pub fn decrypt(
ciphertext: &[u8],
identity: &MurkIdentity,
) -> Result<Zeroizing<Vec<u8>>, CryptoError>Expand description
Decrypt ciphertext using an identity (age, SSH, or plugin).
Returns the plaintext wrapped in Zeroizing<Vec<u8>> so the buffer is
cleared when dropped. Defense-in-depth against plaintext lingering in
freed heap memory.
For plugin identities this spawns age-plugin-<name> and may prompt
the user (YubiKey touch, Touch ID, PIN entry) via UiCallbacks.