The following table lists the types of keys that can be imported.
Table 1 Key algorithms supported by KMS
Key Type
Algorithm Type
Key Specifications
Description
Application Scenario
Symmetric key
AES
AES_256
AES symmetric key
Data encryption and decryption
DEKs encryption and decryption
NOTE:
You can encrypt and decrypt a small amount of data using the online tool on the console.
You need to call APIs to encrypt and decrypt a large amount of data.
Digest key
SHA
HMAC_256
HMAC_384
HMAC_512
Digest key
Data tampering prevention
Data integrity verification
Asymmetric key
RSA
RSA_2048
RSA_3072
RSA_4096
RSA asymmetric password
Digital signature and signature verification
Data encryption and decryption
NOTE:
Asymmetric keys are applicable to signature and signature verification scenarios. Asymmetric keys are not efficient enough for data encryption. Symmetric keys are suitable for encrypting and decrypting data.