/**
 *      @file    matrix.c
 *      @version $Format:%h%d$
 *
 *      Matrix Crypto Initialization and utility layer.
 */
/*
 *      Copyright (c) 2013-2018 Rambus Inc.
 *      Copyright (c) PeerSec Networks, 2002-2011
 *      All Rights Reserved
 *
 *      The latest version of this code is available at http://www.matrixssl.org
 *
 *      This software is open source; you can redistribute it and/or modify
 *      it under the terms of the GNU General Public License as published by
 *      the Free Software Foundation; either version 2 of the License, or
 *      (at your option) any later version.
 *
 *      This General Public License does NOT permit incorporating this software
 *      into proprietary programs.  If you are unable to comply with the GPL, a
 *      commercial license for this software may be purchased from Rambus at
 *      http://www.rambus.com/
 *
 *      This program is distributed in WITHOUT ANY WARRANTY; without even the
 *      implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
 *      See the GNU General Public License for more details.
 *
 *      You should have received a copy of the GNU General Public License
 *      along with this program; if not, write to the Free Software
 *      Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 *      http://www.gnu.org/copyleft/gpl.html
 */
/******************************************************************************/

#include "../cryptoImpl.h"

#ifdef USE_ROT_CRYPTO
# include "../../crypto-rot/rotCommon.h"
#endif

/******************************************************************************/
/**
    Open (initialize) the Crypto module.

    The config param should always be passed as:
        PSCRYPTO_CONFIG
 */
static char g_config[32] = "N";

int32_t psCryptoOpen(const char *config)
{
    uint32_t clen;
    
    if (*g_config == 'Y')
    {
        return PS_SUCCESS; /* Function has been called previously */
    }

    /* 'config' is cryptoconfig + coreconfig */
    clen = Strlen(PSCRYPTO_CONFIG) - Strlen(PSCORE_CONFIG);
    if (Strncmp(PSCRYPTO_CONFIG, config, clen) != 0)
    {
        psErrorStr( "Crypto config mismatch.\n" \
            "Library: " PSCRYPTO_CONFIG \
            "\nCurrent: %s\n", config);
        return PS_FAILURE;
    }
    if (psCoreOpen(config + clen) < 0)
    {
        psError("pscore open failure\n");
        return PS_FAILURE;
    }

#ifdef USE_FLPS_BINDING
    flps_binding();
    /* Check if FIPS Library Open failed. */
    if ((int)CLS_LibStatus(flps_getCLS()) < 0)
    {
        return PS_SELFTEST_FAILED;
    }
#endif /* USE_FLPS_BINDING */
#ifdef USE_ROT_ECC
    /* Pre-allocate domain assets for all ECC curves supported by the
       compile-time configuration. */
# ifdef USE_SECP256R1
    if (psRotLoadCurve(IANA_SECP256R1, NULL) != PS_SUCCESS)
    {
        psError("psRotLoadCurve failed during psCryptoOpen\n");
        return PS_FAILURE;
    }
# endif /* USE_SECP256R1 */
# ifdef USE_SECP384R1
    if (psRotLoadCurve(IANA_SECP384R1, NULL) != PS_SUCCESS)
    {
        psError("psRotLoadCurve failed during psCryptoOpen\n");
        return PS_FAILURE;
    }
# endif /* USE_SECP384R1 */
# ifdef USE_SECP521R1
    if (psRotLoadCurve(IANA_SECP521R1, NULL) != PS_SUCCESS)
    {
        psError("psRotLoadCurve failed during psCryptoOpen\n");
        return PS_FAILURE;
    }
# endif /* USE_SECP521R1 */
#endif /* USE_ROT_ECC */
#ifdef USE_LIBSODIUM_CRYPTO
    if (sodium_init() == -1)
    {
        return PS_FAILURE;
    }
#endif /* USE_LIBSODIUM_CRYPTO */
#ifdef USE_MATRIX_CHACHA20_POLY1305_IETF
    /* Pick chacha20-poly1305 implementation. */
    {
        psChacha20Poly1305Ietf_t tmp;
        (void) psChacha20Poly1305IetfInit(
                &tmp,
                (const unsigned char *)g_config /* at least 32 bytes */);
    }
#endif

    psOpenPrng();
#ifdef USE_CRL
    psCrlOpen();
#endif
    /* Everything successful, store configuration. */
    Strncpy(g_config, PSCRYPTO_CONFIG, sizeof(g_config) - 1);

    return PS_SUCCESS;
}

void psCryptoClose(void)
{
#ifdef USE_ROT_ECC
# ifdef USE_SECP256R1
    psRotFreeCurveAsset(IANA_SECP256R1);
# endif
# ifdef USE_SECP384R1
    psRotFreeCurveAsset(IANA_SECP384R1);
# endif
# ifdef USE_SECP521R1
    psRotFreeCurveAsset(IANA_SECP521R1);
# endif
# ifdef DEBUG_ROT_ASSETS
    psRotFreeAllAssets();
# endif
#endif
    if (*g_config == 'Y')
    {
        *g_config = 'N';
        psClosePrng();
        psCoreClose();
#ifdef USE_FLPS_BINDING
        CL_LibUnInit();
#endif
#ifdef USE_CRL
        psCrlClose();
#endif
    }
}

/******************************************************************************/