Skip to content

recipients

InterfaceDescription
A256KWKeyA caller-held AES-256 KEK for unwrapping A256KW recipients.
A256KWRecipientInput for a recipient whose CEK is wrapped with a shared AES-256 KEK.
A256KWUnwrapperOptionsOptions for createA256KWUnwrapper.
RecipientInfoValidated recipient data exposed to key-unwrapping adapters.
Type AliasDescription
RecipientRecipient input accepted by high-level encryption functions.
UnwrapperRecover a CEK from an ordered, structurally validated recipient list.
FunctionDescription
createA256KWUnwrapperBuild an Unwrapper that recovers a CEK from A256KW recipients using a fixed set of caller-held KEKs. Intended to be passed to aesGcm.decryptWith, which supplies decoded, validated recipients; the returned function trusts its input and performs no validation of its own.