Skip to main content

DocumentUploadKekPayload

Payload from documentUploadKek, returns information the client will need when encrypting the document to upload. Note if the client is unable to support the encryption algorithms returned by this payload, it will not be able to call prepareDocumentUpload.

type DocumentUploadKekPayload {
  documentEncryptionAlgorithm: EncryptionAlgorithm!
  documentPurpose: DocumentPurpose!
  kekId: ID!
  kekValue: String!
  keyEncryptionAlgorithm: EncryptionAlgorithm!
}

Fields​

DocumentUploadKekPayload.documentEncryptionAlgorithm ● EncryptionAlgorithm! non-null enum​

The encryption algorithm that MUST be used to encrypt the document with the client-generated DEK

DocumentUploadKekPayload.documentPurpose ● DocumentPurpose! non-null enum​

Just reflect the DocumentPurpose passed up in the DocumentUploadKekInput

DocumentUploadKekPayload.kekId ● ID! non-null scalar​

The ID of the KEK

DocumentUploadKekPayload.kekValue ● String! non-null scalar​

The PEM-encoded valued of the KEK

DocumentUploadKekPayload.keyEncryptionAlgorithm ● EncryptionAlgorithm! non-null enum​

The encryption algorithm that MUST be used when encrypting the DEK with this KEK

Returned by​

documentUploadKek query