Method unwrap

mlspp/src/state.cpp:409–462

}

ValidatedContent
State::unwrap(const MLSMessage& msg)
{
  if (msg.version != ProtocolVersion::mls10) {
    throw InvalidParameterError("Unsupported version");
  }

  const auto unprotect = overloaded{
    [&](const PublicMessage& pt) -> ValidatedContent {
      if (pt.get_group_id() != _group_id) {
        throw ProtocolError("PublicMessage not for this group");
      }

      if (pt.get_epoch() != _epoch) {
        throw ProtocolError("PublicMessage not for this epoch");
      }

      auto maybe_content_auth =
        pt.unprotect(_suite, _key_schedule.membership_key, group_context());
      if (!maybe_content_auth) {
        throw ProtocolError("Membership tag failed to verify");
      }
      return opt::get(maybe_content_auth);
    },

    [&](const PrivateMessage& ct) -> ValidatedContent {
      if (ct.get_group_id() != _group_id) {
        throw ProtocolError("PrivateMessage not for this group");
      }

      if (ct.get_epoch() != _epoch) {
        throw ProtocolError("PrivateMessage not for this epoch");
      }

      auto maybe_content_auth =
        ct.unprotect(_suite, _keys, _key_schedule.sender_data_secret);
      if (!maybe_content_auth) {
        throw ProtocolError("PrivateMessage decryption failure");
      }
      return opt::get(maybe_content_auth);
    },

    [](const auto& /* unused */) -> ValidatedContent {
      throw ProtocolError("Invalid wire format");
    },
  };

  auto val_content = var::visit(unprotect, msg.message);
  if (!verify(val_content.content_auth)) {
    throw InvalidParameterError("Message signature failed to verify");
  }

  return val_content;
}

Proposal
State::add_proposal(const KeyPackage& key_package) const