Skip to content

recipients

Interface Description
A256KWKey A caller-held AES-256 KEK for unwrapping A256KW recipients.
A256KWRecipient Input for a recipient whose CEK is wrapped with a shared AES-256 KEK.
A256KWUnwrapperOptions Options for createA256KWUnwrapper.
RecipientInfo Validated recipient data exposed to key-unwrapping adapters.
Type Alias Description
Recipient Recipient input accepted by high-level encryption functions.
Unwrapper Recover a CEK from an ordered, structurally validated recipient list.
Function Description
createA256KWUnwrapper Build an Unwrapper that recovers a CEK from A256KW recipients using a fixed set of caller-held KEKs. Intended to be passed to aesGcm.decryptWith, which supplies decoded, validated recipients; the returned function trusts its input and performs no validation of its own.