Enum CryptoError 

pub enum CryptoError {
    InvalidKek,
    UnknownKekId,
    SealFailed,
    OpenFailed,
}

What can go wrong sealing or opening a secret.

Deliberately coarse: a caller must not be able to tell why an open failed (wrong key, tampered ciphertext, wrong tenant), because that distinction is an oracle. The operator gets detail through logs, not through this type.

Variants

InvalidKek

The configured key material was not a valid KEK.

UnknownKekId

No KEK is configured for the kek_id this ciphertext was sealed under.

SealFailed

Sealing failed (RNG or AEAD failure).

OpenFailed

Opening failed: wrong key, tampered ciphertext, or a binding mismatch (the ciphertext belongs to a different namespace/provider).

Trait Implementations

impl Clone for CryptoError

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for CryptoError

impl Debug for CryptoError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for CryptoError

Hand-written rather than derived: this crate carries no thiserror dependency, and these messages are deliberately uniform about why an open failed.

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for CryptoError

impl Error for CryptoError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl PartialEq for CryptoError

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for CryptoError