dig-capsule 0.5.0

The DIG Network .dig capsule data plane — one crate over the DIGS format, capsule read-crypto, compiler, staging, and the guest/host serve triad.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25

use thiserror::Error;

/// Returned when AES-256-GCM authentication fails (ciphertext or tag tampered).
#[derive(Debug, Error, Clone, PartialEq, Eq)]
#[error("AES-256-GCM authentication failed: ciphertext or tag was tampered")]
pub struct TamperError;

/// BLS-layer errors (malformed key/signature bytes).
#[derive(Debug, Error, Clone, PartialEq, Eq)]
pub enum BlsError {
    #[error("invalid BLS public key bytes")]
    InvalidPublicKey,
    #[error("invalid BLS signature bytes")]
    InvalidSignature,
}

/// Umbrella crypto error returned by `decrypt_and_unwrap` and any caller that
/// wants a single error type spanning AEAD and BLS failures.
#[derive(Debug, Error, Clone, PartialEq, Eq)]
pub enum CryptoError {
    #[error(transparent)]
    Tamper(#[from] TamperError),
    #[error(transparent)]
    Bls(#[from] BlsError),
}