//
//  Copyright (c) 2011, Neil Alexander T.
//  All rights reserved.
// 
//  Redistribution and use in source and binary forms, with
//  or without modification, are permitted provided that the following
//  conditions are met:
// 
//  - Redistributions of source code must retain the above copyright notice,
//    this list of conditions and the following disclaimer.
//  - Redistributions in binary form must reproduce the above copyright notice,
//    this list of conditions and the following disclaimer in the documentation
//    and/or other materials provided with the distribution.
// 
//  THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
//  AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
//  IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
//  ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
//  LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
//  CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
//  SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
//  INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
//  CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
//  ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
//  POSSIBILITY OF SUCH DAMAGE.
//

package com.neilalexander.jnacl;

import com.neilalexander.jnacl.crypto.curve25519xsalsa20poly1305;

import java.util.Formatter;

public class NaCl {
  static final int crypto_secretbox_KEYBYTES = 32;
  static final int crypto_secretbox_NONCEBYTES = 24;
  static final int crypto_secretbox_ZEROBYTES = 32;
  static final int crypto_secretbox_BOXZEROBYTES = 16;
  static final int crypto_secretbox_BEFORENMBYTES = 32;

  private byte[] precomputed = new byte[crypto_secretbox_BEFORENMBYTES];

  public NaCl(byte[] privatekey, byte[] publickey) throws Exception {
    if (privatekey.length < crypto_secretbox_KEYBYTES)
      throw new Exception("Private key too short");

    if (publickey.length < crypto_secretbox_KEYBYTES)
      throw new Exception("Public key too short");

    curve25519xsalsa20poly1305.crypto_box_beforenm(this.precomputed, publickey, privatekey);
  }

  public NaCl(String privatekey, String publickey) throws Exception {
    this(getBinary(privatekey), getBinary(publickey));
  }

  public byte[] encrypt(byte[] input, byte[] nonce) {
    byte[] paddedinput = new byte[input.length + crypto_secretbox_ZEROBYTES];
    byte[] output = new byte[input.length + crypto_secretbox_ZEROBYTES];

    System.arraycopy(input, 0, paddedinput, crypto_secretbox_ZEROBYTES, input.length);
    curve25519xsalsa20poly1305.crypto_box_afternm(output, paddedinput, paddedinput.length, nonce, this.precomputed);

    return output;
  }

  public byte[] encrypt(byte[] input, int inputlength, byte[] nonce) {
    byte[] paddedinput = new byte[inputlength + crypto_secretbox_ZEROBYTES];
    byte[] output = new byte[inputlength + crypto_secretbox_ZEROBYTES];

    System.arraycopy(input, 0, paddedinput, crypto_secretbox_ZEROBYTES, inputlength);
    curve25519xsalsa20poly1305.crypto_box_afternm(output, paddedinput, paddedinput.length, nonce, this.precomputed);

    return output;
  }

  public byte[] decrypt(byte[] input, byte[] nonce) {
    byte[] paddedoutput = new byte[input.length];
    byte[] output = new byte[input.length - crypto_secretbox_ZEROBYTES];

    curve25519xsalsa20poly1305.crypto_box_afternm(paddedoutput, input, input.length, nonce, this.precomputed);
    System.arraycopy(paddedoutput, crypto_secretbox_ZEROBYTES, output, 0, paddedoutput.length - crypto_secretbox_ZEROBYTES);

    return output;
  }

  public byte[] decrypt(byte[] input, int inputlength, byte[] nonce) {
    byte[] paddedoutput = new byte[inputlength];
    byte[] output = new byte[inputlength - crypto_secretbox_ZEROBYTES];

    curve25519xsalsa20poly1305.crypto_box_afternm(paddedoutput, input, inputlength, nonce, this.precomputed);
    System.arraycopy(paddedoutput, crypto_secretbox_ZEROBYTES, output, 0, paddedoutput.length - crypto_secretbox_ZEROBYTES);

    return output;
  }

  public static byte[] getBinary(String s) {
    int len = s.length();
    byte[] data = new byte[len / 2];

    for (int i = 0; i < len; i += 2)
      data[i / 2] = (byte) ((Character.digit(s.charAt(i), 16) << 4) + Character.digit(s.charAt(i + 1), 16));

    return data;
  }

  public static String asHex(byte[] buf) {
    Formatter formatter = new Formatter();
    for (byte b : buf)
      formatter.format("%02x", b);
    return formatter.toString();
  }

  public static String asHex(int[] buf) {
    Formatter formatter = new Formatter();
    for (int b : buf)
      formatter.format("%02x", b);
    return formatter.toString();
  }
}

@@ -3492,32 +3492,37 @@
 1305.crypto_box_
+open_
 afternm(paddedou
@@ -3951,32 +3951,37 @@
 1305.crypto_box_
+open_
 afternm(paddedou

fix insecure decrypt functions