#
# Copyright 2018-2020 NXP
# SPDX-License-Identifier: Apache-2.0
#
#

"""License text"""

import ctypes
import logging
from . import sss_api as apis
from .keystore import KeyStore
from .keyobject import KeyObject

log = logging.getLogger(__name__)

CIPHER_TYPE_DICTIONARY = {
    apis.kSSS_CipherType_NONE: "",
    apis.kSSS_CipherType_AES: "AES",
    apis.kSSS_CipherType_DES: "DES",
    apis.kSSS_CipherType_CMAC: "CMAC",
    apis.kSSS_CipherType_HMAC: "HMAC",
    apis.kSSS_CipherType_MAC: "MAC",
    apis.kSSS_CipherType_RSA: "RSA",
    apis.kSSS_CipherType_RSA_CRT: "RSA_CRT",
    apis.kSSS_CipherType_EC_NIST_P: "NIST-P",
    apis.kSSS_CipherType_EC_NIST_K: "NIST-K",
    apis.kSSS_CipherType_EC_MONTGOMERY: "EC_MONTGOMERY",
    apis.kSSS_CipherType_EC_TWISTED_ED: "EC_TWISTED_ED",
    apis.kSSS_CipherType_EC_BRAINPOOL: "EC_BRAINPOOL",
    apis.kSSS_CipherType_EC_BARRETO_NAEHRIG: "EC_BARRETO_NAEHRIG",
    apis.kSSS_CipherType_UserID: "USER-ID",
    apis.kSSS_CipherType_Certificate: "CERTIFICATE",
    apis.kSSS_CipherType_Binary: "BINARY",
    apis.kSSS_CipherType_Count: "COUNT",
    apis.kSSS_CipherType_PCR: "PCR",
    apis.kSSS_CipherType_ReservedPin: "RESERVED_PIN"
}

KEY_PART_DICTIONARY = {
    apis.kSSS_KeyPart_NONE: "",
    apis.kSSS_KeyPart_Default: "",
    apis.kSSS_KeyPart_Public: "(Public Key)",
    apis.kSSS_KeyPart_Private: "(Private Key)",
    apis.kSSS_KeyPart_Pair: "(Key Pair)",
}

CRYPTO_OBJID_DICTIONARY = {
    apis.kSE05x_CryptoObject_NA: "",
    apis.kSE05x_CryptoObject_DIGEST_SHA: "Digest SHA1",
    apis.kSE05x_CryptoObject_DIGEST_SHA224: "Digest SHA224",
    apis.kSE05x_CryptoObject_DIGEST_SHA256: "Digest SHA256",
    apis.kSE05x_CryptoObject_DIGEST_SHA384: "Digest SHA384",
    apis.kSE05x_CryptoObject_DIGEST_SHA512: "Digest SHA512",
    apis.kSE05x_CryptoObject_DES_CBC_NOPAD: "DES_CBC_NOPAD",
    apis.kSE05x_CryptoObject_DES_CBC_ISO9797_M1: "DES_CBC_ISO9797_M1",
    apis.kSE05x_CryptoObject_DES_CBC_ISO9797_M2: "DES_CBC_ISO9797_M2",
    apis.kSE05x_CryptoObject_DES_CBC_PKCS5: "DES_CBC_PKCS5",
    apis.kSE05x_CryptoObject_DES_ECB_NOPAD: "DES_ECB_NOPAD",
    apis.kSE05x_CryptoObject_DES_ECB_ISO9797_M1: "DES_ECB_ISO9797_M1",
    apis.kSE05x_CryptoObject_DES_ECB_ISO9797_M2: "DES_ECB_ISO9797_M2",
    apis.kSE05x_CryptoObject_DES_ECB_PKCS5: "DES_ECB_PKCS5",
    apis.kSE05x_CryptoObject_AES_ECB_NOPAD: "AES_ECB_NOPAD",
    apis.kSE05x_CryptoObject_AES_CBC_NOPAD: "AES_CBC_NOPAD",
    apis.kSE05x_CryptoObject_AES_CBC_ISO9797_M1: "AES_CBC_ISO9797_M1",
    apis.kSE05x_CryptoObject_AES_CBC_ISO9797_M2: "AES_CBC_ISO9797_M2",
    apis.kSE05x_CryptoObject_AES_CBC_PKCS5: "AES_CBC_PKCS5",
    apis.kSE05x_CryptoObject_AES_CTR: "AES_CTR",
    apis.kSE05x_CryptoObject_HMAC_SHA1: "HMAC_SHA1",
    apis.kSE05x_CryptoObject_HMAC_SHA256: "HMAC_SHA256",
    apis.kSE05x_CryptoObject_HMAC_SHA384: "HMAC_SHA384",
    apis.kSE05x_CryptoObject_HMAC_SHA512: "HMAC_SHA512",
    apis.kSE05x_CryptoObject_CMAC_128: "CMAC_128",
}


class ReadIDList:  # pylint: disable=too-few-public-methods
    """
    Retrieve index list
    """

    def __init__(self, session_obj):
        """
        Constructor
        :param session_obj: Instance of session
        """
        self._session = session_obj
        self._ctx_ks = KeyStore(self._session)
        self._ctx_key = KeyObject(self._ctx_ks)

    def do_read_id_list(self):  # pylint: disable=too-many-locals, too-few-public-methods
        """
        Retrieve index list from secure element and print on console
        :return: Status
        """
        output_offset = 0
        filter_data = 0xFF
        p_more = apis.kSE05x_MoreIndicator_NA
        p_more = (ctypes.c_uint8 * 1)(p_more)
        data_list_len = 1024
        data_raw = (ctypes.c_uint8 * data_list_len)(0)
        data_list_len = ctypes.c_size_t(data_list_len)
        status = apis.Se05x_API_ReadIDList(ctypes.byref(self._session.session_ctx.s_ctx),
                                           output_offset, filter_data,
                                           ctypes.byref(p_more),
                                           data_raw, ctypes.pointer(data_list_len))
        if status != apis.kSE05x_SW12_NO_ERROR:
            log.error("Se05x_API_ReadIDList failed")
            return status
        data_full_list = list(data_raw)
        data_list = data_full_list[:int(data_list_len.value)]

        key_object = apis.sss_object_t()

        status = apis.sss_key_object_init(ctypes.byref(
            key_object), ctypes.byref(self._ctx_ks.keystore))
        if status != apis.kStatus_SSS_Success:
            log.error("sss_key_object_init failed")
            return status

        j = 0
        id_dict = {}
        for i in range(int(len(data_list) / 4)):  # pylint: disable=unused-variable
            obj_id = data_list[j] << (3 * 8) | data_list[j + 1] << (2 * 8) | \
                     data_list[j + 2] << (1 * 8) | data_list[j + 3]
            status = apis.sss_key_object_get_handle(ctypes.byref(key_object), obj_id)
            if status != apis.kStatus_SSS_Success:
                log.error("sss_key_object_get_handle failed")
                return status

            key_size = 0
            key_size = ctypes.c_size_t(key_size)
            str_id_list = "Key-Id: 0X%-10x %-15s  %-15s" \
                          % (obj_id,
                             CIPHER_TYPE_DICTIONARY[key_object.cipherType],
                             KEY_PART_DICTIONARY[key_object.objectType])
            if key_object.cipherType != 70:
                if key_object.cipherType in [apis.kSSS_CipherType_EC_MONTGOMERY,
                                             apis.kSSS_CipherType_EC_TWISTED_ED]:
                    key_size.value = 32
                else:
                    status = apis.Se05x_API_ReadSize(ctypes.byref(self._session.session_ctx.s_ctx),
                                                     obj_id,
                                                     ctypes.pointer(key_size))
                    if status != apis.kSE05x_SW12_NO_ERROR:
                        log.error("Se05x_API_ReadSize failed")
                        return status
                str_id_list += "Size(Bits): %d" % (int(key_size.value) * 8)
            id_dict[obj_id] = str_id_list
            j += 4

        for i in sorted (id_dict.keys()):
            print(id_dict[i])
        print("")
        crypto_obj_dict = {}
        obj_list_len = 1024
        obj_list_ctype = (ctypes.c_uint8 * obj_list_len)(0)
        obj_list_len = ctypes.c_size_t(obj_list_len)
        status = apis.Se05x_API_ReadCryptoObjectList(ctypes.byref(self._session.session_ctx.s_ctx),
                                                     obj_list_ctype, ctypes.pointer(obj_list_len))
        if status != apis.kSE05x_SW12_NO_ERROR:
            log.error("Se05x_API_ReadCryptoObjectList failed")
            return status
        obj_full_list = list(obj_list_ctype)
        obj_list = obj_full_list[:int(obj_list_len.value)]

        j = 0
        for i in range(int(len(obj_list) / 4)):
            obj_id = obj_list[j + 1] | obj_list[j + 0] << 8
            crypto_obj_dict[obj_id] = "CryptoObject-Id: 0X%-10x    Type: %-15s"% (obj_id, CRYPTO_OBJID_DICTIONARY[obj_id])


        for i in sorted (crypto_obj_dict.keys()):
            print(crypto_obj_dict[i])
        return status