/*
* Copyright (c) 2006-2009 Nokia Corporation and/or its subsidiary(-ies).
* All rights reserved.
* This component and the accompanying materials are made available
* under the terms of the License "Eclipse Public License v1.0"
* which accompanies this distribution, and is available
* at the URL "http://www.eclipse.org/legal/epl-v10.html".
*
* Initial Contributors:
* Nokia Corporation - initial contribution.
*
* Contributors:
*
* Description: 
*
*/


#ifndef	__SYMMETRICCIPHERIMPL_H__
#define	__SYMMETRICCIPHERIMPL_H__

/**
@file 
@internalComponent
@released
*/

#include <e32base.h>
#include <e32cmn.h>
#include <cryptospi/cryptospidef.h>
#include <padding.h>
#include "symmetriccipherplugin.h"

/** The maximum block size supported (in bytes) */
const TUint KMaxBlockSizeSupported = 32;

/**
Abstract base class for symmetric cipher plug-ins.
*/
namespace SoftwareCrypto
	{
	using namespace CryptoSpi;
		
	NONSHARABLE_CLASS(CSymmetricCipherImpl) : public CBase, public MSymmetricCipher
		{
	public:
		/**
		Implemented by each cipher subclass to determine whether the
		specified key length is valid for that cipher.
		This is called by ConstructL and SetKeyL
		@param aKeyLength The key length in bytes to verify.
		*/
		virtual TBool IsValidKeyLength(TInt aKeyBytes) const = 0;
		
		/**
		Helper function implemented by concrete cipher sub-class that 
		allows GetCharacteristicsL to return the correct characteristics object.
		@return The implemention uid
		*/
		virtual TUid ImplementationUid() const = 0;
		
		/**
		Gets the strength of the current key, needed to check whether the cipher
		may operate if strong cryptography is not enabled.
		@return The strength of the current key
		*/
		virtual TInt GetKeyStrength() const;
		
				
		// Override MPlugin virtual functions
		void Close();
		TAny* GetExtension(TUid aExtensionId);
		void GetCharacteristicsL(const TCharacteristics*& aPluginCharacteristics);
		// End of MPlugin
		
		// Override MSymmetricCipherBase virtual functions 
		TInt KeySize() const;
						
		/// Destructor
		~CSymmetricCipherImpl();

	protected:
		
		//Constructor
		CSymmetricCipherImpl();
		
		/**
		Second phase of construction. Always call ConstructL in the super-class
		if your override this method.
		
		@param aKey The key to initialise the cipher with.
		*/
		virtual void ConstructL(const CKey& aKey);		
		
		/**
		Extracts the raw symmetric key from a generic key object. The buffer
		is placed on the cleanup stack.
		
		@param aKey The key object
		@return A buffer containing the raw key value
		*/
		HBufC8* ExtractKeyDataLC(const CKey& aKey) const;	
	
		/**
		Zeros a buffer before deleting it to ensure that
		the contents will not be visible to another process if the page
		is re-used.
		@param aBuffer The pointer (possibly null) to the buffer to delete. This
		is set to null after deletion.
		*/
		void SecureDelete(HBufC8*& aBuffer);		
					
		/**
		Extracts the raw key from aKey and sets iKey and iKeyBytes
		The key length is also checked to meet export restrictions and
		to ensure that it is appropriate for the cipher.
		@param aKey The key
		*/
		virtual void DoSetKeyL(const CKey& aKey);
		
			
	protected:
		/// the key, extracted from a CKey object
		HBufC8* iKey;
		
		/// key size in bytes
		TUint iKeyBytes;
		
		};

	NONSHARABLE_CLASS(CSymmetricStreamCipherImpl) : public CSymmetricCipherImpl
		{
	public:
		// Destructor
		~CSymmetricStreamCipherImpl();
		
		// Override MSymmetricCipherBase virtual functions 
		TInt BlockSize() const;
		void SetKeyL(const CKey& aKey);		// override DoSetKeyL instead
		void SetCryptoModeL(TUid aCryptoMode);
		void SetOperationModeL(TUid aOperationMode);
		void SetPaddingModeL(TUid aPaddingMode);
		void SetIvL(const TDesC8& aIv);
		TInt MaxOutputLength(TInt aInputLength) const;
		TInt MaxFinalOutputLength(TInt aInputLength) const;
		// End of MSymmetricCipherBase
		
		// Override MSymmetricCipher virtual functions
		void ProcessL(const TDesC8& aInput, TDes8& aOutput);
		void ProcessFinalL(const TDesC8& aInput, TDes8& aOutput);						
		// End of MSymmetricCipher 
	
	protected:
		// Constructor
		CSymmetricStreamCipherImpl();
		
		// Override CSymmetricCipherImpl virtual functions
		virtual void ConstructL(const CKey& aKey);

		/**	
		Performs an encryption or decryption on supplied data.
		@param aData	On input, data to be transformed; 
						on return, transformed data.
		*/
		virtual void DoProcess(TDes8& aData) = 0;
		};

	NONSHARABLE_CLASS(CSymmetricBlockCipherImpl) : public CSymmetricCipherImpl
		{
	public:	


		/**
		This function is invoked by SetKey and SetCryptoMode
		allowing the cipher sub-class to rebuild it's key schedule. 
		N.B. It is assumed that the key schedule is NOT modified
		by TransformEncrypt or TransformDecrypt
		*/
		virtual void SetKeySchedule() = 0;
		
		// Override MPlugin virtual functions		
		void Reset(); // Always call reset in super-class if you override this
		// End of MPlugin virtual functions

		// Override MSymmetricCipherBase virtual functions 
		TInt BlockSize() const;
		void SetKeyL(const CKey& aKey);  				// override DoSetKeyL instead
		void SetCryptoModeL(TUid aCryptoMode);			// override DoSetCryptoModeL instead
		void SetOperationModeL(TUid aOperationMode);	// override DoSetOperationMode instead		
		void SetPaddingModeL(TUid aPaddingMode);		// override DoSetPaddingModeL instead
		void SetIvL(const TDesC8& aIv);
		
		TInt MaxOutputLength(TInt aInputLength) const;
		TInt MaxFinalOutputLength(TInt aInputLength) const;
		// End of MSymmetricCipherBase

		// Override MSymmetricCipher virtual functions
		void ProcessL(const TDesC8& aInput, TDes8& aOutput);
		void ProcessFinalL(const TDesC8& aInput, TDes8& aOutput);						
		// End of MSymmetricCipher

		/// Destructor
		~CSymmetricBlockCipherImpl();		
	protected:	
		/**
		Constructor
		@param aBlockBytes The block size in bytes
		@param aOperationMode The mode of operation e.g. CBC
		@param aCryptoMode Whether to encrypt or decrypt
		*/
		CSymmetricBlockCipherImpl(
			TUint8 aBlockBytes,
			TUid aOperationMode,
			TUid aCryptoMode,
			TUid aPaddingMode);
			
		// Override CSymmetricCipherImpl virtual functions
		virtual void ConstructL(const CKey& aKey);

		/**
		Validates and sets the crypto mode (iCryptoMode)
		@param aCryptoMode The crypto mode
		*/	
		virtual void DoSetCryptoModeL(TUid aCryptoMode);
		
		/**
		Validates and sets the operation mode (iOperationMode)
		@param aOperationMode The operation mode
		*/
		virtual void DoSetOperationModeL(TUid aOperationMode);
		
		/**
		Validates and sets the padding mode (iPaddingMode & iPadding)
		@param aPadding The desired padding mode
		*/
		virtual void DoSetPaddingModeL(TUid aPadding);
		
		void DoSetIvL(const TDesC8& aIv);

		inline void ModeEncryptStart(TUint8* aBuffer);
		inline void ModeEncryptEnd(TUint8* aBuffer);
		inline void ModeDecryptStart(TUint8* aBuffer);
		inline void ModeDecryptEnd(TUint8* aBuffer);

	private:
	
		/**
		Encrypts a number of blocks of data
		
		@param aBuffer The buffer containing exactly aNumBlocks of data to destructively encrypt
		@param aNumBlocks The number of blocks of data to encrypt
		*/
		virtual void TransformEncrypt(TUint8* aBuffer, TUint aNumBlocks) = 0;
		
		/**
		Decrypts a number of blocks of data
				
		@param aBuffer The buffer containing exactly aNumBlocks of data to destructively decrypt
		@param aNumBlocks The number of blocks of data to decrypt
		*/
		virtual void TransformDecrypt(TUint8* aBuffer, TUint aNumBlocks) = 0;		
			
		/// Pad the last block and encrypt
		void DoProcessFinalEncryptL(const TDesC8& aInput, TDes8& aOutput);
		
		/// Decrypt and unpad the last block
		void DoProcessFinalDecryptL(const TDesC8& aInput, TDes8& aOutput);		
		
		inline void Transform(TUint8* aBuffer, TUint aNumBlocks);

		void ProcessCtrL(const TDesC8& aInput, TDes8& aOutput);
		
	protected:
	
		/// block size in bytes, current largest block size is 16 bytes (AES)
		TUint8 iBlockBytes;	
		/// encryption or decryption
		TUid iCryptoMode;		
		/// The block cipher mode e.g. ECB, CBC
		TUid iOperationMode;
		/// the current padding scheme
		TUid iPaddingMode;
		
		/// the initialisation vector
		RBuf8 iIv;
		
		/// current padding scheme implementation
		CPadding* iPadding;
		/// buffer to store blocks
		RBuf8 iInputStore;
		/// buffer to store input / output of padding
		RBuf8 iPaddingBlock;

		/// The current block of cipher text - for CBC 
		TUint32* iCurrentCipherText;	
		/// A pointer to the current block of cipher text
		TUint8* iCurrentCipherTextPtr;		
		
		/** Used in both CBC and CTR mode. In CBC mode it stores the result of the last transform. In CTR mode 
		it stores the counter.*/
		TUint32* iRegister;	
		/** A pointer to iRegister.*/
		TUint8* iRegisterPtr;			
		
		/** Used in CTR mode to buffer plaintext during encryption.*/
		HBufC8* iBufferedPlaintext;
		/** Pointer to manipulate iBufferedPlaintext.*/
		TPtr8 iBufferedPlaintextPtr;
		
		/** CTR mode behaves like a stream cipher allowing arbitrary sized inputs to the encryption/decryption functions. 
		When handling an input whose length is not a multiple of the blocksize iCtrUnusedKeystream is used to buffer
		the unused portions of keystream for use in the next call. Cleared in Reset().*/
		HBufC8* iCtrUnusedKeystream;
		/** Pointer to manipulate iCtrUnusedKeystream.*/
		TPtr8 iCtrUnusedKeystreamPtr;
		};


	inline void CSymmetricBlockCipherImpl::Transform(TUint8* aBuffer, TUint aNumBlocks)
		{				
		if (iCryptoMode.iUid == KCryptoModeEncrypt)	//if in CTR mode always in crypto mode encrypt
			{				
			TransformEncrypt(aBuffer, aNumBlocks);
			}
		else if (iCryptoMode.iUid == KCryptoModeDecrypt)
			{				
			TransformDecrypt(aBuffer, aNumBlocks);
			}
		else 
			{
			ASSERT(EFalse);
			}
		}
			
	inline void CSymmetricBlockCipherImpl::ModeEncryptStart(TUint8* aBuffer)
		{
		if (iOperationMode.iUid == KOperationModeCBC)
			{			
			for (TInt i = 0; i < iBlockBytes; ++i)
				{
				aBuffer[i] ^= iRegisterPtr[i];
				}					
			}
		else if (iOperationMode.iUid == KOperationModeCTR)
			{
			iBufferedPlaintextPtr.Copy(aBuffer, iBlockBytes);
			Mem::Copy(aBuffer, iRegister, iBlockBytes);				
			}
		}		
	
	inline void CSymmetricBlockCipherImpl::ModeEncryptEnd(TUint8* aBuffer)
		{				
		if (iOperationMode.iUid == KOperationModeCBC)
			{
			for (TInt i = 0; i < iBlockBytes; ++i)
				{
				iRegisterPtr[i] = aBuffer[i]; 
				}													
			}
		else if (iOperationMode.iUid == KOperationModeCTR)
			{
			//XOR the plaintext with the keystream and increment counter
			for (TInt i = 0; i < iBlockBytes; ++i)
				{
				aBuffer[i] ^= iBufferedPlaintextPtr[i]; 
				}
			for (TInt i = iBlockBytes - 1; i >= 0; --i)
				{
				if (++(iRegisterPtr[i]) != 0) break;				
				}
			}										
		}		

	inline void CSymmetricBlockCipherImpl::ModeDecryptStart(TUint8* aBuffer)
		{
		__ASSERT_DEBUG((iOperationMode.iUid != KOperationModeCTR), User::Panic(_L("CSymmetricBlockCipherImpl.h"), 1));
		if (iOperationMode.iUid == KOperationModeCBC)
			{			
			for (TInt i = 0; i < iBlockBytes; ++i)
				{
				iCurrentCipherTextPtr[i] = aBuffer[i];
				}
			}
		}

	inline void CSymmetricBlockCipherImpl::ModeDecryptEnd(TUint8* aBuffer)
		{
		__ASSERT_DEBUG((iOperationMode.iUid != KOperationModeCTR), User::Panic(_L("CSymmetricBlockCipherImpl.h"), 2));		
		if (iOperationMode.iUid == KOperationModeCBC)
			{			
			// xor the output with the previous cipher text
			for (TInt i = 0; i < iBlockBytes; ++i)
				{
				aBuffer[i] ^= iRegisterPtr[i];
				iRegisterPtr[i] = iCurrentCipherTextPtr[i];
				}
			}	
		}		
	}						

#endif	//	__SYMMETRICCIPHERIMPL_H__