ReadonlyintegrityOptionalencryptedSegmentSizeDefault?: numberReadonlyrootSignature: { alg: string; sig: string }OptionalsegmentHashAlg?: stringUntrusted until validated on read; GMAC and HS256 are accepted.
OptionalsegmentSizeDefault?: numberReadonlykeyReadonlymethodReadonlytype
Algorithm declared by the file. Untrusted until validated on read; only
HS256is accepted (seeasRootIntegrityAlgorithm). Typed as a plain string because a hostile manifest may say anything.