// Generated by the protocol buffer compiler.  DO NOT EDIT!
// source: proto/kms_envelope.proto

package com.google.crypto.tink.proto;

public interface KmsEnvelopeAeadKeyFormatOrBuilder extends
    // @@protoc_insertion_point(interface_extends:google.crypto.tink.KmsEnvelopeAeadKeyFormat)
    com.google.protobuf.MessageOrBuilder {

  
Required.
The location of the KEK in a remote KMS.
With Google Cloud KMS, valid values have this format:
gcp-kms://projects/*/locations/*/keyRings/*/cryptoKeys/*.
With AWS KMS, valid values have this format:
aws-kms://arn:aws:kms:<region>:<account-id>:key/<key-id>

string kek_uri = 1;
Returns:
The kekUri./**
   * <pre>
   * Required.
   * The location of the KEK in a remote KMS.
   * With Google Cloud KMS, valid values have this format:
   * gcp-kms://projects/&#42;&#47;locations/&#42;&#47;keyRings/&#42;&#47;cryptoKeys/&#42;.
   * With AWS KMS, valid values have this format:
   * aws-kms://arn:aws:kms:&lt;region&gt;:&lt;account-id&gt;:key/&lt;key-id&gt;
   * </pre>
   *
   * <code>string kek_uri = 1;</code>
   * @return The kekUri.
   */
  java.lang.String getKekUri();
  
Required.
The location of the KEK in a remote KMS.
With Google Cloud KMS, valid values have this format:
gcp-kms://projects/*/locations/*/keyRings/*/cryptoKeys/*.
With AWS KMS, valid values have this format:
aws-kms://arn:aws:kms:<region>:<account-id>:key/<key-id>

string kek_uri = 1;
Returns:
The bytes for kekUri./**
   * <pre>
   * Required.
   * The location of the KEK in a remote KMS.
   * With Google Cloud KMS, valid values have this format:
   * gcp-kms://projects/&#42;&#47;locations/&#42;&#47;keyRings/&#42;&#47;cryptoKeys/&#42;.
   * With AWS KMS, valid values have this format:
   * aws-kms://arn:aws:kms:&lt;region&gt;:&lt;account-id&gt;:key/&lt;key-id&gt;
   * </pre>
   *
   * <code>string kek_uri = 1;</code>
   * @return The bytes for kekUri.
   */
  com.google.protobuf.ByteString
      getKekUriBytes();

  
Key template of the Data Encryption Key, e.g., AesCtrHmacAeadKeyFormat.
Required.

.google.crypto.tink.KeyTemplate dek_template = 2;
Returns:
Whether the dekTemplate field is set./**
   * <pre>
   * Key template of the Data Encryption Key, e.g., AesCtrHmacAeadKeyFormat.
   * Required.
   * </pre>
   *
   * <code>.google.crypto.tink.KeyTemplate dek_template = 2;</code>
   * @return Whether the dekTemplate field is set.
   */
  boolean hasDekTemplate();
  
Key template of the Data Encryption Key, e.g., AesCtrHmacAeadKeyFormat.
Required.

.google.crypto.tink.KeyTemplate dek_template = 2;
Returns:
The dekTemplate./**
   * <pre>
   * Key template of the Data Encryption Key, e.g., AesCtrHmacAeadKeyFormat.
   * Required.
   * </pre>
   *
   * <code>.google.crypto.tink.KeyTemplate dek_template = 2;</code>
   * @return The dekTemplate.
   */
  com.google.crypto.tink.proto.KeyTemplate getDekTemplate();
  
Key template of the Data Encryption Key, e.g., AesCtrHmacAeadKeyFormat.
Required.

.google.crypto.tink.KeyTemplate dek_template = 2;
/**
   * <pre>
   * Key template of the Data Encryption Key, e.g., AesCtrHmacAeadKeyFormat.
   * Required.
   * </pre>
   *
   * <code>.google.crypto.tink.KeyTemplate dek_template = 2;</code>
   */
  com.google.crypto.tink.proto.KeyTemplateOrBuilder getDekTemplateOrBuilder();
}