Encrypted Payload Wrappers

ConfigureEncryptedPayloadWrapper creates a PDF 2.0 password-security document whose ordinary page streams remain readable before authentication while embedded-file names, descriptions, and bytes remain encrypted

Delphi syntax

procedure ConfigureEncryptedPayloadWrapper(const OwnerPassword,
  UserPassword: AnsiString; KeyType: THPDFKeyType = aes256);
function IsLoadedEncryptedPayloadWrapper: Boolean;
function UnlockLoadedEncryptedPayloadWrapper(
  const Password: AnsiString): Boolean;

Crypt-filter policy

• /StrF /StdCF protects FileSpec strings and encrypted name-tree keys
• /StmF /Identity leaves normal page and resource streams readable
• /EFF /StdCF protects embedded-file streams
• /AuthEvent /EFOpen declares that payload authentication is deferred until embedded-file access

Loading and unlocking

Load the document normally, inspect the wrapper with IsLoadedEncryptedPayloadWrapper, then call UnlockLoadedEncryptedPayloadWrapper with the payload password before resolving or extracting the protected attachment

A failed unlock returns false and preserves the prior loaded state without partially rewriting encrypted metadata

Limits

• Password security with aes128, aes256, or aesgcm is supported
• The helper configures crypt filters but does not create a Portfolio or Collection user interface
• Unlocking authenticates and decrypts the loaded standard-security object graph as one atomic operation

Available since: HotPDF v2.715.0

See also: PDF Filter Support