// SPDX-License-Identifier: BSD-2-Clause
/*
 * Copyright (C) 2019, Linaro Limited
 */

#include <assert.h>
#include <compiler.h>
#include <crypto/crypto.h>
#include <crypto/crypto_impl.h>
#include <mbedtls/des.h>
#include <stdlib.h>
#include <string.h>
#include <tee_api_types.h>
#include <utee_defines.h>
#include <util.h>

struct mbed_des3_ecb_ctx {
	struct crypto_cipher_ctx ctx;
	mbedtls_des3_context des3_ctx;
};

static const struct crypto_cipher_ops mbed_des3_ecb_ops;

static struct mbed_des3_ecb_ctx *to_des3_ecb_ctx(struct crypto_cipher_ctx *ctx)
{
	assert(ctx && ctx->ops == &mbed_des3_ecb_ops);

	return container_of(ctx, struct mbed_des3_ecb_ctx, ctx);
}

static TEE_Result mbed_des3_ecb_init(struct crypto_cipher_ctx *ctx,
				     TEE_OperationMode mode,
				     const uint8_t *key1, size_t key1_len,
				     const uint8_t *key2 __unused,
				     size_t key2_len __unused,
				     const uint8_t *iv __unused,
				     size_t iv_len  __unused)
{
	struct mbed_des3_ecb_ctx *c = to_des3_ecb_ctx(ctx);
	int mbed_res = 0;

	if (key1_len != MBEDTLS_DES_KEY_SIZE * 2 &&
	    key1_len != MBEDTLS_DES_KEY_SIZE * 3)
		return TEE_ERROR_BAD_PARAMETERS;

	mbedtls_des3_init(&c->des3_ctx);

	if (key1_len == MBEDTLS_DES_KEY_SIZE * 3) {
		if (mode == TEE_MODE_ENCRYPT)
			mbed_res = mbedtls_des3_set3key_enc(&c->des3_ctx, key1);
		else
			mbed_res = mbedtls_des3_set3key_dec(&c->des3_ctx, key1);
	} else {
		if (mode == TEE_MODE_ENCRYPT)
			mbed_res = mbedtls_des3_set2key_enc(&c->des3_ctx, key1);
		else
			mbed_res = mbedtls_des3_set2key_dec(&c->des3_ctx, key1);
	}

	if (mbed_res)
		return TEE_ERROR_BAD_STATE;

	return TEE_SUCCESS;
}

static TEE_Result mbed_des3_ecb_update(struct crypto_cipher_ctx *ctx,
				       bool last_block __unused,
				       const uint8_t *data, size_t len,
				       uint8_t *dst)
{
	struct mbed_des3_ecb_ctx *c = to_des3_ecb_ctx(ctx);
	size_t block_size = TEE_DES_BLOCK_SIZE;
	size_t offs = 0;

	if (len % block_size)
		return TEE_ERROR_BAD_PARAMETERS;

	for (offs = 0; offs < len; offs += block_size) {
		if (mbedtls_des3_crypt_ecb(&c->des3_ctx, data + offs,
					   dst + offs))
			return TEE_ERROR_BAD_STATE;
	}

	return TEE_SUCCESS;
}

static void mbed_des3_ecb_final(struct crypto_cipher_ctx *ctx)
{
	mbedtls_des3_free(&to_des3_ecb_ctx(ctx)->des3_ctx);
}

static void mbed_des3_ecb_free_ctx(struct crypto_cipher_ctx *ctx)
{
	free(to_des3_ecb_ctx(ctx));
}

static void mbed_des3_ecb_copy_state(struct crypto_cipher_ctx *dst_ctx,
				     struct crypto_cipher_ctx *src_ctx)
{
	struct mbed_des3_ecb_ctx *src = to_des3_ecb_ctx(src_ctx);
	struct mbed_des3_ecb_ctx *dst = to_des3_ecb_ctx(dst_ctx);

	dst->des3_ctx = src->des3_ctx;
}

static const struct crypto_cipher_ops mbed_des3_ecb_ops = {
	.init = mbed_des3_ecb_init,
	.update = mbed_des3_ecb_update,
	.final = mbed_des3_ecb_final,
	.free_ctx = mbed_des3_ecb_free_ctx,
	.copy_state = mbed_des3_ecb_copy_state,
};

TEE_Result crypto_des3_ecb_alloc_ctx(struct crypto_cipher_ctx **ctx_ret)
{
	struct mbed_des3_ecb_ctx *c = NULL;

	c = calloc(1, sizeof(*c));
	if (!c)
		return TEE_ERROR_OUT_OF_MEMORY;

	c->ctx.ops = &mbed_des3_ecb_ops;
	*ctx_ret = &c->ctx;

	return TEE_SUCCESS;
}