#3 is what will happen for most malformed ciphertexts, but the question is whether we want to distinguish between any of these errors. On the sign/verification side we provide a few diff error outputs for signing but only `InvalidSignature` or obvious ones like digest too large for key size for verification.