Function main

kms/encryptSymmetric.js:17–77

(
  projectId = 'my-project',
  locationId = 'us-east1',
  keyRingId = 'my-key-ring',
  keyId = 'my-key',
  plaintextBuffer = Buffer.from('...')
)

'use strict';

async function main(
  projectId = 'my-project',
  locationId = 'us-east1',
  keyRingId = 'my-key-ring',
  keyId = 'my-key',
  plaintextBuffer = Buffer.from('...')
) {
  // [START kms_encrypt_symmetric]
  //
  // TODO(developer): Uncomment these variables before running the sample.
  //
  // const projectId = 'my-project';
  // const locationId = 'us-east1';
  // const keyRingId = 'my-key-ring';
  // const keyId = 'my-key';
  // const plaintextBuffer = Buffer.from('...');

  // Imports the Cloud KMS library
  const {KeyManagementServiceClient} = require('@google-cloud/kms');

  // Instantiates a client
  const client = new KeyManagementServiceClient();

  // Build the key name
  const keyName = client.cryptoKeyPath(projectId, locationId, keyRingId, keyId);

  // Optional, but recommended: compute plaintext's CRC32C.
  const crc32c = require('fast-crc32c');
  const plaintextCrc32c = crc32c.calculate(plaintextBuffer);

  async function encryptSymmetric() {
    const [encryptResponse] = await client.encrypt({
      name: keyName,
      plaintext: plaintextBuffer,
      plaintextCrc32c: {
        value: plaintextCrc32c,
      },
    });

    const ciphertext = encryptResponse.ciphertext;

    // Optional, but recommended: perform integrity verification on encryptResponse.
    // For more details on ensuring E2E in-transit integrity to and from Cloud KMS visit:
    // https://cloud.google.com/kms/docs/data-integrity-guidelines
    if (!encryptResponse.verifiedPlaintextCrc32c) {
      throw new Error('Encrypt: request corrupted in-transit');
    }
    if (
      crc32c.calculate(ciphertext) !==
      Number(encryptResponse.ciphertextCrc32c.value)
    ) {
      throw new Error('Encrypt: response corrupted in-transit');
    }

    console.log(`Ciphertext: ${ciphertext.toString('base64')}`);
    return ciphertext;
  }