pub fn decrypt(
key: &BackupKey,
sealed: &mut impl Read,
out: &mut impl Write,
) -> Result<String>Expand description
Decrypts sealed into out (any authentication failure, truncation or
extra data is an error); returns the SHA-256 of the plain content.