return ErrPermission
		}
		return errKeyCreationFailed(err)
	}
	return nil
}

func (c *kmsConn) GenerateKey(ctx context.Context, req *GenerateKeyRequest) (DEK, error) {
	aad, err := req.AssociatedData.MarshalText()
	if err != nil {
		return DEK{}, err
	}

	name := req.Name
	if name == "" {
		name = c.defaultKey
	}

	resp, err := c.client.GenerateKey(ctx, c.enclave, &kms.GenerateKeyRequest{

	metadata[MetaIV] = base64.StdEncoding.EncodeToString(sealedKey.IV[:])
	metadata[MetaSealedKeyKMS] = base64.StdEncoding.EncodeToString(sealedKey.Key[:])
	if len(ctx) > 0 {
		b, _ := ctx.MarshalText()
		metadata[MetaContext] = base64.StdEncoding.EncodeToString(b)
	}
	if len(kmsKey) > 0 && keyID != "" { // We use a KMS -> Store key ID and sealed KMS data key.
		metadata[MetaKeyID] = keyID

pkg encoding/asn1, method (ObjectIdentifier) String() string
pkg go/build, type Package struct, MFiles []string
pkg math/big, method (*Int) MarshalText() ([]uint8, error)
pkg math/big, method (*Int) UnmarshalText([]uint8) error
pkg math/big, method (*Rat) MarshalText() ([]uint8, error)
pkg math/big, method (*Rat) UnmarshalText([]uint8) error
pkg net, type Dialer struct, KeepAlive time.Duration
pkg net/http, const StateActive = 1

pkg encoding, type BinaryUnmarshaler interface { UnmarshalBinary }
pkg encoding, type BinaryUnmarshaler interface, UnmarshalBinary([]uint8) error
pkg encoding, type TextMarshaler interface { MarshalText }
pkg encoding, type TextMarshaler interface, MarshalText() ([]uint8, error)
pkg encoding, type TextUnmarshaler interface { UnmarshalText }
pkg encoding, type TextUnmarshaler interface, UnmarshalText([]uint8) error