# DeviceEncryptionKey

- [JSON representation](https://developers.google.com/wallet/identity/provisioning/api-reference/issuer-hosted/rest/v1/DeviceEncryptionKey#SCHEMA_REPRESENTATION)

An ephemeral encryption public key, and associated metadata.

| JSON representation |
|---|
| ``` { "publicKey": string, "signature": string, "keyId": string } ``` |

| Fields ||
|---|---|
| `publicKey` | `string` The base64 encoded ephemeral public key, generated by the device for this request. The key is Elliptic Curve Point in Uncompressed format, as specified by the HPKE KEM-encoding. |
| `signature` | `string` The base64 encoded signature of the ephemeral public key, signed by the device's identity key. This will be a COSE_Sign1 object, in the ProofOfOwnership format. The "challenge" in this format will be SHA-256(ephemeral public key). |
| `keyId` | `string` The key id of the ephemeral public key generated by the device. |