pub fn decrypt_secret(
master_key: &[u8],
context: &[u8],
aad: &[u8],
envelope: &str,
) -> Result<Vec<u8>>Expand description
Decrypts a strict v1:<base64url nonce>:<base64url ciphertext> secret envelope.
ยงErrors
Returns a classified error for an empty context, malformed envelope, unsupported version, key derivation failure, or authentication failure. Error values never contain secret material.