{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "title": "CryptoHashConfig",
  "description": "Pseudonymization method that generates surrogates via cryptographic hashing. Uses SHA-256. Outputs a base64-encoded representation of the hashed output (for example, `L7k0BHmF1ha5U3NfGykjro4xWi1MPVQPjhMAZbSV9mM=`).",
  "properties": {
    "cryptoKey": {
      "description": "An AES 128/192/256 bit key. Causes the hash to be computed based on this key. A default key is generated for each Deidentify operation and is used when neither `crypto_key` nor `kms_wrapped` is specified. Must not be set if `kms_wrapped` is set.",
      "format": "byte",
      "type": "string"
    },
    "kmsWrapped": {
      "$ref": "#/components/schemas/KmsWrappedCryptoKey",
      "description": "KMS wrapped key. Must not be set if `crypto_key` is set."
    }
  },
  "type": "object"
}