Tearleads

DocumentContentKeyTargetEnvelopeResponse

A stored wrap of a document content key to one container KEK.

Shape

object

6 fields
  • containerIdstringrequired
    • not empty
  • containerKeyEpochintegerrequired
    • greater than 0
  • containerKeyEpochIdstringrequired
    • not empty

    Id of the container KEK epoch that wraps the key.

  • containerManifestHashstringrequired
    • not empty

    Container manifest head the wrap was made under.

  • wrappedKeystringrequired
    • not empty

    The content key encrypted under the container KEK.

  • wrappingMetadataobject with any fieldsrequired

    Wrapping suite and IV needed to unwrap wrappedKey.

Other fields are allowed.

Used by

Schemas