pub fn decrypt_page(
key: &[u8; 32],
page_id: u32,
frame: &[u8],
) -> Result<Vec<u8>, PageEnvelopeError>Expand description
Decrypt an envelope produced by encrypt_page. page_id MUST
match the value passed at encrypt time — a mismatch surfaces as
PageEnvelopeError::KeyMismatch (the GCM tag check failing),
which is the correct signal: an attacker swapping pages is
functionally indistinguishable from a wrong key.