS, in GCP we need to gran...
test-img

PJS

google-cloud-platform

google-cloud-kms

Votes: 0

Answers: 1

Latest Answer

To manage access to Cloud KMS resources, such as keys and key rings, you grant Identity and Access Management (IAM) roles. You can grant or restrict the ability to perform specific cryptographic opera...
test-img

Srividya

Posts

Questions

Blogs

Jobs