/*
 * Copyright (c) 2023, [MTG AG](https://www.mtg.de).
 * Copyright (c) 2026 [Ribose Inc](https://www.ribose.com).
 * All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without modification,
 * are permitted provided that the following conditions are met:
 *
 * 1.  Redistributions of source code must retain the above copyright notice,
 *     this list of conditions and the following disclaimer.
 *
 * 2.  Redistributions in binary form must reproduce the above copyright notice,
 *     this list of conditions and the following disclaimer in the documentation
 *     and/or other materials provided with the distribution.
 *
 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
 * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
 * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
 * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
 * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
 * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 */

#ifndef SPHINCSPLUS_H_
#define SPHINCSPLUS_H_

#include "config.h"
#include <rnp/rnp_def.h>
#include <vector>
#include <repgp/repgp_def.h>
#include "crypto/rng.h"
#include "crypto/secure_bytes.h"

struct pgp_sphincsplus_key_t;
struct pgp_sphincsplus_signature_t;

typedef struct pgp_sphincsplus_signature_t {
    std::vector<uint8_t> sig;
} pgp_sphincsplus_signature_t;

class pgp_sphincsplus_private_key_t {
  public:
    pgp_sphincsplus_private_key_t(const uint8_t *  key_encoded,
                                  size_t           key_encoded_len,
                                  pgp_pubkey_alg_t alg);
    pgp_sphincsplus_private_key_t(std::vector<uint8_t> const &key_encoded,
                                  pgp_pubkey_alg_t            alg);
    pgp_sphincsplus_private_key_t() = default;

    bool is_valid(rnp::RNG *rng) const;

    pgp_pubkey_alg_t
    alg() const
    {
        return pk_alg_;
    }

    rnp_result_t sign(rnp::RNG *                   rng,
                      pgp_sphincsplus_signature_t *sig,
                      const uint8_t *              msg,
                      size_t                       msg_len) const;
    void
    secure_clear()
    {
        key_encoded_ = rnp::SecureBytes();
        is_initialized_ = false;
    }
    std::vector<uint8_t>
    get_encoded() const
    {
        return key_encoded_.unlock();
    };

  private:
    rnp::SecureBytes key_encoded_;
    pgp_pubkey_alg_t pk_alg_;
    bool             is_initialized_ = false;
};

class pgp_sphincsplus_public_key_t {
  public:
    pgp_sphincsplus_public_key_t(const uint8_t *  key_encoded,
                                 size_t           key_encoded_len,
                                 pgp_pubkey_alg_t alg);
    pgp_sphincsplus_public_key_t(std::vector<uint8_t> const &key_encoded,
                                 pgp_pubkey_alg_t            alg);
    pgp_sphincsplus_public_key_t() = default;

    bool
    operator==(const pgp_sphincsplus_public_key_t &rhs) const
    {
        return (pk_alg_ == rhs.pk_alg_) && (key_encoded_ == rhs.key_encoded_);
    }

    rnp_result_t verify(const pgp_sphincsplus_signature_t *sig,
                        const uint8_t *                    msg,
                        size_t                             msg_len) const;

    bool is_valid(rnp::RNG *rng) const;

    pgp_pubkey_alg_t
    alg() const
    {
        return pk_alg_;
    }

    std::vector<uint8_t>
    get_encoded() const
    {
        return key_encoded_;
    };

  private:
    std::vector<uint8_t> key_encoded_;
    pgp_pubkey_alg_t     pk_alg_;
    bool                 is_initialized_ = false;
};

std::pair<pgp_sphincsplus_public_key_t, pgp_sphincsplus_private_key_t>
sphincsplus_generate_keypair(rnp::RNG *rng, pgp_pubkey_alg_t alg);

rnp_result_t pgp_sphincsplus_generate(rnp::RNG *             rng,
                                      pgp_sphincsplus_key_t *material,
                                      pgp_pubkey_alg_t       alg);

rnp_result_t sphincsplus_validate_key(rnp::RNG *                   rng,
                                      const pgp_sphincsplus_key_t *key,
                                      bool                         secret);

typedef struct pgp_sphincsplus_key_t {
    pgp_sphincsplus_public_key_t  pub;
    pgp_sphincsplus_private_key_t priv;
} pgp_sphincsplus_key_t;

size_t sphincsplus_privkey_size(pgp_pubkey_alg_t alg);
size_t sphincsplus_pubkey_size(pgp_pubkey_alg_t alg);
size_t sphincsplus_signature_size(pgp_pubkey_alg_t alg);

#endif