/*
 * SPDX-License-Identifier: LicenseRef-CSSL-1.0
 */

#ifndef SECU_DEFS_H_
#define SECU_DEFS_H_

#include <stdbool.h>
#include <stdint.h>

#define SECU_DIRECTION_UPLINK   0
#define SECU_DIRECTION_DOWNLINK 1

/* stream_security_context_t is an opaque structure.
 * It is different for each integrity and ciphering algorithm in use.
 * Defined as a struct to have compilation time type checking
 * (the "context" field is never actually used).
 */
typedef struct {
  void *context;
} stream_security_context_t;

/* stream_security_container_t contains the current configuration
 * of integrity and ciphering. It is used by PDCP and NAS.
 */
typedef struct {
  int integrity_algorithm;
  int ciphering_algorithm;
  stream_security_context_t *ciphering_context;
  stream_security_context_t *integrity_context;
} stream_security_container_t;

typedef struct {
  stream_security_context_t *context;
  uint32_t count;
  uint8_t  bearer;
  uint8_t  direction;
  uint8_t  *message;
  /* length in bits */
  uint32_t blength;
} nas_stream_cipher_t;

stream_security_context_t *stream_integrity_init(int integrity_algorithm, const uint8_t *integrity_key);
stream_security_context_t *stream_ciphering_init(int ciphering_algorithm, const uint8_t *ciphering_key);
void stream_integrity_free(int integrity_algorithm, stream_security_context_t *integrity_context);
void stream_ciphering_free(int ciphering_algorithm, stream_security_context_t *ciphering_context);

stream_security_container_t *stream_security_container_init(int ciphering_algorithm,
                                                            int integrity_algorithm,
                                                            const uint8_t *ciphering_key,
                                                            const uint8_t *integrity_key);
void stream_security_container_delete(stream_security_container_t *container);

/*!
 * @brief Encrypt/Decrypt a block of data based on the provided algorithm
 * @param[in] algorithm Algorithm used to encrypt the data
 *      Possible values are:
 *      - EIA0_ALG_ID for NULL encryption
 *      - EIA1_128_ALG_ID for SNOW-3G encryption (not avalaible right now)
 *      - EIA2_128_ALG_ID for 128 bits AES LTE encryption
 * @param[in] stream_cipher All parameters used to compute the encrypted block of data
 * @param[out] out The encrypted block of data
 */

typedef enum {
  EIA0_ALG_ID = 0x00,
  EIA1_128_ALG_ID = 0x01,
  EIA2_128_ALG_ID = 0x02,
  END_EIA0_ALG_ID,
} eia_alg_id_e;

void stream_compute_integrity(eia_alg_id_e alg, nas_stream_cipher_t const *stream_cipher, uint8_t out[4]);

typedef enum {
  EEA0_ALG_ID = 0x00,
  EEA1_128_ALG_ID = 0x01,
  EEA2_128_ALG_ID = 0x02,

  END_EEA_ALG_ID
} eea_alg_id_e;

void stream_compute_encrypt(eea_alg_id_e alg, nas_stream_cipher_t const *stream_cipher, uint8_t *out);

#endif /* SECU_DEFS_H_ */
