Error type for joy-crypt primitives.
Crypto failures map onto a small set of categories. Callers in joy-core convert to their own error type at the boundary.