Including the Pyca cryptography library

This page describes how to update the Google Cloud CLI to enable support for automatically wrapping keys for secure import into Cloud Key Management Service, by installing the Pyca cryptography library. Version 2.2.0 or higher adds support for the required aes_key_wrap_with_padding wrapping mechanism.

Before you begin

  • Install or upgrade the Google Cloud CLI to version 253.0.0 or higher.
  • Install the pip command if possible. pip is the platform-independent command-line interface to the Python Package Index. The package manager provided by your operating system may not provide version 2.2.0 or higher of the Pyca cryptographic library.

Installing and using pip

You can install and use pip on Linux, macOS, or Windows systems.

This command installs the library into your user environment, specifying the minimum version to install. To install system-wide, omit the --user flag. You may need to install