Method: locations.generateRandomBytes

Full name: projects.locations.generateRandomBytes

Generate random bytes using the Cloud KMS randomness source in the provided location.

HTTP request


POST https://cloudkms.googleapis.com/v1/{location=projects/*/locations/*}:generateRandomBytes

The URLs usegRPC Transcoding syntax.

Path parameters

Parameters
location

string

The project-specific location in which to generate random bytes. For example, "projects/my-project/locations/us-central1".

Request body

The request body contains data with the following structure:

JSON representation
{"lengthBytes":integer,"protectionLevel":enum (ProtectionLevel)}
Fields
lengthBytes

integer

The length in bytes of the amount of randomness to retrieve. Minimum 8 bytes, maximum 1024 bytes.

protectionLevel

enum (ProtectionLevel)

TheProtectionLevel to use when generating the random data. Currently, onlyHSM protection level is supported.

Response body

Response message forKeyManagementService.GenerateRandomBytes.

If successful, the response body contains data with the following structure:

JSON representation
{"data":string,"dataCrc32c":string}
Fields
data

string (bytes format)

The generated data.

A base64-encoded string.

dataCrc32c

string (Int64Value format)

Integrity verification field. A CRC32C checksum of the returnedGenerateRandomBytesResponse.data. An integrity check ofGenerateRandomBytesResponse.data can be performed by computing the CRC32C checksum ofGenerateRandomBytesResponse.data and comparing your results to this field. Discard the response in case of non-matching checksum values, and perform a limited number of retries. A persistent mismatch may indicate an issue in your computation of the CRC32C checksum. Note: This field is defined as int64 for reasons of compatibility across different languages. However, it is a non-negative integer, which will never exceed 2^32-1, and can be safely downconverted to uint32 in languages that support this type.

Authorization scopes

Requires one of the following OAuth scopes:

  • https://www.googleapis.com/auth/cloudkms
  • https://www.googleapis.com/auth/cloud-platform

For more information, see theAuthentication Overview.

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-02-11 UTC.