1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
//! Error types for the crypto library.
use thiserror::Error;
/// All possible errors from cryptographic operations.
#[derive(Debug, Error)]
pub enum CryptoError {
/// Base64 decoding failed.
#[error("base64 decode: {0}")]
Base64(#[from] base64::DecodeError),
/// Decryption failed (wrong key, corrupted ciphertext, or MAC mismatch).
#[error("decryption failed: invalid ciphertext or wrong key")]
Decryption,
/// A key or salt has the wrong byte length.
#[error("invalid length: expected {expected} bytes, got {got}")]
InvalidLength {
/// Expected byte count.
expected: usize,
/// Actual byte count.
got: usize,
},
/// Ciphertext is too short to contain the expected components.
#[error("ciphertext too short to be valid")]
TooShort,
/// The key_hash string is not in the expected `{salt}$argon2id` format.
#[error("invalid key_hash format (expected `salt$argon2id`)")]
InvalidKeyHash,
/// A recovery key contains characters outside the allowed base32 alphabet.
#[error("invalid recovery key character")]
InvalidRecoveryKey,
/// The Argon2id key derivation failed.
#[error("key derivation failed: {0}")]
Kdf(String),
/// An error in the hybrid PQ KEM layer.
#[error("hybrid KEM: {0}")]
Hybrid(String),
/// An error in the hybrid PQ signature layer.
#[error("signature: {0}")]
Signature(String),
/// An error in the verifiable random function (ECVRF) layer that is not a
/// plain length mismatch — e.g. a proof component that is not a valid curve
/// point, or hash-to-curve exhausting its counter budget. A *verification*
/// failure of an otherwise well-formed proof is reported as `Ok(None)` from
/// `ecvrf_verify`, not as this error.
#[error("vrf: {0}")]
Vrf(String),
/// Decrypted bytes are not valid UTF-8.
#[error("UTF-8: {0}")]
Utf8(#[from] std::string::FromUtf8Error),
}