/* ====================================================================
 *
 *
 *   BSD LICENSE
 *
 *   Copyright(c) 2021-2025 Intel Corporation.
 *   All rights reserved.
 *
 *   Redistribution and use in source and binary forms, with or without
 *   modification, are permitted provided that the following conditions
 *   are met:
 *
 *     * Redistributions of source code must retain the above copyright
 *       notice, this list of conditions and the following disclaimer.
 *     * Redistributions in binary form must reproduce the above copyright
 *       notice, this list of conditions and the following disclaimer in
 *       the documentation and/or other materials provided with the
 *       distribution.
 *     * Neither the name of Intel Corporation nor the names of its
 *       contributors may be used to endorse or promote products derived
 *       from this software without specific prior written permission.
 *
 *   THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
 *   "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
 *   LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
 *   A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
 *   OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 *   SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
 *   LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
 *   DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
 *   THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 *   (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 *   OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 *
 *
 * ====================================================================
 */

#include <stdio.h>
#include <stdlib.h>
#include <string.h>

#include <openssl/bio.h>
#include <openssl/bn.h>
#include <openssl/rand.h>
#include <openssl/err.h>
#include <openssl/async.h>
#include <openssl/objects.h>
#include <openssl/ec.h>
#include <openssl/engine.h>

#include "tests.h"
#include "../qat_utils.h"

static const char rnd_seed[] =
    "string to make the random number generator think it has entropy";

static int get_nid(int type)
{
    switch (type) {
    case P_CURVE_192:
        return NID_X9_62_prime192v1;
    case P_CURVE_224:
        return NID_secp224r1;
    case P_CURVE_256:
        return NID_X9_62_prime256v1;
    case P_CURVE_384:
        return NID_secp384r1;
    case P_CURVE_521:
        return NID_secp521r1;
    case K_CURVE_163:
        return NID_sect163k1;
    case K_CURVE_233:
        return NID_sect233k1;
    case K_CURVE_283:
        return NID_sect283k1;
    case K_CURVE_409:
        return NID_sect409k1;
    case K_CURVE_571:
        return NID_sect571k1;
    case B_CURVE_163:
        return NID_sect163r2;
    case B_CURVE_233:
        return NID_sect233r1;
    case B_CURVE_283:
        return NID_sect283r1;
    case B_CURVE_409:
        return NID_sect409r1;
    case B_CURVE_571:
        return NID_sect571r1;
    case 0:
        return 0;
    }
    return -1;
}

EVP_PKEY *get_ecdsa_key(const int nid)
{
    EVP_PKEY *ec_key = NULL;
    EVP_PKEY_CTX *kctx = NULL;

    kctx = EVP_PKEY_CTX_new_id(nid, NULL);

    if(kctx == NULL) {
        EVP_PKEY_CTX *pctx = NULL;
        EVP_PKEY *params = NULL;

        /* Create the context for parameter generation */
#ifdef QAT_OPENSSL_3
        pctx = EVP_PKEY_CTX_new_from_name(NULL, "EC", NULL);
#else
        pctx = EVP_PKEY_CTX_new_id(EVP_PKEY_EC, NULL);
#endif
        if ((pctx == NULL)
             || EVP_PKEY_paramgen_init(pctx) <= 0
             || EVP_PKEY_CTX_set_ec_paramgen_curve_nid(pctx,
                nid) <= 0
             || EVP_PKEY_paramgen(pctx, &params) <= 0) {
            fprintf(stderr, "EC params init failure.\n");
            EVP_PKEY_CTX_free(pctx);
            return NULL;
        }
        EVP_PKEY_CTX_free(pctx);

        /* Create the context for the key generation */
        kctx = EVP_PKEY_CTX_new(params, NULL);
        EVP_PKEY_free(params);
    }

    if (kctx == NULL
        || EVP_PKEY_keygen_init(kctx) <= 0
        || EVP_PKEY_keygen(kctx, &ec_key) <= 0) {
        fprintf(stderr, "# FAIL ECDH - EC keygen init failed\n");
        ec_key = NULL;
    }
    EVP_PKEY_CTX_free(kctx);
    return ec_key;
}

/******************************************************************************
 * function:
 *       test_ecdsa (int count,
 *                   int size,
 *                   engine *e,
 *                   int print_output,
 *                   int verify,
 *                   int curveType,
 *                   int ne)
 *
 * @param count [IN] - number of iterations
 * @param size [IN] - the length of input message
 * @param e [IN] - OpenSSL engine pointer
 * @param print_output [IN] - print hex output flag
 * @param verify [IN] - verify flag
 * @param nid [IN] - nid to be used
 * @param curveName [IN] - curve name to be used
 *
 * description:
 *       ECDSA Sign and Verify Test
 *
******************************************************************************/
static int test_ecdsa(int count, int size, ENGINE * e, int print_output,
                      int verify, int curveType, int ne)
{
    BIO *out = NULL;
    int ret = 0, status = 0;
    unsigned char digest[size], wrong_digest[size];
    unsigned char *signature = NULL;
    size_t sig_len = size;
    EVP_PKEY *ecdsa_key = NULL;
    EVP_PKEY_CTX *ecdsa_sign_ctx = NULL;
    EVP_PKEY_CTX *ecdsa_verify_ctx = NULL;
    int nid = 0;
    const char *curveName = NULL;

    nid = get_nid(curveType);
    curveName = ecdh_curve_name(curveType);

    out = BIO_new(BIO_s_file());
    if (out == NULL) {
        WARN("# FAIL: Unable to create BIO\n");
        exit(1);
    }
    BIO_set_fp(out, stdout, BIO_NOCLOSE);

    ecdsa_key = get_ecdsa_key(nid);
    if (ecdsa_key == NULL) {
        WARN("# FAIL: ECDSA Key NULL\n");
        ret = -1;
        goto builtin_err;
    }

    /* fill digest values with some random data */
    if ((RAND_bytes(digest, size) <= 0)
        || (RAND_bytes(wrong_digest, size) <= 0)) {
        fprintf(stderr,"# FAIL: unable to get random data\n");
        ret = -1;
        goto builtin_err;
    }

    if ((signature = OPENSSL_malloc(sig_len)) == NULL) {
        fprintf(stderr,"# FAIL: failed to malloc signature\n");
        ret = -1;
        goto builtin_err;
    }

    ecdsa_sign_ctx = EVP_PKEY_CTX_new(ecdsa_key, NULL);
    if (ecdsa_sign_ctx == NULL
        || EVP_PKEY_sign_init(ecdsa_sign_ctx) <= 0) {
           fprintf(stderr, "ECDSA sign init Failed\n");
           ret = -1;
           goto builtin_err;
    }

    status = EVP_PKEY_sign(ecdsa_sign_ctx, signature, &sig_len, digest, size);
    if (status <= 0) {
        fprintf(stderr, "ECDSA sign failed\n");
        ret = -1;
        goto builtin_err;
    }

    ecdsa_verify_ctx = EVP_PKEY_CTX_new(ecdsa_key, NULL);
    if (ecdsa_verify_ctx == NULL
        || EVP_PKEY_verify_init(ecdsa_verify_ctx) <= 0) {
           fprintf(stderr, "ECDSA verify init failed\n");
           ret = -1;
           goto builtin_err;
    }

    if (0 == ne) {
        status = EVP_PKEY_verify(ecdsa_verify_ctx, signature, sig_len, digest, size);
        if (status <= 0) {
            fprintf(stderr, "ECDSA_verify Failed\n");
            ret = -1;
            goto builtin_err;
        }
    }

    /*  Verify Signature with a wrong digest */
#if CPA_CY_API_VERSION_NUM_MAJOR < 3
    if (1 == ne) {
        if (EVP_PKEY_verify(ecdsa_verify_ctx, signature, sig_len, wrong_digest, size) == -1) {
            fprintf(stderr, "FAIL: Verify for ECDSA\n");
            ret = -1;
            goto builtin_err;
        }
    }
#endif

builtin_err:
    if (signature)
        OPENSSL_free(signature);
    if (ecdsa_sign_ctx)
        EVP_PKEY_CTX_free(ecdsa_sign_ctx);
    if (ecdsa_verify_ctx)
        EVP_PKEY_CTX_free(ecdsa_verify_ctx);
    if (ecdsa_key)
        EVP_PKEY_free(ecdsa_key);

    BIO_free(out);

    if (0 == ret) {
        INFO("# PASS ECDSA Sign/Verify for nid %s\n",curveName);
    } else {
        if (0 == ne)
            INFO("# FAIL ECDSA Sign/Verify for nid %s\n",curveName);
        else
            INFO("# Negative scenario: ECDSA verify Passed for nid %s\n",curveName);
    }
    return ret;
}

/******************************************************************************
* function:
*       tests_run_ecdsa (void *args)
*
* @param args [IN] - the test parameters
*
* description:
*   specify a test case
*
******************************************************************************/
static int run_ecdsa(void *args)
{
    int ret = 1;

    TEST_PARAMS *temp_args = (TEST_PARAMS *)args;
    int count = *(temp_args->count);
    int size = temp_args->size;
    /*
     * If temp_args->explicit_engine is not set then set the
     * engine to NULL to allow fallback to software if
     * that engine under test does not support this operation.
     * This relies on the engine we are testing being
     * set as the default engine.
     */
    ENGINE *e = temp_args->explicit_engine ? temp_args->e : NULL;
    int print = temp_args->print_output;
    int verify = temp_args->verify;
    int curve = temp_args->curve;
    int ne = 0;

#if CPA_CY_API_VERSION_NUM_MAJOR < 3
    ne = temp_args->enable_negative;
#endif

    RAND_seed(rnd_seed, sizeof(rnd_seed));

    if (test_ecdsa(count, size, e, print, verify, curve, ne) < 0)
        ret = 0;

    return ret;
}


/******************************************************************************
* function:
*       tests_run_ecdsa(TEST_PARAMS *args)
*
* @param args [IN] - the test parameters
*
* description:
*   specify a test case
*
******************************************************************************/
void tests_run_ecdsa(TEST_PARAMS *args)
{
    args->additional_args = NULL;

    if (!args->enable_async)
        run_ecdsa(args);
    else
        start_async_job(args, run_ecdsa);
}