pub(crate) fn decrypt_blob_cipher(
cipher: &Cipher,
sealed: &SealedCipherBlob,
ctx: &mut KeyStoreContext<'_, KeySlotIds>,
wrapping_key: SymmetricKeySlotId,
) -> Result<CipherView, BlobEncryptionError>Expand description
Decrypts a pre-parsed blob-encrypted Cipher into a CipherView. Callers
should obtain the SealedCipherBlob via try_parse_blob.
wrapping_key is the outer key under which the cipher’s CEK is wrapped —
usually the user/organization key, but during key rotation it can be a
Local slot containing the new user key.