Function libsignal_protocol::sealed_sender_decrypt

pub async fn sealed_sender_decrypt(
    ciphertext: &[u8],
    trust_root: &PublicKey,
    timestamp: Timestamp,
    local_e164: Option<String>,
    local_uuid: String,
    local_device_id: DeviceId,
    identity_store: &mut dyn IdentityKeyStore,
    session_store: &mut dyn SessionStore,
    pre_key_store: &mut dyn PreKeyStore,
    signed_pre_key_store: &dyn SignedPreKeyStore,
    kyber_pre_key_store: &mut dyn KyberPreKeyStore,
) -> Result<SealedSenderDecryptionResult>

Decrypt a Sealed Sender message ciphertext in either the v1 or v2 format, validate its sender certificate, and then decrypt the inner message payload.

This method calls sealed_sender_decrypt_to_usmc to extract the sender information, including the embedded SenderCertificate. The sender certificate (signed by the ServerCertificate) is then validated against the trust_root baked into the client to ensure that the sender’s identity was not forged.