Decrypter instance for a single file. This is not a managed reader; it must be assisted with a separate reader that passes it blocks of encrypted data of interest.