How to Use encryption and signing keys of GCP Shielded VM

Question

I am wondering how signing key and encryption key of a gcp shielded VM instance can be used? I am thinking of using the encryption key (ekPub) to encrypt an arbitrary blob o