OptionalassertionConfigs?: AssertionConfig[]Configuration for bound metadata.
Optionalmetadata?: MetadataUnbound metadata (deprecated).
OptionalmimeType?: MimeTypeMIME type of the decrypted content. Used for display.
OptionalrootIntegrityAlgorithm?: RootIntegrityAlgorithmAlgorithm used for the root signature over the aggregate of segment
hashes. HS256 only. Defaults to HS256.
OptionalsegmentIntegrityAlgorithm?: SegmentIntegrityAlgorithmAlgorithm used for each segment's integrity value. GMAC reads out the
AES-GCM tag the cipher already produced for that segment; HS256 computes
an HMAC over the segment ciphertext. Defaults to GMAC.
OptionalsplitPlan?: SplitStep[]How to split or share the data encryption key across multiple KASes.
OptionaltdfSpecVersion?: "4.2.2" | "4.3.0"TDF spec version to target.
OptionalwindowSize?: numberThe segment size for the content; smaller is slower, but allows faster random access. The current default is 1 MiB (2^20 bytes).
OptionalwrappingKeyAlgorithm?: KasPublicKeyAlgorithmPreferred algorithm to use for Key Access Objects.
Use CreateTDFOptions instead.
Options specific to the ZTDF container format.