/*

 * Copyright (c) 1999, 2020, Oracle and/or its affiliates. All rights reserved.

 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.

 *

 * This code is free software; you can redistribute it and/or modify it

 * under the terms of the GNU General Public License version 2 only, as

 * published by the Free Software Foundation.  Oracle designates this

 * particular file as subject to the "Classpath" exception as provided

 * by Oracle in the LICENSE file that accompanied this code.

 *

 * This code is distributed in the hope that it will be useful, but WITHOUT

 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or

 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License

 * version 2 for more details (a copy is included in the LICENSE file that

 * accompanied this code).

 *

 * You should have received a copy of the GNU General Public License version

 * 2 along with this work; if not, write to the Free Software Foundation,

 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

 *

 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA

 * or visit www.oracle.com if you need additional information or have any

 * questions.

 */

package sun.security.pkcs12;

import java.io.*;

import java.security.*;

import sun.security.util.DerInputStream;

import sun.security.util.DerOutputStream;

import sun.security.util.DerValue;

import sun.security.x509.AlgorithmId;

import sun.security.pkcs.ParsingException;

/**

 * A MacData type, as defined in PKCS#12.

 *

 * @author Sharon Liu

 */

class MacData {

    private String digestAlgorithmName;

    private AlgorithmParameters digestAlgorithmParams;

    private byte[] digest;

    private byte[] macSalt;

    private int iterations;

    // the ASN.1 encoded contents of this class

    private byte[] encoded = null;

    /**

     * Parses a PKCS#12 MAC data.

     */

    MacData(DerInputStream derin)

        throws IOException, ParsingException

    {

        DerValue[] macData = derin.getSequence(2);

        if (macData.length < 2 || macData.length > 3) {

            throw new ParsingException("Invalid length for MacData");

        }

        // Parse the digest info

        DerInputStream digestIn = new DerInputStream(macData[0].toByteArray());

        DerValue[] digestInfo = digestIn.getSequence(2);

        if (digestInfo.length != 2) {

            throw new ParsingException("Invalid length for DigestInfo");

        }

        // Parse the DigestAlgorithmIdentifier.

        AlgorithmId digestAlgorithmId = AlgorithmId.parse(digestInfo[0]);

        this.digestAlgorithmName = digestAlgorithmId.getName();

        this.digestAlgorithmParams = digestAlgorithmId.getParameters();

        // Get the digest.

        this.digest = digestInfo[1].getOctetString();

        // Get the salt.

        this.macSalt = macData[1].getOctetString();

        // Iterations is optional. The default value is 1.

        if (macData.length > 2) {

            this.iterations = macData[2].getInteger();

        } else {

            this.iterations = 1;

        }

    }

    MacData(String algName, byte[] digest, byte[] salt, int iterations)

        throws NoSuchAlgorithmException

    {

        if (algName == null)

           throw new NullPointerException("the algName parameter " +

                                               "must be non-null");

        AlgorithmId algid = AlgorithmId.get(algName);

        this.digestAlgorithmName = algid.getName();

        this.digestAlgorithmParams = algid.getParameters();

        if (digest == null) {

            throw new NullPointerException("the digest " +

                                           "parameter must be non-null");

        } else if (digest.length == 0) {

            throw new IllegalArgumentException("the digest " +

                                                "parameter must not be empty");

        } else {

            this.digest = digest.clone();

        }

        this.macSalt = salt;

        this.iterations = iterations;

        // delay the generation of ASN.1 encoding until

        // getEncoded() is called

        this.encoded = null;

    }

    MacData(AlgorithmParameters algParams, byte[] digest,

        byte[] salt, int iterations) throws NoSuchAlgorithmException

    {

        if (algParams == null)

           throw new NullPointerException("the algParams parameter " +

                                               "must be non-null");

        AlgorithmId algid = AlgorithmId.get(algParams);

        this.digestAlgorithmName = algid.getName();

        this.digestAlgorithmParams = algid.getParameters();

        if (digest == null) {

            throw new NullPointerException("the digest " +

                                           "parameter must be non-null");

        } else if (digest.length == 0) {

            throw new IllegalArgumentException("the digest " +

                                                "parameter must not be empty");

        } else {

            this.digest = digest.clone();

        }

        this.macSalt = salt;

        this.iterations = iterations;

        // delay the generation of ASN.1 encoding until

        // getEncoded() is called

        this.encoded = null;

    }

    String getDigestAlgName() {

        return digestAlgorithmName;

    }

    byte[] getSalt() {

        return macSalt;

    }

    int getIterations() {

        return iterations;

    }

    byte[] getDigest() {

        return digest;

    }

    /**

     * Returns the ASN.1 encoding of this object.

     * @return the ASN.1 encoding.

     * @exception IOException if error occurs when constructing its

     * ASN.1 encoding.

     */

    public byte[] getEncoded() throws NoSuchAlgorithmException, IOException

    {

        if (this.encoded != null)

            return this.encoded.clone();

        DerOutputStream out = new DerOutputStream();

        DerOutputStream tmp = new DerOutputStream();

        DerOutputStream tmp2 = new DerOutputStream();

        // encode encryption algorithm

        AlgorithmId algid = AlgorithmId.get(digestAlgorithmName);

        algid.encode(tmp2);

        // encode digest data

        tmp2.putOctetString(digest);

        tmp.write(DerValue.tag_Sequence, tmp2);

        // encode salt

        tmp.putOctetString(macSalt);

        // encode iterations

        tmp.putInteger(iterations);

        // wrap everything into a SEQUENCE

        out.write(DerValue.tag_Sequence, tmp);

        this.encoded = out.toByteArray();

        return this.encoded.clone();

    }

}