decryptTinSocialIdentity — Decrypt social identity

Decrypt a TIN social identity locally with the same derived AES-GCM key and return the plaintext only to the caller.

What it does

This function reverses encryptTinSocialIdentity locally. It derives the same TIN-scoped key and decrypts the supplied nonce and ciphertext.

How the flow works

1. Caller invokes the function

   The caller supplies the TIN, nonce, and ciphertext.
2. Validation

   WebCrypto imports the derived AES-GCM key and validates the authentication tag.
3. Main work

   The SDK decrypts the ciphertext using the supplied nonce.
4. Result

   The plaintext string is returned to the local caller.

Signature

export async function decryptTinSocialIdentity(params: {
  tin: bigint | number | string; nonce: Uint8Array; ciphertext: Uint8Array;
}): Promise<string>

tin · bigint | number | string · required

TIN used to derive the decryption key.

nonce · Uint8Array · required

Nonce returned by encryption.

ciphertext · Uint8Array · required

AES-GCM ciphertext.

Result and errors

Returns plaintext or propagates WebCrypto authentication/decryption failure.

const value = await decryptTinSocialIdentity({ tin, nonce, ciphertext });

Source: tins.ts:1348-1360