KMS Signing

Sign data with a KMS key.

post/api/v1/kms/keys/{keyId}/sign

Request

  • Base URL
    https://us.infisical.com
  • URL
    https://us.infisical.com/api/v1/kms/keys/{keyId}/sign
  • Auth
    none declared

Path parameters

keyIdstring uuid required

The ID of the key to sign the data with.

Request body

signingAlgorithm'RSASSA_PSS_SHA_512' | 'RSASSA_PSS_SHA_384' | 'RSASSA_PSS_SHA_256' | 'RSASSA_PKCS1_V1_5_SHA_512' | 'RSASSA_PKCS1_V1_5_SHA_384' | 'RSASSA_PKCS1_V1_5_SHA_256' | 'ECDSA_SHA_512' | 'ECDSA_SHA_384' | 'ECDSA_SHA_256' | 'ED25519' | 'ML_DSA_44' | 'ML_DSA_65' | 'ML_DSA_87' required
isDigestboolean

Whether the data is already digested or not. Please be aware that if you are passing a digest the algorithm used to create the digest must match the signing algorithm used to sign the digest.

datastring required

The data in string format to be signed (base64 encoded).

Response

Default Response

signaturestring required
keyIdstring uuid required
signingAlgorithm'RSASSA_PSS_SHA_512' | 'RSASSA_PSS_SHA_384' | 'RSASSA_PSS_SHA_256' | 'RSASSA_PKCS1_V1_5_SHA_512' | 'RSASSA_PKCS1_V1_5_SHA_384' | 'RSASSA_PKCS1_V1_5_SHA_256' | 'ECDSA_SHA_512' | 'ECDSA_SHA_384' | 'ECDSA_SHA_256' | 'ED25519' | 'ML_DSA_44' | 'ML_DSA_65' | 'ML_DSA_87' required

Changes

    • warning

      added the new ED25519 enum value to the response property for the response status

    • info

      added the new ED25519 enum value to the request property