package crypto

import (
	"bytes"
	"encoding/hex"
	"math/big"
	"reflect"
	"testing"
)

func isSameAs(a []byte, off int, b []byte) bool {
	if (len(a) - off) != len(b) {
		return false
	}
	return reflect.DeepEqual(a[off:], b)
}

func startsWith(a, b []byte) bool {
	if len(a) < len(b) {
		return false
	}
	return bytes.HasPrefix(a, b)
}

func must(val interface{}, err error) interface{} {
	if err != nil {
		panic(err)
	}
	return val
}

func mustBigInt(val *big.Int, err bool) *big.Int {
	if !err {
		panic("BigInt not set")
	}
	return val
}

func mustBytes(val []byte, err error) []byte {
	return must(val, err).([]byte)
}

/**
* test vectors from ISO 9796-1 and ISO 9796-2 edition 1.
 */
var mod1 = mustBigInt(new(big.Int).SetString("0100000000000000000000000000000000bba2d15dbb303c8a21c5ebbcbae52b7125087920dd7cdf358ea119fd66fb064012ec8ce692f0a0b8e8321b041acd40b7", 16))

var pub1 = mustBigInt(new(big.Int).SetString("03", 16))

var pri1 = mustBigInt(new(big.Int).SetString("2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaac9f0783a49dd5f6c5af651f4c9d0dc9281c96a3f16a85f9572d7cc3f2d0f25a9dbf1149e4cdc32273faadd3fda5dcda7", 16))

var mod2 = mustBigInt(new(big.Int).SetString("ffffff7fa27087c35ebead78412d2bdffe0301edd494df13458974ea89b364708f7d0f5a00a50779ddf9f7d4cb80b8891324da251a860c4ec9ef288104b3858d", 16))

var pub2 = mustBigInt(new(big.Int).SetString("03", 16))

var pri2 = mustBigInt(new(big.Int).SetString("2aaaaa9545bd6bf5e51fc7940adcdca5550080524e18cfd88b96e8d1c19de6121b13fac0eb0495d47928e047724d91d1740f6968457ce53ec8e24c9362ce84b5", 16))

//TODO
var msg1 = mustBytes(hex.DecodeString("0cbbaa99887766554433221100"))

//
// you'll need to see the ISO 9796 to make sense of this
//
var sig1 = new(big.Int).Sub(mod1, mustBigInt(new(big.Int).SetString("309f873d8ded8379490f6097eaafdabc137d3ebfd8f25ab5f138d56a719cdc526bdd022ea65dabab920a81013a85d092e04d3e421caab717c90d89ea45a8d23a", 16))).Bytes()

var msg2 = mustBytes(hex.DecodeString("fedcba9876543210fedcba9876543210fedcba9876543210fedcba9876543210"))

var sig2 = mustBigInt(new(big.Int).SetString("319bb9becb49f3ed1bca26d0fcf09b0b0a508e4d0bd43b350f959b72cd25b3af47d608fdcd248eada74fbe19990dbeb9bf0da4b4e1200243a14e5cab3f7e610c", 16)).Bytes()

var msg3 = mustBytes(hex.DecodeString("0112233445566778899aabbccd"))

var sig3 = new(big.Int).Sub(mod2, mustBigInt(new(big.Int).SetString("58e59ffb4b1fb1bcdbf8d1fe9afa3730c78a318a1134f5791b7313d480ff07ac319b068edf8f212945cb09cf33df30ace54f4a063fcca0b732f4b662dc4e2454", 16))).Bytes()

//
// ISO 9796-2
//
var mod3 = mustBigInt(new(big.Int).SetString("ffffffff78f6c55506c59785e871211ee120b0b5dd644aa796d82413a47b24573f1be5745b5cd9950f6b389b52350d4e01e90009669a8720bf265a2865994190a661dea3c7828e2e7ca1b19651adc2d5", 16))

var pub3 = mustBigInt(new(big.Int).SetString("03", 16))

var pri3 = mustBigInt(new(big.Int).SetString("2aaaaaaa942920e38120ee965168302fd0301d73a4e60c7143ceb0adf0bf30b9352f50e8b9e4ceedd65343b2179005b2f099915e4b0c37e41314bb0821ad8330d23cba7f589e0f129b04c46b67dfce9d", 16))

var mod4 = mustBigInt(new(big.Int).SetString("FFFFFFFF45f1903ebb83d4d363f70dc647b839f2a84e119b8830b2dec424a1ce0c9fd667966b81407e89278283f27ca8857d40979407fc6da4cc8a20ecb4b8913b5813332409bc1f391a94c9c328dfe46695daf922259174544e2bfbe45cc5cd", 16))
var pub4 = mustBigInt(new(big.Int).SetString("02", 16))
var pri4 = mustBigInt(new(big.Int).SetString("1fffffffe8be3207d7707a9a6c7ee1b8c8f7073e5509c2337106165bd8849439c193faccf2cd70280fd124f0507e4f94cb66447680c6b87b6599d1b61c8f3600854a618262e9c1cb1438e485e47437be036d94b906087a61ee74ab0d9a1accd8", 16))

var msg4 = mustBytes(hex.DecodeString("6162636462636465636465666465666765666768666768696768696a68696a6b696a6b6c6a6b6c6d6b6c6d6e6c6d6e6f6d6e6f706e6f7071"))
var sig4 = mustBytes(hex.DecodeString("374695b7ee8b273925b4656cc2e008d41463996534aa5aa5afe72a52ffd84e118085f8558f36631471d043ad342de268b94b080bee18a068c10965f581e7f32899ad378835477064abed8ef3bd530fce"))

var msg5 = mustBytes(hex.DecodeString("fedcba9876543210fedcba9876543210fedcba9876543210fedcba9876543210fedcba9876543210fedcba9876543210fedcba9876543210fedcba9876543210fedcba9876543210fedcba9876543210fedcba9876543210fedcba9876543210fedcba9876543210fedcba9876543210"))
var sig5 = mustBytes(hex.DecodeString("5cf9a01854dbacaec83aae8efc563d74538192e95466babacd361d7c86000fe42dcb4581e48e4feb862d04698da9203b1803b262105104d510b365ee9c660857ba1c001aa57abfd1c8de92e47c275cae"))

//
// scheme 2 data
//
var mod6 = mustBigInt(new(big.Int).SetString("b259d2d6e627a768c94be36164c2d9fc79d97aab9253140e5bf17751197731d6f7540d2509e7b9ffee0a70a6e26d56e92d2edd7f85aba85600b69089f35f6bdbf3c298e05842535d9f064e6b0391cb7d306e0a2d20c4dfb4e7b49a9640bdea26c10ad69c3f05007ce2513cee44cfe01998e62b6c3637d3fc0391079b26ee36d5", 16))
var pub6 = mustBigInt(new(big.Int).SetString("11", 16))
var pri6 = mustBigInt(new(big.Int).SetString("92e08f83cc9920746989ca5034dcb384a094fb9c5a6288fcc4304424ab8f56388f72652d8fafc65a4b9020896f2cde297080f2a540e7b7ce5af0b3446e1258d1dd7f245cf54124b4c6e17da21b90a0ebd22605e6f45c9f136d7a13eaac1c0f7487de8bd6d924972408ebb58af71e76fd7b012a8d0e165f3ae2e5077a8648e619", 16))

var sig6 = new(big.Int).Exp(mustBigInt(new(big.Int).SetString("0073FEAF13EB12914A43FE635022BB4AB8188A8F3ABD8D8A9E4AD6C355EE920359C7F237AE36B1212FE947F676C68FE362247D27D1F298CA9302EB21F4A64C26CE44471EF8C0DFE1A54606F0BA8E63E87CDACA993BFA62973B567473B4D38FAE73AB228600934A9CC1D3263E632E21FD52D2B95C5F7023DA63DE9509C01F6C7BBC", 16)), pri6, mod6).Bytes()

var msg7 = mustBytes(hex.DecodeString("6162636462636465636465666465666765666768666768696768696A68696A6B696A6B6C6A6B6C6D6B6C6D6E6C6D6E6F6D6E6F706E6F70716F70717270717273"))
var sig7 = new(big.Int).Exp(mustBigInt(new(big.Int).SetString("296B06224010E1EC230D4560A5F88F03550AAFCE31C805CE81E811E5E53E5F71AE64FC2A2A486B193E87972D90C54B807A862F21A21919A43ECF067240A8C8C641DE8DCDF1942CF790D136728FFC0D98FB906E7939C1EC0E64C0E067F0A7443D6170E411DF91F797D1FFD74009C4638462E69D5923E7433AEC028B9A90E633CC", 16)), pri6, mod6).Bytes()

var msg8 = mustBytes(hex.DecodeString("FEDCBA9876543210FEDCBA9876543210FEDCBA9876543210FEDCBA9876543210FEDCBA9876543210FEDCBA9876543210FEDCBA9876543210FEDCBA9876543210FEDCBA9876543210FEDCBA9876543210FEDCBA9876543210FEDCBA9876543210FEDCBA9876543210FEDCBA9876543210FEDCBA9876543210FEDCBA9876543210FEDCBA98"))
var sig8 = new(big.Int).Exp(mustBigInt(new(big.Int).SetString("01402B29ABA104079677CE7FC3D5A84DB24494D6F9508B4596484F5B3CC7E8AFCC4DDE7081F21CAE9D4F94D6D2CCCB43FCEDA0988FFD4EF2EAE72CFDEB4A2638F0A34A0C49664CD9DB723315759D758836C8BA26AC4348B66958AC94AE0B5A75195B57ABFB9971E21337A4B517F2E820B81F26BCE7C66F48A2DB12A8F3D731CC", 16)), pri6, mod6).Bytes()

var msg9 = mustBytes(hex.DecodeString("6162636462636465636465666465666765666768666768696768696A68696A6B696A6B6C6A6B6C6D6B6C6D6E6C6D6E6F6D6E6F706E6F70716F707172707172737172737472737475737475767475767775767778767778797778797A78797A61797A61627A6162636162636462636465"))
var sig9 = new(big.Int).Exp(mustBigInt(new(big.Int).SetString("6F2BB97571FE2EF205B66000E9DD06656655C1977F374E8666D636556A5FEEEEAF645555B25F45567C4EE5341F96FED86508C90A9E3F11B26E8D496139ED3E55ECE42860A6FB3A0817DAFBF13019D93E1D382DA07264FE99D9797D2F0B7779357CA7E74EE440D8855B7DDF15F000AC58EE3FFF144845E771907C0C83324A6FBC", 16)), pri6, mod6).Bytes()

func doTest1(t *testing.T) {
	pubParameters := NewRSAKeyParameters(false, mod1, pub1)
	privParameters := NewRSAKeyParameters(true, mod1, pri1)
	rsaEngine := new(RSAEngine)
	var data []byte
	var err error

	//
	// ISO 9796-1 - public encrypt, private decrypt
	//
	eng := NewISO9796d1Encoding(rsaEngine)

	eng.Init(true, privParameters)

	eng.SetPadBits(4)

	data, err = eng.ProcessBlock(msg1, 0, len(msg1))

	if err != nil {
		t.Logf("Expected no error, got %T:%v\n", err, err)
		t.Fail()
	}

	eng.Init(false, pubParameters)

	if !reflect.DeepEqual(sig1, data) {
		t.Logf("failed ISO9796-1 generation Test 1")
		t.Fail()
	}

	data, err = eng.ProcessBlock(data, 0, len(data))

	if err != nil {
		t.Logf("Expected no error, got %T:%v\n", err, err)
		t.Fail()
	}

	if !reflect.DeepEqual(msg1, data) {
		t.Logf("failed ISO9796-1 retrieve Test 1")
		t.Fail()
	}
}

func doTest2(t *testing.T) {
	pubParameters := NewRSAKeyParameters(false, mod1, pub1)
	privParameters := NewRSAKeyParameters(true, mod1, pri1)
	rsaEngine := new(RSAEngine)
	var data []byte
	var err error

	//
	// ISO 9796-1 - public encrypt, private decrypt
	//
	eng := NewISO9796d1Encoding(rsaEngine)

	eng.Init(true, privParameters)

	data, err = eng.ProcessBlock(msg2, 0, len(msg2))

	if err != nil {
		t.Logf("Expected no error, got %T:%v\n", err, err)
		t.Fail()
	}

	eng.Init(false, pubParameters)

	if !isSameAs(data, 1, sig2) {
		t.Logf("failed ISO9796-1 generation Test 2")
		t.Fail()
	}

	data, err = eng.ProcessBlock(data, 0, len(data))

	if err != nil {
		t.Logf("Expected no error, got %T:%v\n", err, err)
		t.Fail()
	}

	if !reflect.DeepEqual(msg2, data) {
		t.Logf("failed ISO9796-1 retrieve Test 2")
		t.Fail()
	}
}

func doTest3(t *testing.T) {
	pubParameters := NewRSAKeyParameters(false, mod2, pub2)
	privParameters := NewRSAKeyParameters(true, mod2, pri2)
	rsaEngine := new(RSAEngine)
	var data []byte
	var err error

	//
	// ISO 9796-1 - public encrypt, private decrypt
	//
	eng := NewISO9796d1Encoding(rsaEngine)

	eng.Init(true, privParameters)

	eng.SetPadBits(4)

	data, err = eng.ProcessBlock(msg3, 0, len(msg3))

	if err != nil {
		t.Logf("Expected no error, got %T:%v\n", err, err)
		t.Fail()
	}

	eng.Init(false, pubParameters)

	if !isSameAs(sig3, 1, data) {
		t.Logf("failed ISO9796-1 generation Test 3")
		t.Fail()
	}

	data, err = eng.ProcessBlock(data, 0, len(data))

	if err != nil {
		t.Logf("Expected no error, got %T:%v\n", err, err)
		t.Fail()
	}

	if !isSameAs(msg3, 0, data) {
		t.Logf("failed ISO9796-1 retrieve Test 3")
		t.Fail()
	}
}

//func doTest4(t *testing.T) {
//RSAKeyParameters pubParameters = new RSAKeyParameters(false, mod3, pub3);
//RSAKeyParameters privParameters = new RSAKeyParameters(true, mod3, pri3);
//RSAEngine rsa = new RSAEngine();
//byte[] data;

////
//// ISO 9796-2 - Signing
////
//ISO9796d2Signer eng = new ISO9796d2Signer(rsa, new RIPEMD128Digest());

//eng.init(true, privParameters);

//eng.update(msg4[0]);
//eng.update(msg4, 1, msg4.length - 1);

//data = eng.generateSignature();

//byte[] recovered = new byte[eng.getRecoveredMessage().length];

//System.arraycopy(eng.getRecoveredMessage(), 0, recovered, 0, recovered.length);

//eng.init(false, pubParameters);

//if (!isSameAs(sig4, 0, data))
//{
//fail("failed ISO9796-2 generation Test 4");
//}

//eng.update(msg4[0]);
//eng.update(msg4, 1, msg4.length - 1);

//if (!eng.verifySignature(sig4))
//{
//fail("failed ISO9796-2 verify Test 4");
//}

//if (eng.hasFullMessage())
//{
//eng = new ISO9796d2Signer(rsa, new RIPEMD128Digest());

//eng.init(false, pubParameters);

//if (!eng.verifySignature(sig4))
//{
//fail("failed ISO9796-2 verify and recover Test 4");
//}

//if (!isSameAs(eng.getRecoveredMessage(), 0, msg4))
//{
//fail("failed ISO9796-2 recovered message Test 4");
//}

//// try update with recovered
//eng.updateWithRecoveredMessage(sig4);

//if (!isSameAs(eng.getRecoveredMessage(), 0, msg4))
//{
//fail("failed ISO9796-2 updateWithRecovered recovered message Test 4");
//}

//if (!eng.verifySignature(sig4))
//{
//fail("failed ISO9796-2 updateWithRecovered verify and recover Test 4");
//}

//if (!isSameAs(eng.getRecoveredMessage(), 0, msg4))
//{
//fail("failed ISO9796-2 updateWithRecovered recovered verify message Test 4");
//}

//if (!isSameAs(eng.getRecoveredMessage(), 0, recovered))
//{
//fail("failed ISO9796-2 updateWithRecovered recovered verify message Test 4 generate check");
//}

//// should fail
//eng.updateWithRecoveredMessage(sig4);

//eng.update(msg4, 0, msg4.length);

//if (eng.verifySignature(sig4))
//{
//fail("failed ISO9796-2 updateWithRecovered verify and recover Test 4");
//}
//}
//else
//{
//fail("full message flag false - Test 4");
//}
//}

//public void doTest5()
//throws Exception
//{
//RSAKeyParameters pubParameters = new RSAKeyParameters(false, mod3, pub3);
//RSAKeyParameters privParameters = new RSAKeyParameters(true, mod3, pri3);
//RSAEngine rsa = new RSAEngine();
//byte[] data;

////
//// ISO 9796-2 - Signing
////
//ISO9796d2Signer eng = new ISO9796d2Signer(rsa, new RIPEMD160Digest(), true);

//eng.init(true, privParameters);

//eng.update(msg5[0]);
//eng.update(msg5, 1, msg5.length - 1);

//data = eng.generateSignature();

//byte[] recovered = new byte[eng.getRecoveredMessage().length];

//System.arraycopy(eng.getRecoveredMessage(), 0, recovered, 0, recovered.length);

//eng.init(false, pubParameters);

//if (!isSameAs(sig5, 0, data))
//{
//fail("failed ISO9796-2 generation Test 5");
//}

//eng.update(msg5[0]);
//eng.update(msg5, 1, msg5.length - 1);

//if (!eng.verifySignature(sig5))
//{
//fail("failed ISO9796-2 verify Test 5");
//}

//if (eng.hasFullMessage())
//{
//fail("fullMessage true - Test 5");
//}

//if (!startsWith(msg5, eng.getRecoveredMessage()))
//{
//fail("failed ISO9796-2 partial recovered message Test 5");
//}

//int length = eng.getRecoveredMessage().length;

//if (length &gt;= msg5.length)
//{
//fail("Test 5 recovered message too long");
//}

//eng = new ISO9796d2Signer(rsa, new RIPEMD160Digest(), true);

//eng.init(false, pubParameters);

//eng.updateWithRecoveredMessage(sig5);

//if (!startsWith(msg5, eng.getRecoveredMessage()))
//{
//fail("failed ISO9796-2 updateWithRecovered partial recovered message Test 5");
//}

//if (!isSameAs(recovered, 0, eng.getRecoveredMessage()))
//{
//fail("failed ISO9796-2 updateWithRecovered partial recovered message Test 5 recovery check");
//}

//if (eng.hasFullMessage())
//{
//fail("fullMessage updateWithRecovered true - Test 5");
//}

//for (int i = length; i != msg5.length; i++)
//{
//eng.update(msg5[i]);
//}

//if (!eng.verifySignature(sig5))
//{
//fail("failed ISO9796-2 verify Test 5");
//}

//if (eng.hasFullMessage())
//{
//fail("fullMessage updateWithRecovered true - Test 5");
//}

//// should fail
//eng.updateWithRecoveredMessage(sig5);

//eng.update(msg5, 0, msg5.length);

//if (eng.verifySignature(sig5))
//{
//fail("failed ISO9796-2 updateWithRecovered verify fail Test 5");
//}
//}

////
//// against a zero length string
////

//public void doTest6()
//throws Exception
//{
//byte[] salt = Hex.decode("61DF870C4890FE85D6E3DD87C3DCE3723F91DB49");
//RSAKeyParameters pubParameters = new RSAKeyParameters(false, mod6, pub6);
//RSAKeyParameters privParameters = new RSAKeyParameters(true, mod6, pri6);
//ParametersWithSalt sigParameters = new ParametersWithSalt(privParameters, salt);
//RSAEngine rsa = new RSAEngine();
//byte[] data;

////
//// ISO 9796-2 - PSS Signing
////
//ISO9796d2PSSSigner eng = new ISO9796d2PSSSigner(rsa, new RIPEMD160Digest(), 20, true);

//eng.init(true, sigParameters);

//data = eng.generateSignature();

//if (eng.getRecoveredMessage().length != 0)
//{
//fail("failed zero check");
//}

//eng.init(false, pubParameters);

//if (!isSameAs(sig6, 1, data))
//{
//fail("failed ISO9796-2 generation Test 6");
//}

//if (!eng.verifySignature(data))
//{
//fail("failed ISO9796-2 verify Test 6");
//}
//}

//public void doTest7()
//throws Exception
//{
//byte[] salt = new byte[0];
//RSAKeyParameters pubParameters = new RSAKeyParameters(false, mod6, pub6);
//RSAKeyParameters privParameters = new RSAKeyParameters(true, mod6, pri6);
//ParametersWithSalt sigParameters = new ParametersWithSalt(privParameters, salt);
//RSAEngine rsa = new RSAEngine();
//byte[] data;

////
//// ISO 9796-2 - PSS Signing
////
//ISO9796d2PSSSigner eng = new ISO9796d2PSSSigner(rsa, new SHA1Digest(), 0, false);

//eng.init(true, sigParameters);

//eng.update(msg7[0]);
//eng.update(msg7, 1, msg7.length - 1);

//data = eng.generateSignature();

//byte[] recovered = new byte[eng.getRecoveredMessage().length];

//System.arraycopy(eng.getRecoveredMessage(), 0, recovered, 0, recovered.length);

//eng.init(false, pubParameters);

//if (!isSameAs(sig7, 0, data))
//{
//fail("failed ISO9796-2 generation Test 7");
//}

//eng.update(msg7[0]);
//eng.update(msg7, 1, msg7.length - 1);

//if (!eng.verifySignature(sig7))
//{
//fail("failed ISO9796-2 verify Test 7");
//}

//if (!isSameAs(msg7, 0, eng.getRecoveredMessage()))
//{
//fail("failed ISO9796-2 recovery Test 7");
//}

//if (!isSameAs(recovered, 0, eng.getRecoveredMessage()))
//{
//fail("failed ISO9796-2 recovery Test 7 recover");
//}
//}

//public void doTest8()
//throws Exception
//{
//byte[] salt = Hex.decode("78E293203CBA1B7F92F05F4D171FF8CA3E738FF8");
//RSAKeyParameters pubParameters = new RSAKeyParameters(false, mod6, pub6);
//RSAKeyParameters privParameters = new RSAKeyParameters(true, mod6, pri6);
//ParametersWithSalt sigParameters = new ParametersWithSalt(privParameters, salt);
//RSAEngine rsa = new RSAEngine();
//byte[] data;

////
//// ISO 9796-2 - PSS Signing
////
//ISO9796d2PSSSigner eng = new ISO9796d2PSSSigner(rsa, new RIPEMD160Digest(), 20, false);

//eng.init(true, sigParameters);

//eng.update(msg8[0]);
//eng.update(msg8, 1, msg8.length - 1);

//data = eng.generateSignature();

//eng.init(false, pubParameters);

//if (!isSameAs(sig8, 0, data))
//{
//fail("failed ISO9796-2 generation Test 8");
//}

//eng.update(msg8[0]);
//eng.update(msg8, 1, msg8.length - 1);

//if (!eng.verifySignature(sig8))
//{
//fail("failed ISO9796-2 verify Test 8");
//}
//}

//public void doTest9()
//throws Exception
//{
//RSAKeyParameters pubParameters = new RSAKeyParameters(false, mod6, pub6);
//RSAKeyParameters privParameters = new RSAKeyParameters(true, mod6, pri6);
//RSAEngine rsa = new RSAEngine();
//byte[] data;

////
//// ISO 9796-2 - PSS Signing
////
//ISO9796d2PSSSigner eng = new ISO9796d2PSSSigner(rsa, new RIPEMD160Digest(), 0, true);

//eng.init(true, privParameters);

//eng.update(msg9[0]);
//eng.update(msg9, 1, msg9.length - 1);

//data = eng.generateSignature();

//byte[] recovered = new byte[eng.getRecoveredMessage().length];

//System.arraycopy(eng.getRecoveredMessage(), 0, recovered, 0, recovered.length);

//eng.init(false, pubParameters);

//if (!isSameAs(sig9, 0, data))
//{
//fail("failed ISO9796-2 generation Test 9");
//}

//eng.update(msg9[0]);
//eng.update(msg9, 1, msg9.length - 1);

//if (!eng.verifySignature(sig9))
//{
//fail("failed ISO9796-2 verify Test 9");
//}

//if (!isSameAs(recovered, 0, eng.getRecoveredMessage()))
//{
//fail("failed ISO9796-2 recovery Test 7 recover");
//}
//}

//public void doTest10()
//throws Exception
//{
//BigInteger mod = new BigInteger("B3ABE6D91A4020920F8B3847764ECB34C4EB64151A96FDE7B614DC986C810FF2FD73575BDF8532C06004C8B4C8B64F700A50AEC68C0701ED10E8D211A4EA554D", 16);
//BigInteger pubExp = new BigInteger("65537", 10);
//BigInteger priExp = new BigInteger("AEE76AE4716F77C5782838F328327012C097BD67E5E892E75C1356E372CCF8EE1AA2D2CBDFB4DA19F703743F7C0BA42B2D69202BA7338C294D1F8B6A5771FF41", 16);
//RSAKeyParameters pubParameters = new RSAKeyParameters(false, mod, pubExp);
//RSAKeyParameters privParameters = new RSAKeyParameters(true, mod, priExp);
//RSAEngine rsa = new RSAEngine();
//byte[] data;

////
//// ISO 9796-2 - PSS Signing
////
//Digest dig = new SHA1Digest();
//ISO9796d2PSSSigner eng = new ISO9796d2PSSSigner(rsa, dig, dig.getDigestSize());

////
//// as the padding is random this test needs to repeat a few times to
//// make sure
////
//for (int i = 0; i != 500; i++)
//{
//eng.init(true, privParameters);

//eng.update(msg9[0]);
//eng.update(msg9, 1, msg9.length - 1);

//data = eng.generateSignature();

//eng.init(false, pubParameters);

//eng.update(msg9[0]);
//eng.update(msg9, 1, msg9.length - 1);

//if (!eng.verifySignature(data))
//{
//fail("failed ISO9796-2 verify Test 10");
//}
//}
//}

//public void doTest11()
//throws Exception
//{
//BigInteger mod = new BigInteger("B3ABE6D91A4020920F8B3847764ECB34C4EB64151A96FDE7B614DC986C810FF2FD73575BDF8532C06004C8B4C8B64F700A50AEC68C0701ED10E8D211A4EA554D", 16);
//BigInteger pubExp = new BigInteger("65537", 10);
//BigInteger priExp = new BigInteger("AEE76AE4716F77C5782838F328327012C097BD67E5E892E75C1356E372CCF8EE1AA2D2CBDFB4DA19F703743F7C0BA42B2D69202BA7338C294D1F8B6A5771FF41", 16);
//RSAKeyParameters pubParameters = new RSAKeyParameters(false, mod, pubExp);
//RSAKeyParameters privParameters = new RSAKeyParameters(true, mod, priExp);
//RSAEngine rsa = new RSAEngine();
//byte[] data;
//byte[] m1 = {1, 2, 3, 4, 5, 6, 7, 8, 9};
//byte[] m2 = {1, 2, 3, 4, 5, 6, 7, 8, 9, 0};
//byte[] m3 = {1, 2, 3, 4, 5, 6, 7, 8};

////
//// ISO 9796-2 - PSS Signing
////
//Digest dig = new SHA1Digest();
//ISO9796d2PSSSigner eng = new ISO9796d2PSSSigner(rsa, dig, dig.getDigestSize());

////
//// check message bounds
////
//eng.init(true, privParameters);

//eng.update(m1, 0, m1.length);

//data = eng.generateSignature();

//eng.init(false, pubParameters);

//eng.update(m2, 0, m2.length);

//if (eng.verifySignature(data))
//{
//fail("failed ISO9796-2 m2 verify Test 11");
//}

//eng.init(false, pubParameters);

//eng.update(m3, 0, m3.length);

//if (eng.verifySignature(data))
//{
//fail("failed ISO9796-2 m3 verify Test 11");
//}

//eng.init(false, pubParameters);

//eng.update(m1, 0, m1.length);

//if (!eng.verifySignature(data))
//{
//fail("failed ISO9796-2 verify Test 11");
//}
//}

//public void doTest12()
//throws Exception
//{
//BigInteger mod = new BigInteger("B3ABE6D91A4020920F8B3847764ECB34C4EB64151A96FDE7B614DC986C810FF2FD73575BDF8532C06004C8B4C8B64F700A50AEC68C0701ED10E8D211A4EA554D", 16);
//BigInteger pubExp = new BigInteger("65537", 10);
//BigInteger priExp = new BigInteger("AEE76AE4716F77C5782838F328327012C097BD67E5E892E75C1356E372CCF8EE1AA2D2CBDFB4DA19F703743F7C0BA42B2D69202BA7338C294D1F8B6A5771FF41", 16);
//RSAKeyParameters pubParameters = new RSAKeyParameters(false, mod, pubExp);
//RSAKeyParameters privParameters = new RSAKeyParameters(true, mod, priExp);
//RSAEngine rsa = new RSAEngine();
//byte[] data;
//byte[] m1 = {1, 2, 3, 4, 5, 6, 7, 8, 9};
//byte[] m2 = {1, 2, 3, 4, 5, 6, 7, 8, 9, 0};
//byte[] m3 = {1, 2, 3, 4, 5, 6, 7, 8};

////
//// ISO 9796-2 - Signing
////
//Digest dig = new SHA1Digest();
//ISO9796d2Signer eng = new ISO9796d2Signer(rsa, dig);

////
//// check message bounds
////
//eng.init(true, privParameters);

//eng.update(m1, 0, m1.length);

//data = eng.generateSignature();

//eng.init(false, pubParameters);

//eng.update(m2, 0, m2.length);

//if (eng.verifySignature(data))
//{
//fail("failed ISO9796-2 m2 verify Test 12");
//}

//eng.init(false, pubParameters);

//eng.update(m3, 0, m3.length);

//if (eng.verifySignature(data))
//{
//fail("failed ISO9796-2 m3 verify Test 12");
//}

//eng.init(false, pubParameters);

//eng.update(m1, 0, m1.length);

//if (!eng.verifySignature(data))
//{
//fail("failed ISO9796-2 verify Test 12");
//}
//}

//private void doTest13()
//throws Exception
//{
//BigInteger modulus = new BigInteger(1, Hex.decode("CDCBDABBF93BE8E8294E32B055256BBD0397735189BF75816341BB0D488D05D627991221DF7D59835C76A4BB4808ADEEB779E7794504E956ADC2A661B46904CDC71337DD29DDDD454124EF79CFDD7BC2C21952573CEFBA485CC38C6BD2428809B5A31A898A6B5648CAA4ED678D9743B589134B7187478996300EDBA16271A861"));
//BigInteger pubExp = new BigInteger(1, Hex.decode("010001"));
//BigInteger privExp = new BigInteger(1, Hex.decode("4BA6432AD42C74AA5AFCB6DF60FD57846CBC909489994ABD9C59FE439CC6D23D6DE2F3EA65B8335E796FD7904CA37C248367997257AFBD82B26F1A30525C447A236C65E6ADE43ECAAF7283584B2570FA07B340D9C9380D88EAACFFAEEFE7F472DBC9735C3FF3A3211E8A6BBFD94456B6A33C17A2C4EC18CE6335150548ED126D"));

//RSAKeyParameters pubParams = new RSAKeyParameters(false, modulus, pubExp);
//RSAKeyParameters privParams = new RSAKeyParameters(true, modulus, privExp);

//AsymmetricBlockCipher rsaEngine = new RSABlindedEngine();
//Digest digest = new SHA256Digest();

//// set challenge to all zero's for verification
//byte[] challenge = new byte[8];

//// DOES NOT USE FINAL BOOLEAN TO INDICATE RECOVERY
//ISO9796d2Signer signer = new ISO9796d2Signer(rsaEngine, digest, false);

//// sign
//signer.init(true, privParams);
//signer.update(challenge, 0, challenge.length);

//byte[]  sig = signer.generateSignature();

//// verify
//signer.init(false, pubParams);
//signer.update(challenge, 0, challenge.length);

//if (!signer.verifySignature(sig))
//{
//fail("basic verification failed");
//}

//// === LETS ACTUALLY DO SOME RECOVERY, USING INPUT FROM INTERNAL AUTHENTICATE ===

//signer.reset();

//final String args0 = "482E20D1EDDED34359C38F5E7C01203F9D6B2641CDCA5C404D49ADAEDE034C7481D781D043722587761C90468DE69C6585A1E8B9C322F90E1B580EEDAB3F6007D0C366CF92B4DB8B41C8314929DCE2BE889C0129123484D2FD3D12763D2EBFD12AC8E51D7061AFCA1A53DEDEC7B9A617472A78C952CCC72467AE008E5F132994";

//digest = new SHA1Digest();

//signer = new ISO9796d2Signer(rsaEngine, digest, true);

//signer.init(false, pubParams);
//final byte[] signature = Hex.decode(args0);
//signer.updateWithRecoveredMessage(signature);
//signer.update(challenge, 0, challenge.length);

//if (!signer.verifySignature(signature))
//{
//fail("recovered + challenge signature failed");
//}

//// === FINALLY, USING SHA-256 ===

//signer.reset();

//digest = new SHA256Digest();

//// NOTE setting implit to false does not actually do anything for verification !!!
//signer = new ISO9796d2Signer(rsaEngine, digest, false);

//signer.init(true, privParams);
//// generate NONCE of correct length using some inner knowledge
//int nonceLength = modulus.bitLength() / 8 - 1 - digest.getDigestSize() - 2;
//final byte[] nonce = new byte[nonceLength];
//SecureRandom rnd = new SecureRandom();

//rnd.nextBytes(nonce);

//signer.update(nonce, 0, nonce.length);
//signer.update(challenge, 0, challenge.length);
//byte[] sig3 = signer.generateSignature();

//signer.init(false, pubParams);
//signer.updateWithRecoveredMessage(sig3);
//signer.update(challenge, 0, challenge.length);
//if (signer.verifySignature(sig3))
//{
//if (signer.hasFullMessage())
//{
//fail("signer indicates full message");
//}
//byte[] recoverableMessage = signer.getRecoveredMessage();

//// sanity check, normally the nonce is ignored in eMRTD specs (PKI Technical Report)
//if (!Arrays.areEqual(nonce, recoverableMessage))
//{
//fail("Nonce compare with recoverable part of message failed");
//}
//}
//else
//{
//fail("recoverable + nonce failed.");
//}
//}

//var longMessage = mustBytes(base64.StdEncoding.DecodeString(strings.Replace(`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`, "\n\t ", "", -1)))

//var shortPartialSig = mustBytes(base64.StdEncoding.DecodeString(strings.Replace(`
//sb8yyKk6HM1cJhICScMx7QRQunRyrZ1fbI42+T+TBGNjOknvzKuvG7aftGX7
//O/RXuYgk6LTxpXv7+O5noUhMBsR2PKaHveuylU1WSPmDxDCui3kp4frqVH0w
//8Vjpl5CsKqBsmKkbGCKE+smM0xFXhYxV8QUTB2XsWNCQiFiHPgwbpfWzZUNY
//QPWd0A99P64EuUIYz1tkkDnLFmwQ19/PJu1a8orIQInmkVYWSsBsZ/7Ks6lx
//nDHpAvgiRe+OXmJ/yuQy1O3FJYdyoqvjYRPBu3qYeBK9+9L3lExLilImH5aD
//nJznaXcO8QFOxVPbrF2s4GdPIMDonEyAHdrnzoghlg==`, "\n\t ", "", -1)))

//private void doShortPartialTest()
//throws Exception
//{
//byte[]     recovered = Hex.decode("5553482b312b534536383031353332393731392b322b312b362b322b312b313a3a393939393939393939393939393a3a392b323a3a373737373737373737373737373a3a392b2b353a32303133303430353a313133");
//BigInteger exp = new BigInteger("10001", 16);
//BigInteger mod = new BigInteger("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", 16);

//AsymmetricKeyParameter pubKey = new RSAKeyParameters(false, mod, exp);

//ISO9796d2PSSSigner pssSign = new ISO9796d2PSSSigner(new RSAEngine(), new SHA1Digest(), 20);

//pssSign.init(false, pubKey);

//pssSign.updateWithRecoveredMessage(shortPartialSig);

//pssSign.update(longMessage, pssSign.getRecoveredMessage().length, longMessage.length - pssSign.getRecoveredMessage().length);

//if (!pssSign.verifySignature(shortPartialSig))
//{
//fail("short partial PSS sig verification failed.");
//}

//byte[] mm = pssSign.getRecoveredMessage();

//if (!Arrays.areEqual(recovered, mm))
//{
//fail("short partial PSS recovery failed");
//}
//}

//private void doFullMessageTest()
//throws Exception
//{
//BigInteger modulus = new BigInteger(1, Hex.decode("CDCBDABBF93BE8E8294E32B055256BBD0397735189BF75816341BB0D488D05D627991221DF7D59835C76A4BB4808ADEEB779E7794504E956ADC2A661B46904CDC71337DD29DDDD454124EF79CFDD7BC2C21952573CEFBA485CC38C6BD2428809B5A31A898A6B5648CAA4ED678D9743B589134B7187478996300EDBA16271A861"));
//BigInteger pubExp = new BigInteger(1, Hex.decode("010001"));
//BigInteger privExp = new BigInteger(1, Hex.decode("4BA6432AD42C74AA5AFCB6DF60FD57846CBC909489994ABD9C59FE439CC6D23D6DE2F3EA65B8335E796FD7904CA37C248367997257AFBD82B26F1A30525C447A236C65E6ADE43ECAAF7283584B2570FA07B340D9C9380D88EAACFFAEEFE7F472DBC9735C3FF3A3211E8A6BBFD94456B6A33C17A2C4EC18CE6335150548ED126D"));

//RSAKeyParameters pubParams = new RSAKeyParameters(false, modulus, pubExp);
//RSAKeyParameters privParams = new RSAKeyParameters(true, modulus, privExp);

//AsymmetricBlockCipher rsaEngine = new RSABlindedEngine();

//// set challenge to all zero's for verification
//byte[] challenge = new byte[8];

//ISO9796d2PSSSigner pssSign = new ISO9796d2PSSSigner(new RSAEngine(), new SHA256Digest(), 20, true);

//pssSign.init(true, privParams);

//pssSign.update(challenge, 0, challenge.length);

//byte[] sig = pssSign.generateSignature();

//pssSign.init(false, pubParams);

//pssSign.updateWithRecoveredMessage(sig);

//if (!pssSign.verifySignature(sig))
//{
//fail("challenge PSS sig verification failed.");
//}

//byte[] mm = pssSign.getRecoveredMessage();

//if (!Arrays.areEqual(challenge, mm))
//{
//fail("challenge partial PSS recovery failed");
//}
//}

func TestISO9796Encoding(t *testing.T) {
	t.Skip()
	doTest1(t)
	//doTest2(t);
	//doTest3(t);
	//doTest4(t);
	//doTest5(t);
	//doTest6(t);
	//doTest7(t);
	//doTest8(t);
	//doTest9(t);
	//doTest10(t);
	//doTest11(t);
	//doTest12(t);
	//doTest13(t);
	//doShortPartialTest(t);
	//doFullMessageTest(t);
}