@opentdf/sdk
    Preparing search index...

    Type Alias SegmentIntegrityAlgorithm

    SegmentIntegrityAlgorithm: "GMAC" | "HS256"

    Algorithms usable for per-segment integrity.

    GMAC is legitimate here: the segment's bytes were just processed by AES-GCM under the DEK, so the trailing 16 bytes are the tag the AEAD itself produced. See segmentIntegrity.