Enum KmsError 

pub enum KmsError {
    KeyNotFound {
        key_id: String,
    },
    KekFileIo {
        path: PathBuf,
        source: Error,
    },
    KekBadLength {
        path: PathBuf,
        expected: usize,
        got: usize,
    },
    KekDirIo {
        path: PathBuf,
        source: Error,
    },
    WrappedDekTooShort {
        got: usize,
        min: usize,
    },
    UnwrapFailed {
        key_id: String,
    },
    BackendUnavailable {
        message: String,
    },
}

Variants

KeyNotFound

Fields

key_id: String

KekFileIo

Fields

path: PathBuf

source: Error

KekBadLength

Fields

path: PathBuf

expected: usize

got: usize

KekDirIo

Fields

path: PathBuf

source: Error

WrappedDekTooShort

LocalKms saw a wrapped-DEK ciphertext shorter than the minimum (nonce + tag). Surface as a distinct error so audit logs can tell “metadata corruption / truncation” apart from “wrong key” / “tampered with”.

Fields

got: usize

min: usize

UnwrapFailed

AES-GCM authentication failure on unwrap. Either the wrapped DEK was tampered with, or it was wrapped under a different KEK than the one we’re holding for key_id.

Fields

key_id: String

BackendUnavailable

Backend-specific transport error (network, AWS SDK, etc). source is type-erased so the trait stays object-safe.

Fields

message: String

Trait Implementations

impl Debug for KmsError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for KmsError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for KmsError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<KmsError> for SseError

fn from(source: KmsError) -> Self

Converts to this type from the input type.