brontide

var (
	// ErrInvalidCipher is returned when a Brontide cipher state is nil.
	ErrInvalidCipher = errors.New("brontide: invalid cipher")

	// ErrInvalidKeySize is returned when a cipher key or salt is not 32 bytes.
	ErrInvalidKeySize = errors.New("brontide: invalid key size")

	// ErrDecrypt is returned when ChaCha20-Poly1305 authentication fails.
	ErrDecrypt = errors.New("brontide: decrypt failed")
)

var (
	// ErrInvalidPoint is returned when a secp256k1 point cannot be encoded
	// to, or decoded from, its Elligator Squared representation. It matches
	// bcrypto's 'Invalid point.' error.
	ErrInvalidPoint = errors.New("brontide: invalid point")

	// ErrInvalidUniformSize is returned when an Elligator Squared encoding
	// is not exactly 64 bytes. It matches bcrypto's 'Invalid hash size.'.
	ErrInvalidUniformSize = errors.New("brontide: invalid uniform key size")
)

var (
	// ErrFrameTooLarge is returned when a Brontide frame payload exceeds
	// hsd's maximum encrypted message size.
	ErrFrameTooLarge = errors.New("brontide: frame too large")

	// ErrShortFrame is returned when a complete-frame helper receives too
	// few bytes to contain a valid Brontide frame.
	ErrShortFrame = errors.New("brontide: short frame")

	// ErrFrameSizeMismatch is returned when the authenticated frame length
	// does not match the bytes supplied to a complete-frame helper.
	ErrFrameSizeMismatch = errors.New("brontide: frame size mismatch")
)

var (
	// ErrActSize is returned when a handshake act has the wrong length,
	// matching hsd's 'Act N: bad size.' errors.
	ErrActSize = errors.New("brontide: bad act size")

	// ErrActTag is returned when a handshake act fails authentication,
	// matching hsd's 'Act N: bad tag.' errors.
	ErrActTag = errors.New("brontide: bad act tag")

	// ErrHandshakeState is returned when handshake state is missing for the
	// requested act, such as an initiator without a remote static key.
	ErrHandshakeState = errors.New("brontide: invalid handshake state")
)

var (
	// ErrInvalidIdentityPath is returned when an identity-key path is empty.
	ErrInvalidIdentityPath = errors.New("brontide: invalid identity path")

	// ErrInvalidIdentityKey is returned when stored identity-key bytes are
	// malformed or outside the secp256k1 private key range.
	ErrInvalidIdentityKey = errors.New("brontide: invalid identity key")

	// ErrInsecureIdentityKeyPermissions is returned when a stored identity
	// key is readable or writable by group or other users.
	ErrInsecureIdentityKeyPermissions = errors.New(
		"brontide: insecure identity key permissions",
	)
)

var (
	// ErrInvalidConn is returned when a Brontide connection wrapper receives
	// a nil connection.
	ErrInvalidConn = errors.New("brontide: invalid connection")
)

var (
	// ErrInvalidKey is returned when Brontide key material is nil or invalid.
	ErrInvalidKey = errors.New("brontide: invalid key")
)