// 
// Decompiled by Procyon v0.6.0
// 

package com.google.crypto.tink.signature;

import java.security.GeneralSecurityException;
import com.google.crypto.tink.internal.OutputPrefixUtil;
import com.google.errorprone.annotations.CanIgnoreReturnValue;
import com.google.crypto.tink.Parameters;
import java.util.Objects;
import com.google.crypto.tink.Key;
import com.google.crypto.tink.AccessesPartialKey;
import com.google.errorprone.annotations.RestrictedApi;
import javax.annotation.Nullable;
import com.google.crypto.tink.util.Bytes;

public class SlhDsaPublicKey extends SignaturePublicKey
{
    private static final int SLH_DSA_SHA2_128S_PUBLIC_KEY_BYTES = 32;
    private final SlhDsaParameters parameters;
    private final Bytes serializedPublicKey;
    private final Bytes outputPrefix;
    @Nullable
    private final Integer idRequirement;
    
    private SlhDsaPublicKey(final SlhDsaParameters parameters, final Bytes serializedPublicKey, final Bytes outputPrefix, @Nullable final Integer idRequirement) {
        this.parameters = parameters;
        this.serializedPublicKey = serializedPublicKey;
        this.outputPrefix = outputPrefix;
        this.idRequirement = idRequirement;
    }
    
    @RestrictedApi(explanation = "Accessing parts of keys can produce unexpected incompatibilities, annotate the function with @AccessesPartialKey", link = "https://developers.google.com/tink/design/access_control#accessing_partial_keys", allowedOnPath = ".*Test\\.java", allowlistAnnotations = { AccessesPartialKey.class })
    public static Builder builder() {
        return new Builder();
    }
    
    @RestrictedApi(explanation = "Accessing parts of keys can produce unexpected incompatibilities, annotate the function with @AccessesPartialKey", link = "https://developers.google.com/tink/design/access_control#accessing_partial_keys", allowedOnPath = ".*Test\\.java", allowlistAnnotations = { AccessesPartialKey.class })
    public Bytes getSerializedPublicKey() {
        return this.serializedPublicKey;
    }
    
    @Override
    public Bytes getOutputPrefix() {
        return this.outputPrefix;
    }
    
    @Override
    public SlhDsaParameters getParameters() {
        return this.parameters;
    }
    
    @Nullable
    @Override
    public Integer getIdRequirementOrNull() {
        return this.idRequirement;
    }
    
    @Override
    public boolean equalsKey(final Key o) {
        if (!(o instanceof SlhDsaPublicKey)) {
            return false;
        }
        final SlhDsaPublicKey that = (SlhDsaPublicKey)o;
        return that.parameters.equals(this.parameters) && that.serializedPublicKey.equals(this.serializedPublicKey) && Objects.equals(that.idRequirement, this.idRequirement);
    }
    
    public static class Builder
    {
        @Nullable
        private SlhDsaParameters parameters;
        @Nullable
        private Bytes serializedPublicKey;
        @Nullable
        private Integer idRequirement;
        
        private Builder() {
            this.parameters = null;
            this.serializedPublicKey = null;
            this.idRequirement = null;
        }
        
        @CanIgnoreReturnValue
        public Builder setParameters(final SlhDsaParameters parameters) {
            this.parameters = parameters;
            return this;
        }
        
        @CanIgnoreReturnValue
        public Builder setSerializedPublicKey(final Bytes serializedPublicKey) {
            this.serializedPublicKey = serializedPublicKey;
            return this;
        }
        
        @CanIgnoreReturnValue
        public Builder setIdRequirement(@Nullable final Integer idRequirement) {
            this.idRequirement = idRequirement;
            return this;
        }
        
        private Bytes getOutputPrefix() {
            if (this.parameters.getVariant() == SlhDsaParameters.Variant.NO_PREFIX) {
                return OutputPrefixUtil.EMPTY_PREFIX;
            }
            if (this.parameters.getVariant() == SlhDsaParameters.Variant.TINK) {
                return OutputPrefixUtil.getTinkOutputPrefix(this.idRequirement);
            }
            throw new IllegalStateException("Unknown SlhDsaParameters.Variant: " + this.parameters.getVariant());
        }
        
        public SlhDsaPublicKey build() throws GeneralSecurityException {
            if (this.parameters == null) {
                throw new GeneralSecurityException("Cannot build without parameters");
            }
            if (this.parameters.getVariant() == SlhDsaParameters.Variant.NO_PREFIX && this.idRequirement != null) {
                throw new GeneralSecurityException("IdRequirement must be null for variant NO_PREFIX");
            }
            if (this.parameters.getVariant() == SlhDsaParameters.Variant.TINK && this.idRequirement == null) {
                throw new GeneralSecurityException("Id requirement missing for parameters' variant TINK");
            }
            if (this.serializedPublicKey == null) {
                throw new GeneralSecurityException("Cannot build without public key bytes");
            }
            if (this.parameters.getHashType() != SlhDsaParameters.HashType.SHA2) {
                throw new GeneralSecurityException("Unknown SLH-DSA hash type option " + this.parameters.getHashType() + "; only SHA2 is currently supported");
            }
            if (this.parameters.getPrivateKeySize() != 64) {
                throw new GeneralSecurityException("Unknown SLH-DSA private key size " + this.parameters.getPrivateKeySize() + "; only security level 128 (private key size 64) is currently supported");
            }
            if (this.parameters.getSignatureType() != SlhDsaParameters.SignatureType.SMALL_SIGNATURE) {
                throw new GeneralSecurityException("Unknown SLH-DSA signature type " + this.parameters.getSignatureType() + "; only \"S\" (SMALL_SIGNATURE) is currently supported");
            }
            if (this.serializedPublicKey.size() != 32) {
                throw new GeneralSecurityException("Incorrect public key size for SLH-DSA-SHA2-128S: should be 32, but was " + this.serializedPublicKey.size());
            }
            final Bytes outputPrefix = this.getOutputPrefix();
            return new SlhDsaPublicKey(this.parameters, this.serializedPublicKey, outputPrefix, this.idRequirement, null);
        }
    }
}