| AuthenticationError |
AEAD authentication failed. A wrong key and modified authenticated data are intentionally reported as the same error. |
| ChunkCountExceededError |
A chunk count derived from a plaintext or ciphertext length exceeds MAX_CHUNK_COUNT. |
| CriticalHeaderError |
A crit (label 2) listing was rejected — wrong bucket, wrong shape, or naming a label this profile does not understand or does not actually carry. |
| CryptoOperationError |
A cryptographic runtime operation failed for a reason other than authentication. |
| EnvelopeError |
Base class for errors defined by this package. |
| InvalidChunkSizeError |
chunkSize is not an integer within [MIN_CHUNK_SIZE, MAX_CHUNK_SIZE]. |
| InvalidCiphertextLengthError |
The ciphertext length cannot represent a valid object for the selected scheme. |
| InvalidKeyError |
A CEK or KEK is not a 32-byte, non-zero AES-256 key. |
| InvalidNonceError |
A base nonce, chunk index, or last-chunk flag is not valid for per-chunk nonce derivation. |
| InvalidPlaintextError |
Plaintext supplied to an encryption operation is not a byte string. |
| InvalidPlaintextLengthError |
plaintextLength is not a non-negative safe integer or exceeds the limit for the selected scheme or encoded layout. |
| InvalidRangeError |
A requested byte range cannot be served: malformed, out of bounds, or empty. HTTP 416 territory. |
| InvalidSourceLengthError |
A random-access source’s size is invalid, or an opened range produced fewer or more bytes than requested. A transport or source fault, not a bad ciphertext layout. |
| KeyResolutionError |
A KeyResolver threw or rejected instead of returning a CEK. |
| MalformedEnvelopeError |
The envelope, or a value destined for one, does not match this package’s wire profile. Raised on both paths: by encode when a caller’s input would produce bytes this package could not read back, and by decode on anything the profile forbids. |
| NoUsableRecipientError |
No recipient in a valid envelope could provide a CEK. |
| RecipientAttemptLimitError |
A recipient unwrapper reached its configured limit of key-unwrap attempts. |
| RecipientUnwrapError |
A recipient unwrapper failed instead of declining the available recipients. |
| UnsupportedSchemeError |
The protected header’s alg is not one of the schemes this package implements (ALG_AES_256_GCM or ALG_CHUNKED_AES_256_GCM_STREAM). |
