/*

 * XMSS Verification Operation

 * (C) 2016 Matthias Gierlings

 *

 * Botan is released under the Simplified BSD License (see license.txt)

 **/

#ifndef BOTAN_XMSS_VERIFICATION_OPERATION_H_

#define BOTAN_XMSS_VERIFICATION_OPERATION_H_

#include <botan/pk_ops.h>

#include <botan/xmss.h>

#include <botan/internal/xmss_signature.h>

namespace Botan {

/**

 * Provides signature verification capabilities for Extended Hash-Based

 * Signatures (XMSS).

 **/

class XMSS_Verification_Operation final : public virtual PK_Ops::Verification {

   public:

      XMSS_Verification_Operation(const XMSS_PublicKey& public_key);

      bool is_valid_signature(std::span<const uint8_t> sign) override;

      void update(std::span<const uint8_t> input) override;

      std::string hash_function() const override { return m_hash.hash_function(); }

   private:

      /**

       * Algorithm 13: "XMSS_rootFromSig"

       * Computes a root node using an XMSS signature, a message and a seed.

       *

       * @param msg A message.

       * @param sig The XMSS signature for msg.

       * @param ards A XMSS tree address.

       * @param seed A seed.

       *

       * @return An n-byte string holding the value of the root of a tree

       *         defined by the input parameters.

       **/

      secure_vector<uint8_t> root_from_signature(const XMSS_Signature& sig,

                                                 const secure_vector<uint8_t>& msg,

                                                 XMSS_Address& ards,

                                                 const secure_vector<uint8_t>& seed);

      /**

       * Algorithm 14: "XMSS_verify"

       * Verifies a XMSS signature using the corresponding XMSS public key.

       *

       * @param sig A XMSS signature.

       * @param msg The message signed with sig.

       * @param pub_key the public key

       *

       * @return true if signature sig is valid for msg, false otherwise.

       **/

      bool verify(const XMSS_Signature& sig, const secure_vector<uint8_t>& msg, const XMSS_PublicKey& pub_key);

      const XMSS_PublicKey m_pub_key;

      XMSS_Hash m_hash;

      secure_vector<uint8_t> m_msg_buf;

};

}  // namespace Botan

#endif