/*
 * Copyright (C) 2022 - 2026, Stephan Mueller <smueller@chronox.de>
 *
 * License: see LICENSE file in root directory
 *
 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED
 * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, ALL OF
 * WHICH ARE HEREBY DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR BE
 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT
 * OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
 * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
 * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE
 * USE OF THIS SOFTWARE, EVEN IF NOT ADVISED OF THE POSSIBILITY OF SUCH
 * DAMAGE.
 */

#ifndef LC_KMAC_CRYPT_H
#define LC_KMAC_CRYPT_H

#include "ext_headers.h"
#include "lc_aead.h"
#include "lc_memory_support.h"

/*
 * This is the KMAC crypt cipher operation using the KMAC output as keystream
 */
#include "lc_kmac.h"
#include "lc_memset_secure.h"

#ifdef __cplusplus
extern "C" {
#endif

/// \cond DO_NOT_DOCUMENT
struct lc_kc_cryptor {
	struct lc_kmac_ctx kmac;
	struct lc_kmac_ctx auth_ctx;
	size_t keystream_ptr;
	uint8_t *keystream;
};

/*
 * The block size of the algorithm for generating the key stream. It must be
 * a multiple of the cSHAKE block size.
 */
#define LC_KC_KEYSTREAM_BLOCK LC_SHA3_256_SIZE_BLOCK

#define LC_KMAC_CRYPT_ALIGNMENT LC_XOR_ALIGNMENT(LC_HASH_COMMON_ALIGNMENT)

#define LC_ALIGN_KMAC_CRYPT_MASK(p)                                            \
	LC_ALIGN_PTR_8(p, LC_ALIGNMENT_MASK(LC_KMAC_CRYPT_ALIGNMENT))

/*
 * Alignment:
 * - One block LC_KMAC_CRYPT_ALIGNMENT is required to ensure the
 * ->keystream pointer is aligned
 *
 * - Alignment for lc_kc_cryptor
 */
#define LC_KC_STATE_SIZE                                                       \
	(LC_KC_KEYSTREAM_BLOCK + LC_KMAC_CRYPT_ALIGNMENT +                     \
	 LC_HASH_STATE_SIZE + LC_HASH_COMMON_ALIGNMENT)
#define LC_KC_CTX_SIZE                                                         \
	(sizeof(struct lc_aead_ctx) + sizeof(struct lc_kc_cryptor) +           \
	 LC_KC_STATE_SIZE)

/* KMAC-based AEAD-algorithm */
extern const struct lc_aead *lc_kmac_aead;

/* Ensure that ->keystream is aligned to XOR alignment requirement */
#define _LC_KC_SET_CTX(name, hashname)                                         \
	_LC_KMAC_SET_CTX((&name->kmac), hashname);                             \
	_LC_KMAC_SET_CTX_REINIT((&name->auth_ctx), hashname, name,             \
				(sizeof(struct lc_kc_cryptor)));               \
	name->keystream = LC_ALIGN_KMAC_CRYPT_MASK(                            \
		(uint8_t *)((uint8_t *)name + (sizeof(struct lc_kc_cryptor) +  \
					       LC_HASH_STATE_SIZE)))

#define LC_KC_SET_CTX(name, hashname)                                          \
	LC_AEAD_HASH_ALIGN_CTX(name, lc_kmac_aead);                            \
	_LC_KC_SET_CTX(((struct lc_kc_cryptor *)name->aead_state), hashname)
/// \endcond

/**
 * @brief Allocate KMAC cryptor context on heap
 *
 * NOTE: This is defined for lc_cshake256 as of now.
 *
 * @param [in] hash Hash implementation of type struct hash used for the HMAC
 *		    authentication
 * @param [out] ctx Allocated KMAC cryptor context
 *
 * @return 0 on success, < 0 on error
 */
int lc_kc_alloc(const struct lc_hash *hash, struct lc_aead_ctx **ctx);

/**
 * @brief Allocate stack memory for the KMAC cryptor context
 *
 * NOTE: This is defined for lc_cshake256 as of now.
 *
 * @param [in] name Name of the stack variable
 * @param [in] hash Hash implementation of type struct hash used for the HMAC
 *		    authentication
 */
#define LC_KC_CTX_ON_STACK(name, hash)                                         \
	_Pragma("GCC diagnostic push") _Pragma(                                \
		"GCC diagnostic ignored \"-Wdeclaration-after-statement\"")    \
		_Pragma("GCC diagnostic ignored \"-Wcast-align\"")             \
			LC_ALIGNED_BUFFER(name##_ctx_buf, LC_KC_CTX_SIZE,      \
					  LC_KMAC_CRYPT_ALIGNMENT);            \
	struct lc_aead_ctx *name = (struct lc_aead_ctx *)name##_ctx_buf;       \
	LC_KC_SET_CTX(name, hash);                                             \
	_Pragma("GCC diagnostic pop")
/* invocation of lc_kc_zero(name); not needed */

#ifdef __cplusplus
}
#endif

#endif /* LC_KMAC_CRYPT_H */
