Function open_envelope

pub fn open_envelope<D, P>(
    secret_keys: &D,
    public_keys: &P,
    envelope: &Envelope,
    salts: &Salts,
) -> Result<OpenedEnvelope, CryptError>
where
    D: PublicKeyDecrypter<CredentialVault>,
    P: ParticipantPublicKeys,

Open and authenticate an envelope.

This function performs the complete envelope opening process:

1. Trial decryption of [CredentialVault]s to find the matching one
2. Decryption of the [MessageVaultPassport] using the [Credentials] key
3. Authentication of both the Credentials and the verifying keys
4. MAC verification for additional security

To open an envelope, a participant must:

• Successfully decrypt one of the CredentialVaults
• Verify that Credentials signatures are valid
• The included verifying keys have a valid MAC

All checks must pass for the envelope to be considered authentic.