pub fn maybe_decrypt_blob(stored: &[u8]) -> Vec<u8> ⓘExpand description
Decrypt a secret key BLOB. Tolerant of the half-migrated DB: a 32-byte value is a raw (not-yet-wrapped / encryption-off) key, and anything that fails to authenticate is returned as-is, so a mixed store always reads back correctly.