// 
// Decompiled by Procyon v0.6.0
// 

package com.google.crypto.tink.hybrid;

import com.google.crypto.tink.Parameters;
import java.util.Objects;
import com.google.crypto.tink.Key;
import com.google.crypto.tink.internal.EllipticCurvesUtil;
import com.google.crypto.tink.AccessesPartialKey;
import com.google.errorprone.annotations.RestrictedApi;
import com.google.crypto.tink.internal.OutputPrefixUtil;
import com.google.crypto.tink.subtle.EllipticCurves;
import java.security.spec.EllipticCurve;
import java.security.GeneralSecurityException;
import com.google.crypto.tink.util.Bytes;
import javax.annotation.Nullable;
import java.security.spec.ECPoint;
import com.google.errorprone.annotations.Immutable;

@Immutable
public final class EciesPublicKey extends HybridPublicKey
{
    private final EciesParameters parameters;
    @Nullable
    private final ECPoint nistPublicPoint;
    @Nullable
    private final Bytes x25519PublicPointBytes;
    private final Bytes outputPrefix;
    @Nullable
    private final Integer idRequirement;
    
    private EciesPublicKey(final EciesParameters parameters, @Nullable final ECPoint nistPublicPoint, @Nullable final Bytes x25519PublicPointBytes, final Bytes outputPrefix, @Nullable final Integer idRequirement) {
        this.parameters = parameters;
        this.nistPublicPoint = nistPublicPoint;
        this.x25519PublicPointBytes = x25519PublicPointBytes;
        this.outputPrefix = outputPrefix;
        this.idRequirement = idRequirement;
    }
    
    private static void validateIdRequirement(final EciesParameters.Variant variant, @Nullable final Integer idRequirement) throws GeneralSecurityException {
        if (!variant.equals(EciesParameters.Variant.NO_PREFIX) && idRequirement == null) {
            throw new GeneralSecurityException("'idRequirement' must be non-null for " + variant + " variant.");
        }
        if (variant.equals(EciesParameters.Variant.NO_PREFIX) && idRequirement != null) {
            throw new GeneralSecurityException("'idRequirement' must be null for NO_PREFIX variant.");
        }
    }
    
    private static EllipticCurve getParameterSpecNistCurve(final EciesParameters.CurveType curveType) {
        if (curveType == EciesParameters.CurveType.NIST_P256) {
            return EllipticCurves.getNistP256Params().getCurve();
        }
        if (curveType == EciesParameters.CurveType.NIST_P384) {
            return EllipticCurves.getNistP384Params().getCurve();
        }
        if (curveType == EciesParameters.CurveType.NIST_P521) {
            return EllipticCurves.getNistP521Params().getCurve();
        }
        throw new IllegalArgumentException("Unable to determine NIST curve type for " + curveType);
    }
    
    private static Bytes createOutputPrefix(final EciesParameters.Variant variant, @Nullable final Integer idRequirement) {
        if (variant == EciesParameters.Variant.NO_PREFIX) {
            return OutputPrefixUtil.EMPTY_PREFIX;
        }
        if (idRequirement == null) {
            throw new IllegalStateException("idRequirement must be non-null for EciesParameters.Variant: " + variant);
        }
        if (variant == EciesParameters.Variant.CRUNCHY) {
            return OutputPrefixUtil.getLegacyOutputPrefix(idRequirement);
        }
        if (variant == EciesParameters.Variant.TINK) {
            return OutputPrefixUtil.getTinkOutputPrefix(idRequirement);
        }
        throw new IllegalStateException("Unknown EciesParameters.Variant: " + variant);
    }
    
    @RestrictedApi(explanation = "Accessing parts of keys can produce unexpected incompatibilities, annotate the function with @AccessesPartialKey", link = "https://developers.google.com/tink/design/access_control#accessing_partial_keys", allowedOnPath = ".*Test\\.java", allowlistAnnotations = { AccessesPartialKey.class })
    public static EciesPublicKey createForCurveX25519(final EciesParameters parameters, final Bytes publicPointBytes, @Nullable final Integer idRequirement) throws GeneralSecurityException {
        if (!parameters.getCurveType().equals(EciesParameters.CurveType.X25519)) {
            throw new GeneralSecurityException("createForCurveX25519 may only be called with parameters for curve X25519");
        }
        validateIdRequirement(parameters.getVariant(), idRequirement);
        if (publicPointBytes.size() != 32) {
            throw new GeneralSecurityException("Encoded public point byte length for X25519 curve must be 32");
        }
        final Bytes prefix = createOutputPrefix(parameters.getVariant(), idRequirement);
        return new EciesPublicKey(parameters, null, publicPointBytes, prefix, idRequirement);
    }
    
    public static EciesPublicKey createForNistCurve(final EciesParameters parameters, final ECPoint publicPoint, @Nullable final Integer idRequirement) throws GeneralSecurityException {
        if (parameters.getCurveType().equals(EciesParameters.CurveType.X25519)) {
            throw new GeneralSecurityException("createForNistCurve may only be called with parameters for NIST curve");
        }
        validateIdRequirement(parameters.getVariant(), idRequirement);
        EllipticCurvesUtil.checkPointOnCurve(publicPoint, getParameterSpecNistCurve(parameters.getCurveType()));
        final Bytes prefix = createOutputPrefix(parameters.getVariant(), idRequirement);
        return new EciesPublicKey(parameters, publicPoint, null, prefix, idRequirement);
    }
    
    @Nullable
    @RestrictedApi(explanation = "Accessing parts of keys can produce unexpected incompatibilities, annotate the function with @AccessesPartialKey", link = "https://developers.google.com/tink/design/access_control#accessing_partial_keys", allowedOnPath = ".*Test\\.java", allowlistAnnotations = { AccessesPartialKey.class })
    public ECPoint getNistCurvePoint() {
        return this.nistPublicPoint;
    }
    
    @Nullable
    @RestrictedApi(explanation = "Accessing parts of keys can produce unexpected incompatibilities, annotate the function with @AccessesPartialKey", link = "https://developers.google.com/tink/design/access_control#accessing_partial_keys", allowedOnPath = ".*Test\\.java", allowlistAnnotations = { AccessesPartialKey.class })
    public Bytes getX25519CurvePointBytes() {
        return this.x25519PublicPointBytes;
    }
    
    @Override
    public Bytes getOutputPrefix() {
        return this.outputPrefix;
    }
    
    @Override
    public EciesParameters getParameters() {
        return this.parameters;
    }
    
    @Nullable
    @Override
    public Integer getIdRequirementOrNull() {
        return this.idRequirement;
    }
    
    @Override
    public boolean equalsKey(final Key o) {
        if (!(o instanceof EciesPublicKey)) {
            return false;
        }
        final EciesPublicKey other = (EciesPublicKey)o;
        return this.parameters.equals(other.parameters) && Objects.equals(this.x25519PublicPointBytes, other.x25519PublicPointBytes) && Objects.equals(this.nistPublicPoint, other.nistPublicPoint) && Objects.equals(this.idRequirement, other.idRequirement);
    }
}