Synchronous Key Operations

Synchronous operations that are directly forwarded to the HSM. For certain operations with SKA keys the signed approvals may be included in the request. The RestApi licence is necessary to execute these operations.

📄️ Wrap key

Wrap key

📄️ Verify signature

Verify signature

📄️ Unwrap a wrapped key

Create a synchronous (non-SKA) unwrap request

📄️ Unblock a key

Create a synchronous (ska) unblock request. Unblocking a key is only supported if the key has smart key attributes.

📄️ Sign a payload

Create a synchronous (non-SKA) sign request

📄️ Modify key policy

Create a synchronous (ska) modify policy request. Modifying a key is only supported if the key has smart key attributes.

📄️ Create keyed hash.

Create keyed hash.

📄️ Verify and decrypt a file

This endpoint accepts a file that has been signed and encrypted. It verifies the digital signature and decrypts the file content using the provided decryption key. Please ensure that valid key names and credentials are provided in the SignedSynchronousFileVerifyDecryptRequestDto.

📄️ Sign and encrypt a file

This endpoint receives a file along with the necessary parameters to sign and encrypt it. It returns the encrypted and signed file as a binary stream (application/octet-stream) or as a JSON response. Ensure that all required key parameters are provided correctly in the SignedSynchronousFileSignEncryptRequestDto.

📄️ Decrypt a file

Returns application/octet-stream or application/json of the decrypted file

📄️ Decrypt a ciphertext

Create a synchronous (non-SKA) decrypt request

📄️ Block a key

Create a synchronous (non-SKA) block request. Blocking a key is only supported if the key has smart key attributes.

📄️ Encrypt a file

Returns application/octet-stream or application/json of the encrypted file, key must be of type: EC, curveOid: 1.3.132.0.34 and derive attribute set on 'true'

📄️ Encrypt a payload

Encrypt a payload

📄️ Create a RFC3161 timestamp

Create a RFC3161 timestamp

📄️ Get random bytes

Returns random bytes with the provided length as an base64 encoded string