A water-meter gateway must encrypt readings with a symmetric key and separately sign firmware manifests. Which Vault algorithm pairing matches those jobs?
Select an answer to reveal the explanation.
Short Explanation
Same key both ways for locking readings—that is AES. Proving who sealed the firmware wants a signing algorithm such as ECDSA or RSA. ECDSA does not encrypt; AES does not sign.
Full Explanation
OCI Vault documents AES symmetric keys for encrypt and decrypt with the same key; they are not for signing. RSA can encrypt/decrypt and also sign/verify. ECDSA signs and verifies but does not encrypt. Match the algorithm to the operation the application needs rather than treating every key type as universal.