Enum CryptoError 

pub enum CryptoError {
    InvalidKeyLength {
        algorithm: &'static str,
        expected: usize,
        got: usize,
    },
    InvalidKey(String),
    InvalidNonceLength {
        algorithm: &'static str,
        expected: usize,
        got: usize,
    },
    AuthenticationFailed,
    Encryption(String),
    Decryption(String),
    Kdf(String),
    Pqc(String),
    ReedSolomon(String),
    InvalidParameter(String),
    Serialization(String),
    Compression(String),
    Io(Error),
    ChecksumMismatch {
        expected: u32,
        got: u32,
    },
    InvalidNormalization {
        codepoint: char,
        reason: &'static str,
    },
    RejectedCodepointClass {
        codepoint: char,
        class: &'static str,
    },
    InsufficientEntropy {
        got_bits: f64,
        required_min: f64,
    },
    RecoveryPhrase(String),
}

Unified error type for cryptographic operations.

See module-level documentation for a description of each variant.

Variants

InvalidKeyLength

Key bytes are the wrong length for the algorithm.

Example: passed 16 bytes to a function expecting a 32-byte key.

Fields

algorithm: &'static str

Name of the algorithm (e.g. “Ed25519”, “Falcon-1024”).

expected: usize

Required length in bytes.

got: usize

Actual length received.

InvalidKey(String)

Key is structurally valid in length but fails algorithmic validation.

Example: Ed25519 public key does not encode a valid curve point, or Falcon secret key fails deserialization.

InvalidNonceLength

Nonce bytes are the wrong length.

Fields

algorithm: &'static str

Name of the algorithm (e.g. “XChaCha20-Poly1305”).

expected: usize

Required nonce length in bytes.

got: usize

Actual length received.

AuthenticationFailed

Authentication tag or signature verification failed.

This is the normal “wrong key / tampered data” error. No further detail is given to avoid oracle attacks.

Encryption(String)

Encryption failed.

Decryption(String)

Decryption failed (wrong key, tampered ciphertext, etc.).

Kdf(String)

Key derivation failed.

Pqc(String)

Post-quantum primitive operation failed.

ReedSolomon(String)

Reed-Solomon encode/decode error.

InvalidParameter(String)

Invalid input parameter.

Serialization(String)

Serialization or deserialization error.

Compression(String)

Compression or decompression error.

Io(Error)

Underlying I/O error.

ChecksumMismatch

Recovery phrase truncated-SHA-3-256 checksum did not match the encoded entropy.

Fields

expected: u32

Expected checksum bits (SHA3-256(entropy)[..n_bits]).

got: u32

Checksum bits decoded from the phrase tail.

InvalidNormalization

Recovery phrase contained a codepoint whose NFKC canonical form differs from the input. We strictly reject — silent canonicalization would enable malleability attacks.

Fields

codepoint: char

The offending codepoint.

reason: &'static str

Why NFKC canonicalization failed.

RejectedCodepointClass

Recovery phrase contained a codepoint from a forbidden class (ZWJ, Variation Selector, combining mark, BIDI mark, default-ignorable, or control).

Fields

codepoint: char

The offending codepoint.

class: &'static str

The forbidden class: “ZWJ” | “VARIATION_SELECTOR” | “COMBINING_MARK” | “BIDI_MARK” | “DEFAULT_IGNORABLE” | “CONTROL”.

InsufficientEntropy

Custom-alphabet phrase would encode fewer than the safety floor of entropy bits.

Fields

got_bits: f64

Entropy bits the requested phrase would encode.

required_min: f64

Minimum entropy bits required (currently 128).

RecoveryPhrase(String)

A recovery-phrase operation failed in a way not captured by the structured variants above. Reserved for future subclasses.

Trait Implementations

impl Clone for CryptoError

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CryptoError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for CryptoError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for CryptoError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<Error> for CryptoError

fn from(err: Error) -> Self

Converts to this type from the input type.

impl From<SchnorrError> for CryptoError

fn from(e: SchnorrError) -> Self

Converts to this type from the input type.