/* Copyright 2017 Cedric Mesnil <cslashm@gmail.com>, Ledger SAS
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

#include "os.h"
#include "cx.h"
#include "gpg_types.h"
#include "gpg_api.h"
#include "gpg_vars.h"

int gpg_apdu_get_challenge() {
   unsigned int olen,hlen;

  if ((G_gpg_vstate.io_p1&0x80) == 0x80) {
    olen =  G_gpg_vstate.io_p2;
  } else {
    olen = G_gpg_vstate.io_le;
  }
  if (olen > GPG_EXT_CHALLENGE_LENTH) {
    THROW(SW_WRONG_LENGTH);
    return SW_WRONG_LENGTH;
  }
  
  if ((G_gpg_vstate.io_p1&0x82) == 0x82) {
    unsigned int   path[2];
    unsigned char  chain[32];
    unsigned char  Sr[32];

    os_memset(chain, 0,  32);
    path[0] = 0x80475047;
    path[1] = 0x0F0F0F0F;
    os_perso_derive_node_bip32(CX_CURVE_SECP256K1, path, 2 , Sr, chain);
    chain[0] = 'r'; chain[1]='n'; chain[2] = 'd';

    cx_sha256_init(&G_gpg_vstate.work.md.sha256);    
    cx_hash((cx_hash_t *)&G_gpg_vstate.work.md.sha256, 0, Sr, 32, NULL);
    cx_hash((cx_hash_t *)&G_gpg_vstate.work.md.sha256, 0, chain, 3, NULL);
    hlen=cx_hash((cx_hash_t *)&G_gpg_vstate.work.md.sha256, 
                 CX_LAST, G_gpg_vstate.work.io_buffer, G_gpg_vstate.io_length, 
                 G_gpg_vstate.work.io_buffer);
    
    cx_sha3_xof_init(&G_gpg_vstate.work.md.sha3, 256, olen);
    cx_hash((cx_hash_t *)&G_gpg_vstate.work.md.sha3, 
            CX_LAST, G_gpg_vstate.work.io_buffer, hlen, 
            G_gpg_vstate.work.io_buffer);
  } else {
    cx_rng(G_gpg_vstate.work.io_buffer, olen);
  }

  if ((G_gpg_vstate.io_p1&0x81) == 0x81) {
    cx_math_next_prime(G_gpg_vstate.work.io_buffer,olen);
  }  
  gpg_io_discard(0);
  gpg_io_inserted(olen);
  return SW_OK;
}