Stay organized with collections Save and categorize content based on your preferences.
The Google Workspace Client-side Encryption (CSE) API lets you own the encryption keys used to further encrypt Google Workspace data.
Methods Methodsdelegate
POST https://KACLS_URL/delegate
digest
POST https://KACLS_URL/digest
privatekeydecrypt
POST https://KACLS_URL/privatekeydecrypt
privatekeysign
POST https://KACLS_URL/privatekeysign
privilegedprivatekeydecrypt
POST https://KACLS_URL/privilegedprivatekeydecrypt
privilegedunwrap
POST https://KACLS_URL/privilegedunwrap
privilegedwrap
POST https://KACLS_URL/privilegedwrap
rewrap
POST https://KACLS_URL/rewrap
status
GET https://KACLS_URL/status
unwrap
POST https://KACLS_URL/unwrap
wrap
POST https://KACLS_URL/wrap
wrapprivatekey
POST https://KACLS_URL/wrapprivatekey
Authorization
JWT issued by Google to verify that the caller is authorized to encrypt or decrypt a resource.
Authentication
JWT issued by the identity provider that attests user identity.
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2025-07-23 UTC.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-07-23 UTC."],[[["The Google Workspace Client-side Encryption (CSE) API empowers you to manage your own encryption keys for enhanced security of Google Workspace data."],["This API provides a comprehensive suite of methods for key management, including wrapping, unwrapping, encryption, decryption, and signing, offering granular control over your data protection."],["You can leverage methods such as `wrap` and `unwrap` to encrypt and decrypt data encryption keys (DEKs), while `privatekeydecrypt` allows for decryption using your private keys."],["Authentication and authorization are handled through JWTs, ensuring secure access control to your encrypted data."],["Explore detailed documentation on methods, tokens, and error handling to effectively integrate the CSE API into your workflows."]]],["The Google Workspace CSE API enables key ownership for encrypting Workspace data. Key actions include: `digest` to return checksums, `privatekeydecrypt` to decrypt keys, `privatekeysign` to sign digests, `unwrap`/`wrap` to decrypt/encrypt DEKs, `rewrap` to re-encrypt DEKs, `privileged` methods for special decryption/wrapping, `wrapprivatekey` to wrap a user's private key and `status` to check the Key Access Control List Service. It uses `Authorization` and `Authentication` JWT tokens and details structured error handling.\n"]]
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4