pub fn decrypt_shard_data(
content_key: &ContentKey,
ancestor_keys: &[ContentKey],
blob: &EncryptedShard,
wrapped_key: Option<&WrappedKey>,
) -> Result<DecryptedShard>Expand description
Decrypt a shard blob with wrapped key support.
Fallback chain:
- If
wrapped_keyisSome, try unwrapping with content_key, then each ancestor key - Try content_key directly
- Try each ancestor key directly