/**
 * @file tstHostCrypto.h
 * @author NXP Semiconductors
 * @version 1.0
 * @par License
 *
 * Copyright 2016 NXP
 * SPDX-License-Identifier: Apache-2.0
 *
 * @par Description
 *  Module implementing host based crypto functionality used in example programs.
 * This module relies on the availability of OpenSSL / mbed TLS on the Host plaform.
 * @par HISTORY
 *
 */

#ifndef _TST_HOST_CRYPTO_H_
#define _TST_HOST_CRYPTO_H_

#include "sm_types.h"

#ifdef OPENSSL
#include <openssl/obj_mac.h>
#include <openssl/ecdsa.h>
#include <openssl/ecdh.h>
#include <openssl/sha.h>
#endif /* OPENSSL */

#ifdef MBEDTLS
#include <mbedtls/ecp.h>
#include <mbedtls/pk.h>
#include <mbedtls/ecdsa.h>
typedef mbedtls_pk_context EC_KEY;
#endif

#ifdef __cplusplus
extern "C" {
#endif

/**
 * Structure storing an RSA key in a crypto library independent way
 * Only ECC keys upto 512 bit (64 byte) supported
 */
typedef struct
{
    U8 pub[256];
    U16 pubLen;
    U8 privP[128];
    U16 privPLen;
    U8 privQ[128];
    U16 privQLen;
    U8 privDp[128];
    U16 privDpLen;
    U8 privDq[128];
    U16 privDqLen;
    U8 privIpq[128];
    U16 privIpqLen;
    U16 bits; // Length of modulus in bits
} rsaKeyComponents_t;

/**
 * Structure storing an ECC key in a crypto library independent way
 * Only ECC keys upto 512 bit (64 byte) supported
 */
typedef struct
{
    U8 pub[(64 << 1)+1+8]; //!< Public key stored as byte array + 8 for wrapping
    U16 pubLen;          //!< Length of pub (expressed as number of byte)
    U8 priv[64+8];       //!< Private key stored as byte array + 8 for wrapping
    U16 privLen;         //!< Length of priv (expressed as number of byte)
    U16 bits;            //!< Length of private key expressed in bits
    ECCCurve_t curve;    //!< Curve type (e.g. ::ECCCurve_NIST_P256)
} eccKeyComponents_t;

#define SIGNATURE_ASN_WRAPPED 0
#define SIGNATURE_RAW         1

#if defined(OPENSSL) || defined(MBEDTLS)
/// @cond Not used in A71CH example programs
U16 HOSTCRYPTO_Sign(EC_KEY* pKey, U8* pInputData, U16 inputLength, U8* pSignature, U16* pSignatureLength, U8 signatureFormat);
/// @endcond
U16 HOSTCRYPTO_ECC_ComputeSharedSecret(EC_KEY *pKey, U8 *pubKey, U16 pubKeyLen, U8 *pSharedSecretData, U16 *pSharedSecretDataLen);
U16 HOSTCRYPTO_GetPublicKey(EC_KEY* pKey, U8* pPublicKeyData, U16* pPublicKeyLen, U16 maxPublicKeyLen);
U16 HOSTCRYPTO_GetPrivateKey(EC_KEY* pKey, U8* pPrivateKeyData, U16* pPrivateKeyLen, U16 maxPrivateKeyLen);
U16 HOSTCRYPTO_GenerateEccKey(ECCCurve_t curveType, EC_KEY** ppKey);
void HOSTCRYPTO_FreeEccKey(EC_KEY** ppKey);
U16 HOSTCRYPTO_EccCreateOpenSslEccFromComponents(EC_KEY **eccRef, eccKeyComponents_t *eccKc);
#endif /* defined(OPENSSL) || defined(MBEDTLS) */

U16 HOSTCRYPTO_AesUnwrapKeyRFC3394(const U8 *wrapKey, U16 wrapKeyLen, U8 *out, U16 *outLen, const U8 *in, U16 inLen);
U16 HOSTCRYPTO_AesWrapKeyRFC3394(const U8 *wrapKey, U16 wrapKeyLen, U8 *out, U16 *outLen, const U8 *in, U16 inLen);

#if defined(TGT_A71CH) || defined (TGT_A71CL)
U16 HOSTCRYPTO_HkdfExpandSha256(const U8 *secret, U16 secretLen, const U8 *info, U16 infoLen, U8 *derivedData, U16 derivedDataLen);
U16 HOSTCRYPTO_HkdfFullSha256(const U8 *salt, U16 saltLen, const U8 *secret, U16 secretLen, const U8 *info, U16 infoLen, U8 *derivedData, U16 derivedDataLen);
U16 HOSTCRYPTO_TlsPskCreatePremasterSecret(const U8 *secret, U16 secretLen, U8 *premasterSecret, U16 *premasterSecretLen);
U16 HOSTCRYPTO_TlsEcdhPskCreatePremasterSecret(const U8 *ecdhSS, U16 ecdhSSLen, const U8 *secret, U16 secretLen, U8 *premasterSecret, U16 *premasterSecretLen);
U16 HOSTCRYPTO_HmacSha256(const U8 *secret, U16 secretLen, const U8 *data, U16 dataLen, U8 *hmacData);
U16 HOSTCRYPTO_Tls1_2_P_Sha256(const U8 *secret, U16 secretLen, const U8 *seed, U16 seedLen, U8 *derivedData, U16 derivedDataLen);
#else
U16 HOSTCRYPTO_RsaGenerateKeyPairComponents(int bits, U8 *pN, U16 *pNLen, U8 *pP, U16 *pPLen, U8 *pQ, U16 *pQLen, U8 *pDp, U16 *pDpLen, U8 *pDq, U16 *pDqLen, U8 *pIpq, U16 *pIpqLen);
U16 HOSTCRYPTO_RsaGenerateKeyPair(int bits, rsaKeyComponents_t *rsaKeypair);
U16 HOSTCRYPTO_RsaSign(HASHAlgo_t hType, U8 *m, U16 mLen, U8 *sig, U16 *sigLen, rsaKeyComponents_t *rsaKc);
U16 HOSTCRYPTO_RSA_Sign(HASHAlgo_t hType, U8 *msg, U32 msgLen, U8 *sig, U16 *sigLen, rsaKeyComponents_t *rsaKc);
U16 HOSTCRYPTO_RSA_Verify(HASHAlgo_t hType, U8 *msg, U32 msgLen, U8 *sig, U32 sigLen, rsaKeyComponents_t *rsaKc, U8 *pVerified);
#endif

#ifdef TGT_A70CM
//
// Currently only 128 bits KEK and 128 bit keyToWrap is supported
//
U16 HOSTCRYPTO_WrapKeyDsmr40(U8 *kek, U16 kekLen, U8 *keyToWrap, U16 keyToWrapLen, U8 *iv, U16 ivLen, U8 *wrappedKey, U16 *wrappedKeyLen);
U16 HOSTCRYPTO_UnwrapKeyDsmr40(U8 *kek, U16 kekLen, U8 *keyToUnwrap, U16 keyToUnwrapLen, U8 *iv, U16 ivLen, U8 *unwrappedKey, U16 *unwrappedKeyLen);
#endif

#ifdef TGT_A70CI
U16 HOSTCRYPTO_GenerateEccKeyByName(int curveName, EC_KEY** ppKey);
int HOST_ECC_Verify(U8 * pHash, U16 hashLen, U8 * pPubKey, U16 pubKeyLen, U8 * pSig, U16 sigLen);
int HOST_ECC_GenerateKeyPair(U8 *pPublicKey, U16 *pPublicKeyLength, U8 *pPrivateKey, U16 *pPrivateKeyLength);
int HOST_ECC_ComputeSharedSecret(U8 * pPrvKey, U32 prvKeyLength, U8 * pPubKey, U16 pubKeyLen, U8* pSharedSecretData, U16* pSharedSecretLength, U16 maxSharedSecretLength);

int HOST_RSA_GenerateKeyPair(U8 * pN, U16 * pNLen, U8 * pP, U16 * pPLen, U8 * pQ, U16 * pQLen, U8 * pDp, U16 * pDpLen, U8 * pDq, U16 * pDqLen, U8 * pIpq, U16 * pIpqLen);
int HOST_RSA_Sign(U8 hashFunction, U8 *msg, U32 msgLen, U8 *sig, U32 * sigLen,
    U8 * pP, U16 lengthP, U8 * pQ, U16 lengthQ, U8 * pDp, U16 lengthDp, U8 * pDq, U16 lengthDq, U8 * pIpq, U16 lengthIpq) ;
int HOST_RSA_Verify(U8 hashFunction, U8 *msg, U32 mlen, U8 *sig, U32 siglen, U8 * pPubkey, U16 pubKeyLen);
// OAEP decryption (using PKCS #1 v2.1) - only decryption (OAEP on host)
int HOST_RSA_Decrypt(U8 *userId,
    U32 inDataLength,
    U8 *pP,
    U16 lengthP,
    U8 *pQ,
    U16 lengthQ,
    U8 *pDp,
    U16 lengthDp,
    U8 *pDq,
    U16 lengthDq,
    U8 *pIpq,
    U16 lengthIpq,
    U8 *pOutData,
    U16 *pOutDataLength);
// OAEP encryption (using PKCS #1 v2.1) - only encryption (OAEP on host)
int HOST_RSA_Encrypt(U8 *userId, U32 inDataLength, U8 *pPubKey, U16 lengthPubKey, U8 *pOutData, U16 *pOutDataLength);
#endif

#ifdef __cplusplus
}
#endif
#endif // _TST_HOST_CRYPTO_H_