- Decryption callback is additional feature, default disabled - This callback can help to plug in external components managing additional encapsulation layers on firmware image format