Google Invoked APIs

This section covers the APIs invoked by Google. You can't directly use these APIs. Google invokes these APIs for performing the following tasks:

• Encrypting Data Encryption Keys (wrap)

• Decrypting Data Encryption Keys (unwrap)

• Decrypting and Downloading Document (privileged_unwrap)

• Signing Private Keys (privatekeysign)

• Decrypting Content Encryption Keys (privatekeydecrypt)

• Decrypting and Downloading Gmail Message (privilegedprivatekeydecrypt)

• Viewing the KACLS Endpoint Status

• Listing Public KACLS JWKs

• Migrating from an Old KACLS to a New KACLS

• Validating the Resource Key Hash

• Publishing Public JSON Web Key Set (JWKS) at /Certs

• Decrypting Data in a Privileged Context

• Delegating Access