/*

 * Copyright 2020-2025 The OpenSSL Project Authors. All Rights Reserved.

 *

 * Licensed under the Apache License 2.0 (the "License").  You may not use

 * this file except in compliance with the License.  You can obtain a copy

 * in the file LICENSE in the source distribution or at

 * https://www.openssl.org/source/license.html

 */

#include <openssl/crypto.h>

#include <openssl/core_dispatch.h>

#include <openssl/core_names.h>

#include <openssl/params.h>

#include <openssl/err.h>

#include <openssl/proverr.h>

#include "internal/cryptlib.h"

#include "crypto/ecx.h"

#include "prov/implementations.h"

#include "prov/providercommon.h"

#include "prov/securitycheck.h"

#ifdef FIPS_MODULE

# include "providers/implementations/exchange/ecx_exch.inc"

#endif

static OSSL_FUNC_keyexch_newctx_fn x25519_newctx;

static OSSL_FUNC_keyexch_newctx_fn x448_newctx;

static OSSL_FUNC_keyexch_init_fn x25519_init;

static OSSL_FUNC_keyexch_init_fn x448_init;

static OSSL_FUNC_keyexch_set_peer_fn ecx_set_peer;

static OSSL_FUNC_keyexch_derive_fn ecx_derive;

static OSSL_FUNC_keyexch_freectx_fn ecx_freectx;

static OSSL_FUNC_keyexch_dupctx_fn ecx_dupctx;

static OSSL_FUNC_keyexch_gettable_ctx_params_fn ecx_gettable_ctx_params;

static OSSL_FUNC_keyexch_get_ctx_params_fn ecx_get_ctx_params;

/*

 * What's passed as an actual key is defined by the KEYMGMT interface.

 * We happen to know that our KEYMGMT simply passes ECX_KEY structures, so

 * we use that here too.

 */

typedef struct {

    size_t keylen;

    ECX_KEY *key;

    ECX_KEY *peerkey;

} PROV_ECX_CTX;

static void *ecx_newctx(void *provctx, size_t keylen)

{

    PROV_ECX_CTX *ctx;

    if (!ossl_prov_is_running())

        return NULL;

    ctx = OPENSSL_zalloc(sizeof(PROV_ECX_CTX));

    if (ctx == NULL)

        return NULL;

    ctx->keylen = keylen;

    return ctx;

}

static void *x25519_newctx(void *provctx)

{

    return ecx_newctx(provctx, X25519_KEYLEN);

}

static void *x448_newctx(void *provctx)

{

    return ecx_newctx(provctx, X448_KEYLEN);

}

static int ecx_init(void *vecxctx, void *vkey, const char *algname)

{

    PROV_ECX_CTX *ecxctx = (PROV_ECX_CTX *)vecxctx;

    ECX_KEY *key = vkey;

    if (!ossl_prov_is_running())

        return 0;

    if (ecxctx == NULL

            || key == NULL

            || key->keylen != ecxctx->keylen

            || !ossl_ecx_key_up_ref(key)) {

        ERR_raise(ERR_LIB_PROV, ERR_R_INTERNAL_ERROR);

        return 0;

    }

    ossl_ecx_key_free(ecxctx->key);

    ecxctx->key = key;

#ifdef FIPS_MODULE

    if (!ossl_FIPS_IND_callback(key->libctx, algname, "Init"))

        return 0;

#endif

    return 1;

}

static int x25519_init(void *vecxctx, void *vkey,

                       ossl_unused const OSSL_PARAM params[])

{

    return ecx_init(vecxctx, vkey, "X25519");

}

static int x448_init(void *vecxctx, void *vkey,

                     ossl_unused const OSSL_PARAM params[])

{

    return ecx_init(vecxctx, vkey, "X448");

}

static int ecx_set_peer(void *vecxctx, void *vkey)

{

    PROV_ECX_CTX *ecxctx = (PROV_ECX_CTX *)vecxctx;

    ECX_KEY *key = vkey;

    if (!ossl_prov_is_running())

        return 0;

    if (ecxctx == NULL

            || key == NULL

            || key->keylen != ecxctx->keylen

            || !ossl_ecx_key_up_ref(key)) {

        ERR_raise(ERR_LIB_PROV, ERR_R_INTERNAL_ERROR);

        return 0;

    }

    ossl_ecx_key_free(ecxctx->peerkey);

    ecxctx->peerkey = key;

    return 1;

}

static int ecx_derive(void *vecxctx, unsigned char *secret, size_t *secretlen,

                      size_t outlen)

{

    PROV_ECX_CTX *ecxctx = (PROV_ECX_CTX *)vecxctx;

    if (!ossl_prov_is_running())

        return 0;

    return ossl_ecx_compute_key(ecxctx->peerkey, ecxctx->key, ecxctx->keylen,

                                secret, secretlen, outlen);

}

static void ecx_freectx(void *vecxctx)

{

    PROV_ECX_CTX *ecxctx = (PROV_ECX_CTX *)vecxctx;

    ossl_ecx_key_free(ecxctx->key);

    ossl_ecx_key_free(ecxctx->peerkey);

    OPENSSL_free(ecxctx);

}

static void *ecx_dupctx(void *vecxctx)

{

    PROV_ECX_CTX *srcctx = (PROV_ECX_CTX *)vecxctx;

    PROV_ECX_CTX *dstctx;

    if (!ossl_prov_is_running())

        return NULL;

    dstctx = OPENSSL_zalloc(sizeof(*srcctx));

    if (dstctx == NULL)

        return NULL;

    *dstctx = *srcctx;

    if (dstctx->key != NULL && !ossl_ecx_key_up_ref(dstctx->key)) {

        ERR_raise(ERR_LIB_PROV, ERR_R_INTERNAL_ERROR);

        OPENSSL_free(dstctx);

        return NULL;

    }

    if (dstctx->peerkey != NULL && !ossl_ecx_key_up_ref(dstctx->peerkey)) {

        ERR_raise(ERR_LIB_PROV, ERR_R_INTERNAL_ERROR);

        ossl_ecx_key_free(dstctx->key);

        OPENSSL_free(dstctx);

        return NULL;

    }

    return dstctx;

}

#ifdef FIPS_MODULE

#endif

static const OSSL_PARAM *ecx_gettable_ctx_params(ossl_unused void *vctx,

                                                 ossl_unused void *provctx)

{

#ifdef FIPS_MODULE

    return ecx_get_ctx_params_list;

#else

    static OSSL_PARAM params[] = { OSSL_PARAM_END };

    return params;

#endif

}

static int ecx_get_ctx_params(ossl_unused void *vctx, OSSL_PARAM params[])

{

#ifdef FIPS_MODULE

    int approved = 0;

    struct ecx_get_ctx_params_st p;

    if (vctx == NULL || !ecx_get_ctx_params_decoder(params, &p))

        return 0;

    if (p.ind != NULL && !OSSL_PARAM_set_int(p.ind, approved))

        return 0;

#endif

    return 1;

}

const OSSL_DISPATCH ossl_x25519_keyexch_functions[] = {

    { OSSL_FUNC_KEYEXCH_NEWCTX, (void (*)(void))x25519_newctx },

    { OSSL_FUNC_KEYEXCH_INIT, (void (*)(void))x25519_init },

    { OSSL_FUNC_KEYEXCH_DERIVE, (void (*)(void))ecx_derive },

    { OSSL_FUNC_KEYEXCH_SET_PEER, (void (*)(void))ecx_set_peer },

    { OSSL_FUNC_KEYEXCH_FREECTX, (void (*)(void))ecx_freectx },

    { OSSL_FUNC_KEYEXCH_DUPCTX, (void (*)(void))ecx_dupctx },

    { OSSL_FUNC_KEYEXCH_GET_CTX_PARAMS, (void (*)(void))ecx_get_ctx_params },

    { OSSL_FUNC_KEYEXCH_GETTABLE_CTX_PARAMS,

      (void (*)(void))ecx_gettable_ctx_params },

    OSSL_DISPATCH_END

};

const OSSL_DISPATCH ossl_x448_keyexch_functions[] = {

    { OSSL_FUNC_KEYEXCH_NEWCTX, (void (*)(void))x448_newctx },

    { OSSL_FUNC_KEYEXCH_INIT, (void (*)(void))x448_init },

    { OSSL_FUNC_KEYEXCH_DERIVE, (void (*)(void))ecx_derive },

    { OSSL_FUNC_KEYEXCH_SET_PEER, (void (*)(void))ecx_set_peer },

    { OSSL_FUNC_KEYEXCH_FREECTX, (void (*)(void))ecx_freectx },

    { OSSL_FUNC_KEYEXCH_DUPCTX, (void (*)(void))ecx_dupctx },

    { OSSL_FUNC_KEYEXCH_GET_CTX_PARAMS, (void (*)(void))ecx_get_ctx_params },

    { OSSL_FUNC_KEYEXCH_GETTABLE_CTX_PARAMS,

      (void (*)(void))ecx_gettable_ctx_params },

    OSSL_DISPATCH_END

};