Struct RetryingDecryptor 

pub struct RetryingDecryptor<D> { /* private fields */ }

An AeadDecryptor that retries once after a NoMatchingKey error by calling try_refresh on the inner decryptor.

It covers cross-server key propagation during rotation (one server seals with a freshly rotated key another has not loaded yet) and is the cipher analogue of RetryingVerifier. Wrap the root decryptor with it so any composition underneath — a ScheduledRefreshCipher, a MultiKeyDecryptor, or arbitrary nesting — gets one retry without implementing it. The retry’s refresh is gated by the inner layer’s policy, so a burst of unknown-kid bundles cannot force a burst of upstream fetches.

The retry fires only on NoMatchingKey, so callers must pass a CipherMatch with a kid and register kids on all keys in the set. A key with no registered kid can never be ruled out: it falls back to a ByAlgorithm match, is attempted, and its authentication failure masks the miss as Other — no retry fires. Likewise, with no CipherMatch at all, a stale key set surfaces as an authentication failure from try-all dispatch, indistinguishable from tampering and deliberately not retried.

See composing crypto strategies for how this layer (additions) pairs with the scheduled layer (removals).

Implementations

impl<D: AeadDecryptor> RetryingDecryptor<D>

pub fn new(inner: D) -> Self

Wraps a decryptor so that a NoMatchingKey result triggers a refresh and one retry.

Trait Implementations

impl<D: AeadDecryptor> AeadDecryptor for RetryingDecryptor<D>

fn cipher_match(&self, m: &CipherMatch<'_>) -> Option<KeyMatchStrength>

Returns how well this decryptor matches the given selection criteria.

fn decrypt<'a>( &'a self, cipher_match: Option<&'a CipherMatch<'a>>, nonce: &'a [u8], ciphertext: &'a [u8], tag: &'a [u8], aad: &'a [u8], ) -> MaybeSendBoxFuture<'a, Result<Vec<u8>, DecryptError>>

Asynchronously decrypts the given ciphertext with the provided nonce, tag, and associated data.

fn try_refresh(&self) -> MaybeSendBoxFuture<'_, bool>

Requests a best-effort refresh of the decryptor’s key material — the cipher analogue of JwsVerifier::try_refresh.

impl<D: Clone> Clone for RetryingDecryptor<D>

fn clone(&self) -> RetryingDecryptor<D>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<D: Debug> Debug for RetryingDecryptor<D>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.