Enum EnvelopeError 

pub enum EnvelopeError {
    TagMismatch,
    CounterNotMonotonic {
        expected: u32,
        got: u32,
    },
    AadMismatch,
    ChannelBindingMismatch,
    SessionExhausted,
    KeyDerivation(String),
    Cipher(String),
}

Errors produced by envelope open/seal.

Variants

TagMismatch

AEAD tag did not verify. Could be a wrong key, wrong nonce, or tampered ciphertext / AAD.

CounterNotMonotonic

Counter in incoming envelope ≤ last-seen counter — replay or out-of-order.

Fields

expected: u32

Last successfully-opened counter.

got: u32

Counter the incoming envelope carries.

AadMismatch

AAD fields (session_id / path / counter) disagree between sealer and opener.

ChannelBindingMismatch

The envelope was sealed on a different TLS channel than the one it is being opened on — its RFC 9266 channel binding does not match this session’s. This is the anti-relay rejection: a proof captured on one TLS connection and replayed onto another is refused here.

SessionExhausted

Session has reached the message cap; must renegotiate a fresh TransportKey.

KeyDerivation(String)

HKDF-expand of the envelope key failed.

Cipher(String)

Provider-layer AEAD error that is not a tag mismatch (e.g. invalid key length).

Trait Implementations

impl Debug for EnvelopeError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for EnvelopeError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for EnvelopeError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.