/*
    * GordianKnot: Security Suite
    * Copyright 2012-2026. Tony Washer
    *
    * Licensed under the Apache License, Version 2.0 (the "License"); you may not
    * use this file except in compliance with the License.  You may obtain a copy
    * of the License at
    *
    *   http://www.apache.org/licenses/LICENSE-2.0
   *
   * Unless required by applicable law or agreed to in writing, software
   * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
   * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.  See the
   * License for the specific language governing permissions and limitations under
   * the License.
   */
  package io.github.tonywasher.joceanus.gordianknot.impl.bc;
  
  import io.github.tonywasher.joceanus.gordianknot.api.base.GordianException;
  import io.github.tonywasher.joceanus.gordianknot.api.keypair.GordianKeyPair;
  import io.github.tonywasher.joceanus.gordianknot.api.keypair.spec.GordianKeyPairSpec;
  import io.github.tonywasher.joceanus.gordianknot.api.sign.GordianNewSignParams;
  import io.github.tonywasher.joceanus.gordianknot.api.sign.spec.GordianSignatureSpec;
  import io.github.tonywasher.joceanus.gordianknot.impl.bc.BouncyEllipticKeyPair.BouncyECPrivateKey;
  import io.github.tonywasher.joceanus.gordianknot.impl.bc.BouncyEllipticKeyPair.BouncyECPublicKey;
  import io.github.tonywasher.joceanus.gordianknot.impl.bc.BouncySignature.BouncyDSACoder;
  import io.github.tonywasher.joceanus.gordianknot.impl.bc.BouncySignature.BouncyDigestSignature;
  import io.github.tonywasher.joceanus.gordianknot.impl.core.base.GordianBaseFactory;
  import io.github.tonywasher.joceanus.gordianknot.impl.core.exc.GordianCryptoException;
  import io.github.tonywasher.joceanus.gordianknot.impl.core.exc.GordianIOException;
  import io.github.tonywasher.joceanus.gordianknot.impl.core.keypair.GordianKeyPairValidity;
  import io.github.tonywasher.joceanus.gordianknot.impl.core.spec.keypair.GordianCoreKeyPairSpec;
  import io.github.tonywasher.joceanus.gordianknot.impl.core.spec.sign.GordianCoreSignatureSpec;
  import org.bouncycastle.asn1.ASN1BitString;
  import org.bouncycastle.asn1.ASN1Encodable;
  import org.bouncycastle.asn1.ASN1Integer;
  import org.bouncycastle.asn1.ASN1ObjectIdentifier;
  import org.bouncycastle.asn1.ASN1OctetString;
  import org.bouncycastle.asn1.ASN1Primitive;
  import org.bouncycastle.asn1.cryptopro.ECGOST3410NamedCurves;
  import org.bouncycastle.asn1.pkcs.PrivateKeyInfo;
  import org.bouncycastle.asn1.rosstandart.RosstandartObjectIdentifiers;
  import org.bouncycastle.asn1.x509.SubjectPublicKeyInfo;
  import org.bouncycastle.asn1.x9.X9ECParameters;
  import org.bouncycastle.crypto.AsymmetricCipherKeyPair;
  import org.bouncycastle.crypto.generators.ECKeyPairGenerator;
  import org.bouncycastle.crypto.params.ECDomainParameters;
  import org.bouncycastle.crypto.params.ECGOST3410Parameters;
  import org.bouncycastle.crypto.params.ECKeyGenerationParameters;
  import org.bouncycastle.crypto.params.ECNamedDomainParameters;
  import org.bouncycastle.crypto.params.ECPrivateKeyParameters;
  import org.bouncycastle.crypto.params.ECPublicKeyParameters;
  import org.bouncycastle.crypto.params.ParametersWithRandom;
  import org.bouncycastle.crypto.signers.ECGOST3410Signer;
  import org.bouncycastle.jcajce.provider.asymmetric.ecgost12.BCECGOST3410_2012PrivateKey;
  import org.bouncycastle.jcajce.provider.asymmetric.ecgost12.BCECGOST3410_2012PublicKey;
  import org.bouncycastle.jcajce.spec.GOST3410ParameterSpec;
  import org.bouncycastle.jce.spec.ECNamedCurveSpec;
  import org.bouncycastle.math.ec.ECCurve;
  
  import java.io.IOException;
  import java.math.BigInteger;
  import java.security.spec.PKCS8EncodedKeySpec;
  import java.security.spec.X509EncodedKeySpec;
  
  /**
   * GOST KeyPair classes.
   */
  public final class BouncyGOSTKeyPair {
      /**
       * GOST algorithm.
       */
      private static final String ALGO = "ECGOST3410-2012";
  
      /**
       * Length 32.
       */
      private static final int LEN32 = 32;
  
      /**
       * Length 32.
       */
      private static final int LEN64 = 64;
  
      /**
       * Encoding id.
       */
      private static final byte ENCODING_ID = 0x04;
  
      /**
       * Private constructor.
       */
      private BouncyGOSTKeyPair() {
      }
  
      /**
       * BouncyCastle GOST KeyPair generator.
       */
      public static class BouncyGOSTKeyPairGenerator
             extends BouncyKeyPairGenerator {
         /**
          * Generator.
          */
         private final ECKeyPairGenerator theGenerator;
 
         /**
          * Domain.
          */
         private final ECDomainParameters theDomain;
 
         /**
          * Spec.
          */
         private final ECNamedCurveSpec theSpec;
 
         /**
          * Constructor.
          *
          * @param pFactory the Security Factory
          * @param pKeySpec the keySpec
          */
         BouncyGOSTKeyPairGenerator(final GordianBaseFactory pFactory,
                                    final GordianKeyPairSpec pKeySpec) {
             /* Initialise underlying class */
             super(pFactory, pKeySpec);
 
             /* Create the generator */
             theGenerator = new ECKeyPairGenerator();
 
             /* Determine domain */
             final GordianCoreKeyPairSpec myKeySpec = (GordianCoreKeyPairSpec) pKeySpec;
             final String myCurve = myKeySpec.getElliptic().getCurveName();
             final GOST3410ParameterSpec mySpec = new GOST3410ParameterSpec(myCurve);
             final X9ECParameters x9 = ECGOST3410NamedCurves.getByNameX9(myCurve);
             theSpec = new ECNamedCurveSpec(
                     myCurve,
                     x9.getCurve(),
                     x9.getG(),
                     x9.getN(),
                     x9.getH(),
                     x9.getSeed());
             theDomain = new ECNamedDomainParameters(mySpec.getPublicKeyParamSet(), x9);
 
             /* initialise */
             final ECKeyGenerationParameters myParams = new ECKeyGenerationParameters(
                     new ECGOST3410Parameters(theDomain, mySpec.getPublicKeyParamSet(), mySpec.getDigestParamSet(),
                             mySpec.getEncryptionParamSet()), getRandom());
             theGenerator.init(myParams);
         }
 
         @Override
         public BouncyKeyPair generateKeyPair() {
             /* Generate and return the keyPair */
             final AsymmetricCipherKeyPair myPair = theGenerator.generateKeyPair();
             final BouncyECPublicKey myPublic = new BouncyECPublicKey(getKeySpec(), (ECPublicKeyParameters) myPair.getPublic());
             final BouncyECPrivateKey myPrivate = new BouncyECPrivateKey(getKeySpec(), (ECPrivateKeyParameters) myPair.getPrivate());
             return new BouncyKeyPair(myPublic, myPrivate);
         }
 
         @Override
         public PKCS8EncodedKeySpec getPKCS8Encoding(final GordianKeyPair pKeyPair) throws GordianException {
             /* Check the keyPair type and keySpecs */
             BouncyKeyPair.checkKeyPair(pKeyPair, getKeySpec());
 
             /* build and return the encoding */
             final BouncyECPrivateKey myPrivateKey = (BouncyECPrivateKey) getPrivateKey(pKeyPair);
             final ECPrivateKeyParameters myParms = myPrivateKey.getPrivateKey();
             final BouncyECPublicKey myPublicKey = (BouncyECPublicKey) getPublicKey(pKeyPair);
             final ECPublicKeyParameters myPubParms = myPublicKey.getPublicKey();
             final BCECGOST3410_2012PublicKey pubKey = new BCECGOST3410_2012PublicKey(ALGO, myPubParms, theSpec);
             final BCECGOST3410_2012PrivateKey privKey = new BCECGOST3410_2012PrivateKey(ALGO, myParms, pubKey, theSpec);
             return new PKCS8EncodedKeySpec(privKey.getEncoded());
         }
 
         @Override
         public BouncyKeyPair deriveKeyPair(final X509EncodedKeySpec pPublicKey,
                                            final PKCS8EncodedKeySpec pPrivateKey) throws GordianException {
             /* Check the keySpecs */
             checkKeySpec(pPrivateKey);
 
             /* derive keyPair */
             final BouncyECPublicKey myPublic = derivePublicKey(pPublicKey);
             final PrivateKeyInfo myInfo = PrivateKeyInfo.getInstance(pPrivateKey.getEncoded());
             final ECPrivateKeyParameters myParms = deriveFromPrivKeyInfo(myInfo);
             final BouncyECPrivateKey myPrivate = new BouncyECPrivateKey(getKeySpec(), myParms);
             final BouncyKeyPair myPair = new BouncyKeyPair(myPublic, myPrivate);
 
             /* Check that we have a matching pair */
             GordianKeyPairValidity.checkValidity(getFactory(), myPair);
 
             /* Return the keyPair */
             return myPair;
         }
 
         @Override
         public X509EncodedKeySpec getX509Encoding(final GordianKeyPair pKeyPair) throws GordianException {
             /* Check the keyPair type and keySpecs */
             BouncyKeyPair.checkKeyPair(pKeyPair, getKeySpec());
 
             /* build and return the encoding */
             final BouncyECPublicKey myPublicKey = (BouncyECPublicKey) getPublicKey(pKeyPair);
             final ECPublicKeyParameters myParms = myPublicKey.getPublicKey();
             final BCECGOST3410_2012PublicKey pubKey = new BCECGOST3410_2012PublicKey(ALGO, myParms, theSpec);
             return new X509EncodedKeySpec(pubKey.getEncoded());
         }
 
         @Override
         public BouncyKeyPair derivePublicOnlyKeyPair(final X509EncodedKeySpec pEncodedKey) throws GordianException {
             final BouncyECPublicKey myPublic = derivePublicKey(pEncodedKey);
             return new BouncyKeyPair(myPublic);
         }
 
         /**
          * Derive public key from encoded.
          *
          * @param pEncodedKey the encoded key
          * @return the public key
          * @throws GordianException on error
          */
         private BouncyECPublicKey derivePublicKey(final X509EncodedKeySpec pEncodedKey) throws GordianException {
             /* Check the keySpecs */
             checkKeySpec(pEncodedKey);
 
             /* derive publicKey */
             final SubjectPublicKeyInfo myInfo = SubjectPublicKeyInfo.getInstance(pEncodedKey.getEncoded());
             final ECPublicKeyParameters myParms = deriveFromPubKeyInfo(myInfo);
             return new BouncyECPublicKey(getKeySpec(), myParms);
         }
 
         /**
          * Derive Public Key parameters from SubjectPublicKeyInfo. (extracted from BouncyCastle initialiser)
          *
          * @param pKeyInfo the keyInfo
          * @return the PrivateKeyParameters
          * @throws GordianException on error
          */
         private ECPublicKeyParameters deriveFromPubKeyInfo(final SubjectPublicKeyInfo pKeyInfo) throws GordianException {
             final ASN1ObjectIdentifier algOid = pKeyInfo.getAlgorithm().getAlgorithm();
             final ASN1BitString bits = pKeyInfo.getPublicKeyData();
             final ASN1OctetString key;
 
             try {
                 key = (ASN1OctetString) ASN1Primitive.fromByteArray(bits.getBytes());
             } catch (IOException ex) {
                 throw new GordianIOException("error recovering public key", ex);
             }
 
             final byte[] keyEnc = key.getOctets();
             int fieldSize = LEN32;
             if (algOid.equals(RosstandartObjectIdentifiers.id_tc26_gost_3410_12_512)) {
                 fieldSize = LEN64;
             }
 
             final int keySize = 2 * fieldSize;
             final byte[] x9Encoding = new byte[1 + keySize];
             x9Encoding[0] = ENCODING_ID;
             for (int i = 1; i <= fieldSize; ++i) {
                 x9Encoding[i] = keyEnc[fieldSize - i];
                 x9Encoding[i + fieldSize] = keyEnc[keySize - i];
             }
 
             final ECCurve curve = theDomain.getCurve();
             return new ECPublicKeyParameters(curve.decodePoint(x9Encoding), theDomain);
         }
 
         /**
          * Derive Private Key parameters from PrivateKeyInfo. (extracted from BouncyCastle initialiser)
          *
          * @param pKeyInfo the keyInfo
          * @return the PrivateKeyParameters
          * @throws GordianException on error
          */
         private ECPrivateKeyParameters deriveFromPrivKeyInfo(final PrivateKeyInfo pKeyInfo) throws GordianException {
             try {
                 final ASN1Encodable privKey = pKeyInfo.parsePrivateKey();
                 final BigInteger myD;
                 if (privKey instanceof ASN1Integer) {
                     myD = ASN1Integer.getInstance(privKey).getPositiveValue();
                 } else {
                     final byte[] encVal = ASN1OctetString.getInstance(privKey).getOctets();
                     final byte[] dVal = new byte[encVal.length];
 
                     for (int i = 0; i != encVal.length; i++) {
                         dVal[i] = encVal[encVal.length - 1 - i];
                     }
 
                     myD = new BigInteger(1, dVal);
                 }
                 return new ECPrivateKeyParameters(myD, theDomain);
 
             } catch (IOException e) {
                 throw new GordianCryptoException(ERROR_PARSE, e);
             }
         }
     }
 
     /**
      * GOST encoder.
      */
     static final class BouncyGOSTCoder
             implements BouncyDSACoder {
         /**
          * The fixed length (if any).
          */
         private final Integer theLen;
 
         /**
          * Constructor.
          *
          * @param pLen the fixed length (or null)
          */
         BouncyGOSTCoder(final Integer pLen) {
             theLen = pLen;
         }
 
         @Override
         public byte[] dsaEncode(final BigInteger r,
                                 final BigInteger s) {
             /* Access byteArrays */
             final byte[] myFirst = makeUnsigned(s);
             final byte[] mySecond = makeUnsigned(r);
             final byte[] myResult = new byte[theLen];
 
             /* Build array and return */
             System.arraycopy(myFirst, 0, myResult, theLen / 2 - myFirst.length, myFirst.length);
             System.arraycopy(mySecond, 0, myResult, theLen - mySecond.length, mySecond.length);
             return myResult;
         }
 
         /**
          * Make the value unsigned.
          *
          * @param pValue the value
          * @return the unsigned value
          */
         private static byte[] makeUnsigned(final BigInteger pValue) {
             /* Convert to byteArray and return if OK */
             final byte[] myResult = pValue.toByteArray();
             if (myResult[0] != 0) {
                 return myResult;
             }
 
             /* Shorten the array */
             final byte[] myTmp = new byte[myResult.length - 1];
             System.arraycopy(myResult, 1, myTmp, 0, myTmp.length);
             return myTmp;
         }
 
         @Override
         public BigInteger[] dsaDecode(final byte[] pEncoded) {
             /* Build the value arrays */
             final byte[] myFirst = new byte[pEncoded.length / 2];
             final byte[] mySecond = new byte[pEncoded.length / 2];
             System.arraycopy(pEncoded, 0, myFirst, 0, myFirst.length);
             System.arraycopy(pEncoded, myFirst.length, mySecond, 0, mySecond.length);
 
             /* Create the signature values and return */
             final BigInteger[] sig = new BigInteger[2];
             sig[1] = new BigInteger(1, myFirst);
             sig[0] = new BigInteger(1, mySecond);
             return sig;
         }
     }
 
     /**
      * GOST signer.
      */
     public static class BouncyGOSTSignature
             extends BouncyDigestSignature {
         /**
          * The Signer.
          */
         private final ECGOST3410Signer theSigner;
 
         /**
          * The Coder.
          */
         private final BouncyGOSTCoder theCoder;
 
         /**
          * Constructor.
          *
          * @param pFactory the factory
          * @param pSpec    the signatureSpec.
          * @throws GordianException on error
          */
         BouncyGOSTSignature(final GordianBaseFactory pFactory,
                             final GordianSignatureSpec pSpec) throws GordianException {
             /* Initialise underlying class */
             super(pFactory, pSpec);
 
             /* Create the signer and Coder */
             theSigner = new ECGOST3410Signer();
             theCoder = new BouncyGOSTCoder(((GordianCoreSignatureSpec) pSpec).getDigestSpec().getDigestLength().getByteLength() << 1);
         }
 
         @Override
         public void initForSigning(final GordianNewSignParams pParams) throws GordianException {
             /* Initialise detail */
             super.initForSigning(pParams);
             final BouncyKeyPair myPair = getKeyPair();
             BouncyKeyPair.checkKeyPair(myPair);
 
             /* Initialise and set the signer */
             final BouncyECPrivateKey myPrivate = (BouncyECPrivateKey) myPair.getPrivateKey();
             final ParametersWithRandom myParms = new ParametersWithRandom(myPrivate.getPrivateKey(), getRandom());
             theSigner.init(true, myParms);
         }
 
         @Override
         public void initForVerify(final GordianNewSignParams pParams) throws GordianException {
             /* Initialise detail */
             super.initForVerify(pParams);
             final BouncyKeyPair myPair = getKeyPair();
             BouncyKeyPair.checkKeyPair(myPair);
 
             /* Initialise and set the signer */
             final BouncyECPublicKey myPublic = (BouncyECPublicKey) myPair.getPublicKey();
             theSigner.init(false, myPublic.getPublicKey());
         }
 
         @Override
         public byte[] sign() throws GordianException {
             /* Check that we are in signing mode */
             checkMode(GordianSignatureMode.SIGN);
 
             /* Sign the message */
             final BigInteger[] myValues = theSigner.generateSignature(getDigest());
             return theCoder.dsaEncode(myValues[0], myValues[1]);
         }
 
         @Override
         public boolean verify(final byte[] pSignature) throws GordianException {
             /* Check that we are in verify mode */
             checkMode(GordianSignatureMode.VERIFY);
 
             /* Verify the message */
             final BigInteger[] myValues = theCoder.dsaDecode(pSignature);
             return theSigner.verifySignature(getDigest(), myValues[0], myValues[1]);
         }
     }
 }