Incremental authenticated decryption for a private staged destination.
update output remains unauthenticated. Delete the staged destination unless finish succeeds, then publish it with an atomic move.
update
finish
Zeroize state and reject further updates.
Authenticate the complete stream and return final hashes.
Decrypt the next ciphertext chunk into unauthenticated staged bytes.
Incremental authenticated decryption for a private staged destination.
updateoutput remains unauthenticated. Delete the staged destination unlessfinishsucceeds, then publish it with an atomic move.