Skip to main content

decrypt_blob_cipher

Function decrypt_blob_cipher 

Source
pub(crate) fn decrypt_blob_cipher(
    cipher: &Cipher,
    sealed: &SealedCipherBlob,
    ctx: &mut KeyStoreContext<'_, KeySlotIds>,
    wrapping_key: SymmetricKeySlotId,
) -> Result<CipherView, BlobEncryptionError>
Expand description

Decrypts a pre-parsed blob-encrypted Cipher into a CipherView. Callers should obtain the SealedCipherBlob via try_parse_blob.

wrapping_key is the outer key under which the cipher’s CEK is wrapped — usually the user/organization key, but during key rotation it can be a Local slot containing the new user key.