use thiserror::Error;
#[derive(Debug, Error)]
pub enum CryptoError {
#[error("base64 decode: {0}")]
Base64(#[from] base64::DecodeError),
#[error("decryption failed: invalid ciphertext or wrong key")]
Decryption,
#[error("invalid length: expected {expected} bytes, got {got}")]
InvalidLength {
expected: usize,
got: usize,
},
#[error("ciphertext too short to be valid")]
TooShort,
#[error("invalid key_hash format (expected `salt$argon2id`)")]
InvalidKeyHash,
#[error("invalid recovery key character")]
InvalidRecoveryKey,
#[error("key derivation failed: {0}")]
Kdf(String),
#[error("hybrid KEM: {0}")]
Hybrid(String),
#[error("UTF-8: {0}")]
Utf8(#[from] std::string::FromUtf8Error),
}