Enum MessageError 

pub enum MessageError {
    EnvelopeTooLarge {
        size: usize,
        max: usize,
    },
    Truncated(String),
    UnsupportedVersion(u8),
    UnsupportedCompression(u8),
    DecompressionBomb {
        declared: usize,
        max: usize,
    },
    DecompressedLengthMismatch {
        expected: usize,
        actual: usize,
    },
    PayloadTooLarge(usize),
    Codec(String),
    UnsupportedType(u32),
    DuplicateType(u32),
    InvalidPoint,
    UnresolvableSender,
    SealFailed(String),
    OpenFailed,
    BadSignature,
    HeaderMismatch,
    Replay,
    Expired,
    TtlTooLong,
}

Every fail-cleanly outcome of encoding, framing, or (de)compressing a dig-message (SPEC §1, §1.1, §2). A receiver MUST reject — never panic — on any of these.

Variants

EnvelopeTooLarge

The on-wire frame exceeds crate::MAX_ENVELOPE_BYTES (SPEC §1).

Fields

size: usize

max: usize

Truncated(String)

The frame ended before a complete envelope could be decoded (SPEC §1).

UnsupportedVersion(u8)

The envelope declares a version this reader does not support (SPEC §2 field 1).

UnsupportedCompression(u8)

The compression algorithm id is not recognized (SPEC §1.1). Never mis-decode with a wrong codec.

DecompressionBomb

The declared uncompressed length exceeds the bomb-guard cap (SPEC §1.1).

Fields

declared: usize

max: usize

DecompressedLengthMismatch

The decoded output length did not match the declared uncompressed_len (SPEC §1.1).

Fields

expected: usize

actual: usize

PayloadTooLarge(usize)

A payload’s uncompressed length does not fit the u32 wire field (SPEC §5.2).

Codec(String)

A Streamable (de)serialization or codec-level failure with the underlying detail (SPEC §1).

UnsupportedType(u32)

The message_type is not registered (SPEC §4). Returned when the dispatch shape is a request or stream frame so the caller can reply UNSUPPORTED_TYPE; an unknown one-shot/response is instead silently dropped (never surfaced as an error — the forward-compat property).

DuplicateType(u32)

A crate::MessageType was registered twice (SPEC §4 additive-only: an id, once assigned, is never renumbered or repurposed). A duplicate registration is a caller bug, reported — never silently overwriting the existing handler.

InvalidPoint

A received G1 point (the kem_enc encapsulation or the resolved sender key) failed the mandatory prime-order subgroup / non-identity check BEFORE any DH (SPEC §5.1). Fail-closed: blocks small-subgroup / invalid-curve key-recovery attacks.

UnresolvableSender

The sender DID could not be resolved to a BLS G1 identity key at the claimed epoch (SPEC §5.2). An unknown/unresolvable sender means the seal cannot be authenticated — fail-closed.

SealFailed(String)

Sealing failed to produce ciphertext (an AEAD encrypt or ephemeral-key error, SPEC §5.1).

OpenFailed

The AEAD open failed — a wrong recipient key, wrong sender key, tampered ciphertext, or tampered AAD header all land here (SPEC §5.1/§5.2). Fail-closed, no plaintext is revealed.

BadSignature

The mandatory BLS G2 sender signature was absent, malformed, or did not verify against the resolved sender key over SIG_DOMAIN || transcript (SPEC §5.1). Fail-closed REJECT.

HeaderMismatch

The sealed inner message_type/correlation_id did not equal the cleartext header — an anti type-confusion / anti-splice REJECT (SPEC §5.2 step b).

Replay

The message is a replay or is stale: a duplicate counter, a counter below the sliding window, or a timestamp_ms outside the freshness window (SPEC §5.6). Fail-closed DROP.

Expired

The message is past its sender-controlled expires_at TTL and is DISCARDED with no side effect (SPEC §5.6b).

TtlTooLong

expires_at exceeds timestamp_ms + MAX_MESSAGE_TTL_MS — a near-infinite validity claim, REJECTED (never clamped, since clamping would alter signed content) (SPEC §5.6b).

Trait Implementations

impl Debug for MessageError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for MessageError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for MessageError

impl Error for MessageError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl PartialEq for MessageError

fn eq(&self, other: &MessageError) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for MessageError