/*
 * Copyright (c) 2023, [MTG AG](https://www.mtg.de).
 * All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without modification,
 * are permitted provided that the following conditions are met:
 *
 * 1.  Redistributions of source code must retain the above copyright notice,
 *     this list of conditions and the following disclaimer.
 *
 * 2.  Redistributions in binary form must reproduce the above copyright notice,
 *     this list of conditions and the following disclaimer in the documentation
 *     and/or other materials provided with the distribution.
 *
 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
 * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
 * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
 * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
 * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
 * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 */

#include "config.h"
#include "kmac.hpp"

#if defined(ENABLE_PQC_DBG_LOG)
#include "crypto/mem.h"
#endif

#if defined(CRYPTO_BACKEND_BOTAN)
#include "kmac_botan.hpp"
#endif
#if defined(CRYPTO_BACKEND_OPENSSL)
#error KMAC256 not implemented for OpenSSL Backend
#endif

namespace rnp {
std::unique_ptr<KMAC256>
KMAC256::create()
{
#if defined(CRYPTO_BACKEND_OPENSSL)
#error KMAC256 not implemented for OpenSSL
    // return Hash_OpenSSL::create();
#elif defined(CRYPTO_BACKEND_BOTAN)
    return KMAC256_Botan::create();
#else
#error "Crypto backend not specified"
#endif
}

std::vector<uint8_t>
KMAC256::domSeparation() const
{
    return domSeparation_;
}

std::vector<uint8_t>
KMAC256::customizationString() const
{
    return customizationString_;
}

std::vector<uint8_t>
KMAC256::counter() const
{
    return counter_;
}

/*
    //   Input:
    //   algID     - the algorithm ID encoded as octet

    fixedInfo = algID
*/
std::vector<uint8_t>
KMAC256::fixedInfo(pgp_pubkey_alg_t alg_id)
{
    std::vector<uint8_t> result;
    result.push_back(static_cast<uint8_t>(alg_id));
    return result;
}

std::vector<uint8_t>
KMAC256::encData(const std::vector<uint8_t> &ecc_key_share,
                 const std::vector<uint8_t> &ecc_ciphertext,
                 const std::vector<uint8_t> &kyber_key_share,
                 const std::vector<uint8_t> &kyber_ciphertext,
                 pgp_pubkey_alg_t            alg_id)
{
    std::vector<uint8_t> enc_data;
    std::vector<uint8_t> counter_vec = counter();
    std::vector<uint8_t> fixedInfo_vec = fixedInfo(alg_id);

    /* draft-wussler-openpgp-pqc-02:

        eccKemData = eccKeyShare || eccCipherText
        kyberKemData = kyberKeyShare || kyberCipherText
        encData = counter || eccKemData || kyberKemData || fixedInfo
    */
#if defined(ENABLE_PQC_DBG_LOG)
    RNP_LOG_NO_POS_INFO("KMAC256 encData: ");
    RNP_LOG_U8VEC(" - counter: %s", counter_vec);
    RNP_LOG_U8VEC(" - eccKeyShare: %s", ecc_key_share);
    RNP_LOG_U8VEC(" - eccCipherText: %s", ecc_ciphertext);
    RNP_LOG_U8VEC(" - kyberKeyShare: %s", kyber_key_share);
    RNP_LOG_U8VEC(" - kyberCipherText: %s", kyber_ciphertext);
    RNP_LOG_U8VEC(" - fixedInfo: %s", fixedInfo_vec);
#endif

    enc_data.insert(enc_data.end(), counter_vec.begin(), counter_vec.end());
    enc_data.insert(enc_data.end(), ecc_key_share.begin(), ecc_key_share.end());
    enc_data.insert(enc_data.end(), ecc_ciphertext.begin(), ecc_ciphertext.end());
    enc_data.insert(enc_data.end(), kyber_key_share.begin(), kyber_key_share.end());
    enc_data.insert(enc_data.end(), kyber_ciphertext.begin(), kyber_ciphertext.end());
    enc_data.insert(enc_data.end(), fixedInfo_vec.begin(), fixedInfo_vec.end());

    return enc_data;
}

KMAC256::~KMAC256()
{
}

} // namespace rnp