salrashid123

#!/usr/bin/bash


# get gcp service account access token using curl, openssl, jq 
#  https://developers.google.com/identity/protocols/oauth2/service-account#authorizingrequests
# code below credited to 
#     https://gist.github.com/LindaLawton/cff75182aac5fa42930a09f58b63a309?permalink_comment_id=4232119#gistcomment-4232119

#  usage: 
#   with svc_acount.json file

salrashid123

package com.test;

import java.util.List;
import java.util.logging.ConsoleHandler;
import java.util.logging.Level;
import java.util.logging.Logger;

import com.amazonaws.auth.AWSStaticCredentialsProvider;
import com.amazonaws.auth.BasicAWSCredentials;
import com.amazonaws.client.builder.AwsClientBuilder;

salrashid123

{"keys": [ {
  "alg": "RS256",
  "e": "AQAB",
  "kid": "123456",
  "kty": "RSA",
  "n": "qqrpBHkLN4vT6g279KYTnnbKWHIEa-fK04wlamlrALQpV6QGfIrPwSgU_ElRFpsPJYWxCvEtYS01lBC70IeAhObR5DY9Z-jTvhk1tA-VrxyEhAHLuCuCsAPLow4ZSJ-aB0vZuUtaV9-qO-0gyJEG9y_5FKT51Tbr0INtjDASH43seoQtsPDG2tnKEj9r7jOLUNehj5j4Dgv-sJMGe3EyKlw7p6vsIhsU23v0VrTxdHGuelzplxCUQJoPRSxgepYyVmfrB12XJ5uJtLhYwuTbFb3BIUyswBtxtGcigvk_ftkuSQjubiXe8UtltBI7INfs7vmAVuQr7YN8Alni4Z3BeQ",
  "use": "sig"
} ] }

salrashid123

package main

import (
	"crypto/x509"
	"encoding/pem"
	"errors"
	"fmt"
	"log"
	"time"

salrashid123

# 1. Create KEK in KMS
# 2. Use TinkKey to generate DEK and wrap that with KEK (i.,e encryptedKeyset)
# 3. use python tink to encrypt some data with wrappeed DEK keyset
# 4. Use BQ functions to decrypt data using ciphertext in 3 and EncryptedKeyset in 2


# ref

# https://blog.salrashid.dev/articles/2022/bq_kms/
# https://github.com/salrashid123/tink_samples/

salrashid123

#!/usr/bin/python


import base64
import datetime
import getopt

import random
import sys
import time

salrashid123

package main

import (
	"bytes"
	"encoding/base64"
	"flag"
	"fmt"
	"math/rand"

	"github.com/google/tink/go/aead"

salrashid123

package main

import (
	"bytes"
	"encoding/base64"
	"flag"
	"fmt"

	"github.com/google/tink/go/aead"

salrashid123

import httplib2
import google.auth
from apiclient.discovery import build
from oauth2client.service_account import ServiceAccountCredentials
from oauth2client.client import GoogleCredentials
from google.api_core import operations_v1
from google.api_core import operation
from google.auth.transport.requests import AuthorizedSession

project_id = 'yourproject'

salrashid123

package main

import (
	"crypto/hmac"
	"crypto/sha1"
	"encoding/base64"
	"flag"
	"fmt"
	"io"
	"net/http"