/*
 * %CopyrightBegin%
 *
 * Copyright Ericsson AB 2010-2022. All Rights Reserved.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 *
 * %CopyrightEnd%
 */

#include "dss.h"
#include "bn.h"

#ifdef HAVE_DSA

# ifdef HAS_3_0_API

int get_dss_private_key(ErlNifEnv* env, ERL_NIF_TERM key, EVP_PKEY **pkey)
// HAS_3_0_API
{
    /* key=[P,Q,G,PRIV_KEY] */
    ERL_NIF_TERM head, tail;
    OSSL_PARAM params[5];
    EVP_PKEY_CTX *ctx = NULL;
    int i = 0;
    
    head = key;

    // https://www.openssl.org/docs/man3.0/man7/EVP_PKEY-FFC.html
    if (!get_ossl_param_from_bin_in_list(env, "p",    &head, &params[i++]) ||
        !get_ossl_param_from_bin_in_list(env, "q",    &head, &params[i++]) ||
        !get_ossl_param_from_bin_in_list(env, "g",    &head, &params[i++]) ||
        !get_ossl_param_from_bin_in_list(env, "priv", &head, &params[i++]))
        goto bad_arg;

    params[i++] = OSSL_PARAM_construct_end();

    tail = head;
    if (!enif_is_empty_list(env,tail))
        goto err;

    if ((ctx = EVP_PKEY_CTX_new_from_name(NULL, "DSA", NULL)) == NULL)
        goto err;
    if (EVP_PKEY_fromdata_init(ctx) <= 0)
        goto err;
    if (EVP_PKEY_fromdata(ctx, pkey, EVP_PKEY_KEYPAIR, params) <= 0)
        goto bad_arg;

    if (ctx) EVP_PKEY_CTX_free(ctx);
    return 1;

bad_arg:
err:
    if (ctx) EVP_PKEY_CTX_free(ctx);
    return 0;
}

int get_dss_public_key(ErlNifEnv* env, ERL_NIF_TERM key, EVP_PKEY **pkey)
// HAS_3_0_API
{
    /* key=[P, Q, G, PUB_KEY (=Y)] */
    ERL_NIF_TERM head, tail;
    OSSL_PARAM params[5];
    EVP_PKEY_CTX *ctx = NULL;
    int i = 0;
    
    head = key;

    // https://www.openssl.org/docs/man3.0/man7/EVP_PKEY-FFC.html
    if (!get_ossl_param_from_bin_in_list(env, "p",   &head, &params[i++]) ||
        !get_ossl_param_from_bin_in_list(env, "q",   &head, &params[i++]) ||
        !get_ossl_param_from_bin_in_list(env, "g",   &head, &params[i++]) ||
        !get_ossl_param_from_bin_in_list(env, "pub", &head, &params[i++]))
        goto bad_arg;

    params[i++] = OSSL_PARAM_construct_end();

    tail = head;
    if (!enif_is_empty_list(env,tail))
        goto err;

    if ((ctx = EVP_PKEY_CTX_new_from_name(NULL, "DSA", NULL)) == NULL)
        goto err;
    if (EVP_PKEY_fromdata_init(ctx) <= 0)
        goto err;
    if (EVP_PKEY_fromdata(ctx, pkey, EVP_PKEY_PUBLIC_KEY, params) <= 0)
        goto bad_arg;

    if (ctx) EVP_PKEY_CTX_free(ctx);
    return 1;

bad_arg:
err:
    if (ctx) EVP_PKEY_CTX_free(ctx);
    return 0;
}


int dss_privkey_to_pubkey(ErlNifEnv* env, EVP_PKEY *pkey, ERL_NIF_TERM *ret)
// HAS_3_0_API
{
    ERL_NIF_TERM result[5];
    BIGNUM *p = NULL, *q = NULL, *g = NULL, *pub = NULL;

    if (
        !EVP_PKEY_get_bn_param(pkey, "p", &p)
        || !EVP_PKEY_get_bn_param(pkey, "q", &q)
        || !EVP_PKEY_get_bn_param(pkey, "g", &g)
        || !EVP_PKEY_get_bn_param(pkey, "pub", &pub)
        || ((result[0] = bin_from_bn(env, p)) == atom_error)
        || ((result[1] = bin_from_bn(env, q)) == atom_error)
        || ((result[1] = bin_from_bn(env, g)) == atom_error)
        || ((result[1] = bin_from_bn(env, pub)) == atom_error)
        )
        goto err;

    *ret =  enif_make_list_from_array(env, result, 4);
    return 1;

 err:
    return 0;
}

# else
/* Has NOT 3.0 API */

int get_dss_private_key(ErlNifEnv* env, ERL_NIF_TERM key, EVP_PKEY **pkey)
{
    /* key=[P,Q,G,KEY] */
    ERL_NIF_TERM head, tail;
    BIGNUM *dsa_p = NULL, *dsa_q = NULL, *dsa_g = NULL;
    BIGNUM *dummy_pub_key = NULL, *priv_key = NULL;
    DSA *dsa = NULL;

    if (!enif_get_list_cell(env, key, &head, &tail))
        goto err;
    if (!get_bn_from_bin(env, head, &dsa_p))
        goto err;

    if (!enif_get_list_cell(env, tail, &head, &tail))
        goto err;
    if (!get_bn_from_bin(env, head, &dsa_q))
        goto err;

    if (!enif_get_list_cell(env, tail, &head, &tail))
        goto err;
    if (!get_bn_from_bin(env, head, &dsa_g))
        goto err;

    if (!enif_get_list_cell(env, tail, &head, &tail))
        goto err;
    if (!get_bn_from_bin(env, head, &priv_key))
        goto err;

    if (!enif_is_empty_list(env, tail))
        goto err;

    /* Note: DSA_set0_key() does not allow setting only the
     * private key, although DSA_sign() does not use the
     * public key. Work around this limitation by setting
     * the public key to a copy of the private key.
     */
    if ((dummy_pub_key = BN_dup(priv_key)) == NULL)
        goto err;

    if ((dsa = DSA_new()) == NULL)
        goto err;

    if (!DSA_set0_pqg(dsa, dsa_p, dsa_q, dsa_g))
        goto err;
    /* dsa takes ownership on success */
    dsa_p = NULL;
    dsa_q = NULL;
    dsa_g = NULL;

    if (!DSA_set0_key(dsa, dummy_pub_key, priv_key))
        goto err;
    /* dsa takes ownership on success */
    dummy_pub_key = NULL;
    priv_key = NULL;

    *pkey = EVP_PKEY_new();
    if (EVP_PKEY_assign_DSA(*pkey, dsa) != 1)
        goto err;
    /* On success, result owns dsa */
    return 1;

 err:
    if (dsa)
        DSA_free(dsa);
    if (dsa_p)
        BN_free(dsa_p);
    if (dsa_q)
        BN_free(dsa_q);
    if (dsa_g)
        BN_free(dsa_g);
    if (priv_key)
        BN_free(priv_key);
    if (dummy_pub_key)
        BN_free(dummy_pub_key);
    return 0;
}

int get_dss_public_key(ErlNifEnv* env, ERL_NIF_TERM key, EVP_PKEY **pkey)
{
    /* key=[P, Q, G, Y] */
    ERL_NIF_TERM head, tail;
    BIGNUM *dsa_p = NULL, *dsa_q = NULL, *dsa_g = NULL, *dsa_y = NULL;
    DSA *dsa = NULL;

    if (!enif_get_list_cell(env, key, &head, &tail))
        goto err;
    if (!get_bn_from_bin(env, head, &dsa_p))
        goto err;

    if (!enif_get_list_cell(env, tail, &head, &tail))
        goto err;
    if (!get_bn_from_bin(env, head, &dsa_q))
        goto err;

    if (!enif_get_list_cell(env, tail, &head, &tail))
        goto err;
    if (!get_bn_from_bin(env, head, &dsa_g))
        goto err;

    if (!enif_get_list_cell(env, tail, &head, &tail))
        goto err;
    if (!get_bn_from_bin(env, head, &dsa_y))
        goto err;

    if (!enif_is_empty_list(env,tail))
        goto err;

    if ((dsa = DSA_new()) == NULL)
        goto err;

    if (!DSA_set0_pqg(dsa, dsa_p, dsa_q, dsa_g))
        goto err;
    /* dsa takes ownership on success */
    dsa_p = NULL;
    dsa_q = NULL;
    dsa_g = NULL;

    if (!DSA_set0_key(dsa, dsa_y, NULL))
        goto err;
    /* dsa takes ownership on success */
    dsa_y = NULL;

    *pkey = EVP_PKEY_new();
    if (EVP_PKEY_assign_DSA(*pkey, dsa) != 1)
        goto err;
    /* On success, result owns dsa */
    return 1;

 err:
    if (dsa)
        DSA_free(dsa);
    if (dsa_p)
        BN_free(dsa_p);
    if (dsa_q)
        BN_free(dsa_q);
    if (dsa_g)
        BN_free(dsa_g);
    if (dsa_y)
        BN_free(dsa_y);
    return 0;
}


int dss_privkey_to_pubkey(ErlNifEnv* env, EVP_PKEY *pkey, ERL_NIF_TERM *ret)
{
    ERL_NIF_TERM result[4];
    DSA *dsa = NULL;
    const BIGNUM *p = NULL, *q = NULL, *g = NULL, *pub_key = NULL;

    if ((dsa = EVP_PKEY_get1_DSA(pkey)) == NULL)
        goto err;

    DSA_get0_pqg(dsa, &p, &q, &g);
    DSA_get0_key(dsa, &pub_key, NULL);

    if ((result[0] = bin_from_bn(env, p)) == atom_error)
        goto err;
    if ((result[1] = bin_from_bn(env, q)) == atom_error)
        goto err;
    if ((result[2] = bin_from_bn(env, g)) == atom_error)
        goto err;
    if ((result[3] = bin_from_bn(env, pub_key)) == atom_error)
        goto err;

    *ret = enif_make_list_from_array(env, result, 4);
    DSA_free(dsa);
    return 1;
    
 err:
    if (dsa)
        DSA_free(dsa);
    return 0;
}

# endif /* HAS_3_0_API */

#endif /* HAVE_DSA */