DocumentContentKeyTargetEnvelope | API reference

Shape

object

6 fields

containerIdstringrequired
- not empty
containerKeyEpochintegerrequired
- greater than 0
containerKeyEpochIdstringrequired
- not empty
Id of the container KEK epoch that wraps the key.
containerManifestHashstringrequired
- not empty
Container manifest head the wrap was made under.
wrappedKeystringrequired
- exactly 64 characters
- base64, pattern ^[A-Za-z0-9+/]{64}$
The content key encrypted under the container KEK.
wrappingMetadataobjectrequired
Wrapping suite and IV needed to unwrap wrappedKey.
2 fields
- suitestringrequired
  - always tearleads.document.content-key-wrap.aes-256-gcm-container-kek
- ivstringrequired
  - exactly 16 characters
  - base64, pattern ^[A-Za-z0-9+/]{16}$

Other fields are allowed.