OptionalallowedList of KASes that may be contacted for a rewrap.
OptionalassertionPublic (or shared) keys for verifying assertions.
OptionalconcurrencyIf set, prevents more than this number of concurrent requests to the KAS.
OptionalfulfillableOptionally override client fulfillableObligationFQNs.
OptionalignoreOptionally disable checking the allowlist.
OptionalmaxMaximum number of segment batches that may be fetched concurrently.
Adjust together with segmentBatchSize for expected throughput.
Also derived from the TDF's segment size by default. Setting one of these two does not rescale the other -- the unset one keeps its derived value.
OptionalnoOptionally disable assertion verification.
OptionalplatformThe platform URL.
OptionalsegmentMaximum number of payload segments to fetch and decrypt per batch.
Adjust together with maxConcurrentSegmentBatches for expected throughput.
Defaults to a value derived from the TDF's own segment size, so that
segmentBatchSize * maxConcurrentSegmentBatches segments stay inside a
fixed byte budget (see derivePrefetchWindow). Raising this raises peak
memory in proportion.
The ciphertext source.
OptionalwrappingType of key to use for wrapping responses.
Settings for decrypting any variety of TDF file.