huskarl-core 0.8.0

use snafu::Snafu;

use crate::error::Error;

/// Errors that could occur during AEAD decryption.
///
/// The variants are load-bearing control flow between decryptor layers:
/// [`NoMatchingKey`](Self::NoMatchingKey) drives the refresh-and-retry loop
/// in [`RetryingDecryptor`](super::RetryingDecryptor) and candidate dispatch
/// in [`MultiKeyDecryptor`](super::MultiKeyDecryptor) — the cipher analogue
/// of [`VerifyError`](crate::crypto::verifier::VerifyError). Only its
/// `Other` source is the concrete [`Error`].
#[non_exhaustive]
#[derive(Debug, Snafu)]
pub enum DecryptError {
    /// No key matched the requested algorithm/kid criteria — decryption was
    /// not attempted.
    #[snafu(display("no matching key"))]
    NoMatchingKey,
    /// Other kinds of errors that could occur during decryption, including
    /// authentication failure.
    #[snafu(transparent)]
    Other {
        /// The underlying error.
        source: Error,
    },
}

impl DecryptError {
    /// If true, a failed decryption may succeed if retried.
    #[must_use]
    pub fn is_retryable(&self) -> bool {
        match self {
            DecryptError::NoMatchingKey => false,
            DecryptError::Other { source } => source.is_retryable(),
        }
    }
}

/// Errors that could occur during AEAD unsealing.
///
/// Used as the source of [`ErrorKind::Crypto`](crate::error::ErrorKind::Crypto)
/// errors — cipher implementations construct these to describe *why* an
/// unseal failed without expanding the kind-level vocabulary.
///
/// This covers only failures the framing layer itself detects. An
/// authentication-tag mismatch is raised by the inner
/// [`AeadDecryptor`](super::AeadDecryptor) and flows through as
/// [`DecryptError::Other`], not as an `UnsealError`.
#[non_exhaustive]
#[derive(Debug, Snafu)]
pub enum UnsealError {
    /// The bundle is malformed or uses an unsupported version.
    #[snafu(display("invalid bundle"))]
    InvalidBundle,
}