// 
// Decompiled by Procyon v0.6.0
// 

package com.google.crypto.tink.jwt;

import java.security.GeneralSecurityException;
import com.google.errorprone.annotations.CanIgnoreReturnValue;
import java.util.Optional;
import com.google.crypto.tink.Parameters;
import com.google.crypto.tink.Key;
import com.google.crypto.tink.util.SecretBigInteger;
import com.google.crypto.tink.AccessesPartialKey;
import com.google.errorprone.annotations.RestrictedApi;
import com.google.crypto.tink.signature.RsaSsaPssPrivateKey;

public final class JwtRsaSsaPssPrivateKey extends JwtSignaturePrivateKey
{
    private final JwtRsaSsaPssPublicKey publicKey;
    private final RsaSsaPssPrivateKey rsaSsaPssPrivateKey;
    
    private JwtRsaSsaPssPrivateKey(final JwtRsaSsaPssPublicKey publicKey, final RsaSsaPssPrivateKey rsaSsaPssPrivateKey) {
        this.publicKey = publicKey;
        this.rsaSsaPssPrivateKey = rsaSsaPssPrivateKey;
    }
    
    @RestrictedApi(explanation = "Accessing parts of keys can produce unexpected incompatibilities, annotate the function with @AccessesPartialKey", link = "https://developers.google.com/tink/design/access_control#accessing_partial_keys", allowedOnPath = ".*Test\\.java", allowlistAnnotations = { AccessesPartialKey.class })
    public static Builder builder() {
        return new Builder();
    }
    
    @Override
    public JwtRsaSsaPssParameters getParameters() {
        return this.publicKey.getParameters();
    }
    
    @Override
    public JwtRsaSsaPssPublicKey getPublicKey() {
        return this.publicKey;
    }
    
    @RestrictedApi(explanation = "Accessing parts of keys can produce unexpected incompatibilities, annotate the function with @AccessesPartialKey", link = "https://developers.google.com/tink/design/access_control#accessing_partial_keys", allowedOnPath = ".*Test\\.java", allowlistAnnotations = { AccessesPartialKey.class })
    @AccessesPartialKey
    public SecretBigInteger getPrimeP() {
        return this.rsaSsaPssPrivateKey.getPrimeP();
    }
    
    @RestrictedApi(explanation = "Accessing parts of keys can produce unexpected incompatibilities, annotate the function with @AccessesPartialKey", link = "https://developers.google.com/tink/design/access_control#accessing_partial_keys", allowedOnPath = ".*Test\\.java", allowlistAnnotations = { AccessesPartialKey.class })
    @AccessesPartialKey
    public SecretBigInteger getPrimeQ() {
        return this.rsaSsaPssPrivateKey.getPrimeQ();
    }
    
    @AccessesPartialKey
    public SecretBigInteger getPrivateExponent() {
        return this.rsaSsaPssPrivateKey.getPrivateExponent();
    }
    
    @AccessesPartialKey
    public SecretBigInteger getPrimeExponentP() {
        return this.rsaSsaPssPrivateKey.getPrimeExponentP();
    }
    
    @AccessesPartialKey
    public SecretBigInteger getPrimeExponentQ() {
        return this.rsaSsaPssPrivateKey.getPrimeExponentQ();
    }
    
    @AccessesPartialKey
    public SecretBigInteger getCrtCoefficient() {
        return this.rsaSsaPssPrivateKey.getCrtCoefficient();
    }
    
    @Override
    public boolean equalsKey(final Key o) {
        if (!(o instanceof JwtRsaSsaPssPrivateKey)) {
            return false;
        }
        final JwtRsaSsaPssPrivateKey that = (JwtRsaSsaPssPrivateKey)o;
        return that.publicKey.equalsKey(this.publicKey) && that.rsaSsaPssPrivateKey.equalsKey(this.rsaSsaPssPrivateKey);
    }
    
    @RestrictedApi(explanation = "Accessing parts of keys can produce unexpected incompatibilities, annotate the function with @AccessesPartialKey", link = "https://developers.google.com/tink/design/access_control#accessing_partial_keys", allowedOnPath = ".*Test\\.java", allowlistAnnotations = { AccessesPartialKey.class })
    RsaSsaPssPrivateKey getRsaSsaPssPrivateKey() {
        return this.rsaSsaPssPrivateKey;
    }
    
    public static class Builder
    {
        private Optional<JwtRsaSsaPssPublicKey> publicKey;
        private Optional<SecretBigInteger> d;
        private Optional<SecretBigInteger> p;
        private Optional<SecretBigInteger> q;
        private Optional<SecretBigInteger> dP;
        private Optional<SecretBigInteger> dQ;
        private Optional<SecretBigInteger> qInv;
        
        private Builder() {
            this.publicKey = Optional.empty();
            this.d = Optional.empty();
            this.p = Optional.empty();
            this.q = Optional.empty();
            this.dP = Optional.empty();
            this.dQ = Optional.empty();
            this.qInv = Optional.empty();
        }
        
        @CanIgnoreReturnValue
        public Builder setPublicKey(final JwtRsaSsaPssPublicKey publicKey) {
            this.publicKey = Optional.of(publicKey);
            return this;
        }
        
        @CanIgnoreReturnValue
        public Builder setPrimes(final SecretBigInteger p, final SecretBigInteger q) {
            this.p = Optional.of(p);
            this.q = Optional.of(q);
            return this;
        }
        
        @CanIgnoreReturnValue
        public Builder setPrivateExponent(final SecretBigInteger d) {
            this.d = Optional.of(d);
            return this;
        }
        
        @CanIgnoreReturnValue
        public Builder setPrimeExponents(final SecretBigInteger dP, final SecretBigInteger dQ) {
            this.dP = Optional.of(dP);
            this.dQ = Optional.of(dQ);
            return this;
        }
        
        @CanIgnoreReturnValue
        public Builder setCrtCoefficient(final SecretBigInteger qInv) {
            this.qInv = Optional.of(qInv);
            return this;
        }
        
        @AccessesPartialKey
        public JwtRsaSsaPssPrivateKey build() throws GeneralSecurityException {
            if (!this.publicKey.isPresent()) {
                throw new GeneralSecurityException("Cannot build without a RSA SSA PSS public key");
            }
            if (!this.p.isPresent() || !this.q.isPresent()) {
                throw new GeneralSecurityException("Cannot build without prime factors");
            }
            if (!this.d.isPresent()) {
                throw new GeneralSecurityException("Cannot build without private exponent");
            }
            if (!this.dP.isPresent() || !this.dQ.isPresent()) {
                throw new GeneralSecurityException("Cannot build without prime exponents");
            }
            if (!this.qInv.isPresent()) {
                throw new GeneralSecurityException("Cannot build without CRT coefficient");
            }
            final RsaSsaPssPrivateKey rsaSsaPssPrivateKey = RsaSsaPssPrivateKey.builder().setPublicKey(this.publicKey.get().getRsaSsaPssPublicKey()).setPrimes(this.p.get(), this.q.get()).setPrivateExponent(this.d.get()).setPrimeExponents(this.dP.get(), this.dQ.get()).setCrtCoefficient(this.qInv.get()).build();
            return new JwtRsaSsaPssPrivateKey(this.publicKey.get(), rsaSsaPssPrivateKey, null);
        }
    }
}