/**
 *  Copyright Notice:
 *  Copyright 2021-2022 DMTF. All rights reserved.
 *  License: BSD 3-Clause License. For full text see link: https://github.com/DMTF/libspdm/blob/main/LICENSE.md
 **/

#include "test_crypt.h"

#if (LIBSPDM_SM2_DSA_SUPPORT) || (LIBSPDM_SM2_KEY_EXCHANGE_SUPPORT)

#define DEFAULT_SM2_ID "1234567812345678"

/**
 * Validate Crypto sm2 Interfaces.
 *
 * @retval  true  Validation succeeded.
 * @retval  false  Validation failed.
 *
 **/
bool libspdm_validate_crypt_sm2(void)
{
    void *Sm2_1;
    void *Sm2_2;
    uint8_t public1[66 * 2];
    size_t public1_length;
    uint8_t public2[66 * 2];
    size_t public2_length;
    #if LIBSPDM_SM2_KEY_EXCHANGE_SUPPORT
    uint8_t key1[66];
    size_t key1_length;
    uint8_t key2[66];
    size_t key2_length;
    #endif /* LIBSPDM_SM2_KEY_EXCHANGE_SUPPORT */
    #if LIBSPDM_SM2_DSA_SUPPORT
    uint8_t message[] = "Sm2Test";
    uint8_t signature[66 * 2];
    size_t sig_size;
    #endif /* LIBSPDM_SM2_DSA_SUPPORT */
    bool status;

    #if LIBSPDM_SM2_KEY_EXCHANGE_SUPPORT
    libspdm_my_print("\nCrypto SM2 key Exchange Testing:\n");

    /* Initialize key length*/
    public1_length = sizeof(public1);
    public2_length = sizeof(public2);
    key1_length = sizeof(key1);
    key2_length = sizeof(key2);

    /* Generate & Initialize SM2 context*/
    libspdm_my_print("- Context1 ... ");
    Sm2_1 = libspdm_sm2_key_exchange_new_by_nid(LIBSPDM_CRYPTO_NID_SM2_KEY_EXCHANGE_P256);
    if (Sm2_1 == NULL) {
        libspdm_my_print("[Fail]");
        return false;
    }

    libspdm_my_print("Context2 ... ");
    Sm2_2 = libspdm_sm2_key_exchange_new_by_nid(LIBSPDM_CRYPTO_NID_SM2_KEY_EXCHANGE_P256);
    if (Sm2_2 == NULL) {
        libspdm_my_print("[Fail]");
        libspdm_sm2_key_exchange_free(Sm2_1);
        return false;
    }

    libspdm_my_print("Initialize key1 ... ");
    status = libspdm_sm2_key_exchange_init (Sm2_1, LIBSPDM_CRYPTO_NID_SM3_256, NULL, 0, NULL, 0,
                                            true);
    if (!status) {
        libspdm_my_print("[Fail]");
        libspdm_sm2_key_exchange_free(Sm2_1);
        libspdm_sm2_key_exchange_free(Sm2_2);
        return false;
    }

    libspdm_my_print("Initialize key1 ... ");
    status = libspdm_sm2_key_exchange_init (Sm2_1, LIBSPDM_CRYPTO_NID_SM3_256, NULL, 0, NULL, 0,
                                            false);
    if (!status) {
        libspdm_my_print("[Fail]");
        libspdm_sm2_key_exchange_free(Sm2_1);
        libspdm_sm2_key_exchange_free(Sm2_2);
        return false;
    }

    /* Verify SM2-KeyExchange*/
    libspdm_my_print("Generate key1 ... ");
    status = libspdm_sm2_key_exchange_generate_key(Sm2_1, public1, &public1_length);
    if (!status || public1_length != 32 * 2) {
        libspdm_my_print("[Fail]");
        libspdm_sm2_key_exchange_free(Sm2_1);
        libspdm_sm2_key_exchange_free(Sm2_2);
        return false;
    }

    libspdm_my_print("Generate key2 ... ");
    status = libspdm_sm2_key_exchange_generate_key(Sm2_2, public2, &public2_length);
    if (!status || public2_length != 32 * 2) {
        libspdm_my_print("[Fail]");
        libspdm_sm2_key_exchange_free(Sm2_1);
        libspdm_sm2_key_exchange_free(Sm2_2);
        return false;
    }

    libspdm_my_print("Compute key1 ... ");
    key1_length = 16;
    status = libspdm_sm2_key_exchange_compute_key(Sm2_1, public2, public2_length, key1,
                                                  &key1_length);
    if (!status) {
        libspdm_my_print("[Fail]");
        libspdm_sm2_key_exchange_free(Sm2_1);
        libspdm_sm2_key_exchange_free(Sm2_2);
        return false;
    }

    libspdm_my_print("Compute key2 ... ");
    key2_length = 16;
    status = libspdm_sm2_key_exchange_compute_key(Sm2_2, public1, public1_length, key2,
                                                  &key2_length);
    if (!status) {
        libspdm_my_print("[Fail]");
        libspdm_sm2_key_exchange_free(Sm2_1);
        libspdm_sm2_key_exchange_free(Sm2_2);
        return false;
    }

    libspdm_my_print("Compare Keys ... ");

    if (memcmp(key1, key2, key1_length) != 0) {
        libspdm_my_print("[Fail]");
        libspdm_sm2_key_exchange_free(Sm2_1);
        libspdm_sm2_key_exchange_free(Sm2_2);
        return false;
    } else {
        libspdm_my_print("[Pass]\n");
    }

    libspdm_sm2_key_exchange_free(Sm2_1);
    libspdm_sm2_key_exchange_free(Sm2_2);
    #endif /* LIBSPDM_SM2_KEY_EXCHANGE_SUPPORT */

    #if LIBSPDM_SM2_DSA_SUPPORT
    libspdm_my_print("\nCrypto sm2 Signing Verification Testing:\n");

    public1_length = sizeof(public1);

    libspdm_my_print("- Context1 ... ");
    Sm2_1 = libspdm_sm2_dsa_new_by_nid(LIBSPDM_CRYPTO_NID_SM2_DSA_P256);
    if (Sm2_1 == NULL) {
        libspdm_my_print("[Fail]");
        return false;
    }

    libspdm_my_print("Compute key1 ... ");
    status = libspdm_sm2_dsa_generate_key(Sm2_1, public1, &public1_length);
    if (!status) {
        libspdm_my_print("[Fail]");
        libspdm_sm2_dsa_free(Sm2_1);
        return false;
    }

    /* Verify SM2 signing/verification*/
    sig_size = sizeof(signature);
    libspdm_my_print("\n- SM2 Signing ... ");
    status =
        libspdm_sm2_dsa_sign(Sm2_1, LIBSPDM_CRYPTO_NID_SM3_256, (uint8_t *)DEFAULT_SM2_ID,
                             sizeof(DEFAULT_SM2_ID) - 1,
                             message,
                             sizeof(message), signature, &sig_size);
    if (!status) {
        libspdm_my_print("[Fail]");
        libspdm_sm2_dsa_free(Sm2_1);
        return false;
    }

    libspdm_my_print("SM2 Verification ... ");
    status =
        libspdm_sm2_dsa_verify(Sm2_1, LIBSPDM_CRYPTO_NID_SM3_256, (uint8_t *)DEFAULT_SM2_ID,
                               sizeof(DEFAULT_SM2_ID) - 1,
                               message,
                               sizeof(message), signature, sig_size);
    if (!status) {
        libspdm_my_print("[Fail]");
        libspdm_sm2_dsa_free(Sm2_1);
        return false;
    } else {
        libspdm_my_print("[Pass]\n");
    }
    libspdm_sm2_dsa_free(Sm2_1);

    libspdm_my_print("\nCrypto sm2 Signing Verification Testing with SetPubKey:\n");

    public1_length = sizeof(public1);
    public2_length = sizeof(public2);

    libspdm_my_print("- Context1 ... ");
    Sm2_1 = libspdm_sm2_dsa_new_by_nid(LIBSPDM_CRYPTO_NID_SM2_DSA_P256);
    if (Sm2_1 == NULL) {
        libspdm_my_print("[Fail]");
        return false;
    }

    libspdm_my_print("Context2 ... ");
    Sm2_2 = libspdm_sm2_dsa_new_by_nid(LIBSPDM_CRYPTO_NID_SM2_DSA_P256);
    if (Sm2_2 == NULL) {
        libspdm_my_print("[Fail]");
        libspdm_sm2_dsa_free(Sm2_1);
        return false;
    }

    libspdm_my_print("Compute key in Context1 ... ");
    status = libspdm_sm2_dsa_generate_key(Sm2_1, public1, &public1_length);
    if (!status) {
        libspdm_my_print("[Fail]");
        libspdm_sm2_dsa_free(Sm2_1);
        libspdm_sm2_dsa_free(Sm2_2);
        return false;
    }

    libspdm_my_print("Export key in Context1 ... ");
    status = libspdm_sm2_dsa_get_pub_key(Sm2_1, public2, &public2_length);
    if (!status) {
        libspdm_my_print("[Fail]");
        libspdm_sm2_dsa_free(Sm2_1);
        libspdm_sm2_dsa_free(Sm2_2);
        return false;
    }

    libspdm_my_print("Import key in Context2 ... ");
    status = libspdm_sm2_dsa_set_pub_key(Sm2_2, public2, public2_length);
    if (!status) {
        libspdm_my_print("[Fail]");
        libspdm_sm2_dsa_free(Sm2_1);
        libspdm_sm2_dsa_free(Sm2_2);
        return false;
    }

    /* Verify EC-DSA*/
    sig_size = sizeof(signature);
    libspdm_my_print("\n- sm2 Signing in Context1 ... ");
    status =
        libspdm_sm2_dsa_sign(Sm2_1, LIBSPDM_CRYPTO_NID_SM3_256, (uint8_t *)DEFAULT_SM2_ID,
                             sizeof(DEFAULT_SM2_ID) - 1,
                             message,
                             sizeof(message), signature, &sig_size);
    if (!status) {
        libspdm_my_print("[Fail]");
        libspdm_sm2_dsa_free(Sm2_1);
        libspdm_sm2_dsa_free(Sm2_2);
        return false;
    }

    libspdm_my_print("sm2 Verification in Context2 ... ");
    status =
        libspdm_sm2_dsa_verify(Sm2_2, LIBSPDM_CRYPTO_NID_SM3_256, (uint8_t *)DEFAULT_SM2_ID,
                               sizeof(DEFAULT_SM2_ID) - 1,
                               message,
                               sizeof(message), signature, sig_size);
    if (!status) {
        libspdm_my_print("[Fail]");
        libspdm_sm2_dsa_free(Sm2_1);
        libspdm_sm2_dsa_free(Sm2_2);
        return false;
    } else {
        libspdm_my_print("[Pass]\n");
    }

    libspdm_sm2_dsa_free(Sm2_1);
    libspdm_sm2_dsa_free(Sm2_2);
    #endif /* LIBSPDM_SM2_DSA_SUPPORT */

    return true;
}
#endif /* (LIBSPDM_SM2_DSA_SUPPORT) || (LIBSPDM_SM2_KEY_EXCHANGE_SUPPORT) */