decode

Decodes a stored pass and rejects malformed lengths and trailing bytes.

These checks prevent a corrupt or incompatible stored value from being used as trust material.