pub fn decrypt(
payload: &EncryptedPayload,
password: &str,
) -> Result<String, CryptoError>Expand description
Decrypt an EncryptedPayload with password.
Returns Err(CryptoError::DecryptionFailed) if the password is wrong or the
payload is corrupt — GCM authentication catches both (the tag fails to verify).