tholos-pq 0.3.0

Pure-Rust post-quantum multi-recipient encryption: ML-KEM-1024 + ML-DSA-65 + XChaCha20-Poly1305
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38

//! Error types for tholos-pq operations.

use thiserror::Error;

/// Errors that can occur during encryption, decryption, or serialization operations.
#[derive(Debug, Error, Clone, PartialEq, Eq)]
pub enum TholosError {
    /// Signature verification failed or sender is not in the allowed list.
    ///
    /// Deliberately indistinguishable from an invalid signature so callers cannot
    /// be used as an oracle for allow-list membership.
    #[error("signature invalid or sender not allowed")]
    BadSignature,

    /// No recipient envelope found for the specified recipient ID.
    #[error("missing envelope for recipient {0}")]
    MissingEnvelope(String),

    /// A field in the wire format is malformed or has an invalid value.
    #[error("malformed field: {0}")]
    Malformed(&'static str),

    /// AEAD encryption or decryption operation failed.
    #[error("aead failure")]
    Aead,

    /// CBOR serialization or deserialization error.
    #[error("serialization error: {0}")]
    Ser(String),

    /// Encryption was requested with no recipients.
    #[error("at least one recipient is required")]
    NoRecipients,

    /// Wire format version or algorithm suite is not supported.
    #[error("unsupported wire format version {v} / suite {suite}")]
    UnsupportedSuite { v: u32, suite: String },
}