/* jni_fips.c
 *
 * Copyright (C) 2006-2025 wolfSSL Inc.
 *
 * This file is part of wolfSSL.
 *
 * wolfSSL is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 *
 * wolfSSL is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1335, USA
 */

#ifdef WOLFSSL_USER_SETTINGS
    #include <wolfssl/wolfcrypt/settings.h>
#elif !defined(__ANDROID__)
    #include <wolfssl/options.h>
#endif

#ifdef HAVE_FIPS
    #include <wolfssl/wolfcrypt/error-crypt.h>
    #include <wolfssl/wolfcrypt/fips_test.h>
    #include <wolfssl/wolfcrypt/aes.h>
    #include <wolfssl/wolfcrypt/des3.h>
    #include <wolfssl/wolfcrypt/sha.h>
    #include <wolfssl/wolfcrypt/sha256.h>
    #include <wolfssl/wolfcrypt/sha512.h>
    #include <wolfssl/wolfcrypt/hmac.h>
    #include <wolfssl/wolfcrypt/random.h>
    #include <wolfssl/wolfcrypt/rsa.h>
    #include <wolfssl/wolfcrypt/dh.h>
    #include <wolfssl/wolfcrypt/ecc.h>
#endif

#include <stdio.h>

#include <com_wolfssl_wolfcrypt_WolfCrypt.h>
#include <com_wolfssl_wolfcrypt_Fips.h>
#include <wolfcrypt_jni_NativeStruct.h>
#include <wolfcrypt_jni_error.h>

/* #define WOLFCRYPT_JNI_DEBUG_ON */
#include <wolfcrypt_jni_debug.h>

#ifdef HAVE_FIPS
extern JavaVM* g_vm;
static jobject g_errCb;
#endif

void NativeErrorCallback(const int ok, const int err, const char * const hash)
{
#ifdef HAVE_FIPS
    JNIEnv* env;
    jclass class;
    jmethodID method;
    jint ret;

    ret = (int) ((*g_vm)->GetEnv(g_vm, (void**) &env, JNI_VERSION_1_6));
    if (ret == JNI_EDETACHED) {
#ifdef __ANDROID__
        ret = (*g_vm)->AttachCurrentThread(g_vm, &env, NULL);
#else
        ret = (*g_vm)->AttachCurrentThread(g_vm, (void**) &env, NULL);
#endif
        if (ret) {
            printf("Failed to attach JNIEnv to thread\n");
            return;
        }
    }
    else if (ret != JNI_OK) {
        printf("Unable to get JNIEnv from JavaVM\n");
        return;
    }

    if (JNIGlobalRefType != (*env)->GetObjectRefType(env, g_errCb))
        throwWolfCryptException(env, "Invalid errorCallback reference");
    else if (!(class = (*env)->GetObjectClass(env, g_errCb)))
        throwWolfCryptException(env, "Failed to get callback class");
    else if (!(method = (*env)->GetMethodID(env, class, "errorCallback",
        "(IILjava/lang/String;)V")))
        throwWolfCryptException(env, "Failed to get method ID");
    else
        (*env)->CallVoidMethod(env, g_errCb, method, ok, err,
            (*env)->NewStringUTF(env, hash));
#endif
}

JNIEXPORT void JNICALL Java_com_wolfssl_wolfcrypt_Fips_wolfCrypt_1SetCb_1fips(
    JNIEnv* env, jclass class, jobject callback)
{
#ifdef HAVE_FIPS
    if ((g_errCb = (*env)->NewGlobalRef(env, callback)))
        wolfCrypt_SetCb_fips(NativeErrorCallback);
    else
        throwWolfCryptException(env, "Failed to store global error callback");
#endif
}

JNIEXPORT jstring JNICALL Java_com_wolfssl_wolfcrypt_Fips_wolfCrypt_1GetCoreHash_1fips(
    JNIEnv* env, jclass class)
{
    #ifdef HAVE_FIPS
        return (*env)->NewStringUTF(env, wolfCrypt_GetCoreHash_fips());
    #else
        return NULL;
    #endif
}

JNIEXPORT jboolean JNICALL Java_com_wolfssl_wolfcrypt_Fips_enabled
  (JNIEnv* env, jclass class)
{
    #ifdef HAVE_FIPS
        return JNI_TRUE;
    #else
        return JNI_FALSE;
    #endif
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_setPrivateKeyReadEnable
  (JNIEnv* jenv, jclass jcl, jint enable, jint keyType)
{
    int ret = 0;
#if defined(HAVE_FIPS) && defined(HAVE_FIPS_VERSION) && (HAVE_FIPS_VERSION >= 5)
    enum wc_KeyType type;

    switch (keyType) {
        case 0:
            type = WC_KEYTYPE_ALL;
            break;
        default:
            printf("Invalid key type enum");
            ret = -1;
            break;
    }
    if (ret == 0) {
        ret = wolfCrypt_SetPrivateKeyReadEnable_fips(enable, type);
    }
#endif
    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_getPrivateKeyReadEnable
  (JNIEnv* jenv, jclass jcl, jint keyType)
{
    int ret = 0;
#if defined(HAVE_FIPS) && defined(HAVE_FIPS_VERSION) && (HAVE_FIPS_VERSION >= 5)
    enum wc_KeyType type;

    switch (keyType) {
        case 0:
            type = WC_KEYTYPE_ALL;
            break;
        default:
            printf("Invalid key type enum");
            ret = -1;
            break;
    }
    if (ret == 0) {
        ret = wolfCrypt_GetPrivateKeyReadEnable_fips(type);
    }
#endif
    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1runAllCast_1fips
  (JNIEnv* jenv, jclass jcl)
{
#if defined (WC_RNG_SEED_CB) || (defined(HAVE_FIPS) && \
    defined(HAVE_FIPS_VERSION) && (HAVE_FIPS_VERSION == 5))
    int ret = 0;
#endif
    int failCount = 0;

    (void)jenv;
    (void)jcl;

#ifdef WC_RNG_SEED_CB
    ret = wc_SetSeed_Cb(wc_GenerateSeed);
    if (ret != 0) {
        printf("wc_SetSeed_Cb() failed");
    }
#endif

#if defined(HAVE_FIPS) && defined(HAVE_FIPS_VERSION) && \
    (HAVE_FIPS_VERSION >= 6)

    failCount = wc_RunAllCast_fips();
    if (failCount != 0) {
        printf("FIPS CASTs failed to run");
    }

#elif defined(HAVE_FIPS) && defined(HAVE_FIPS_VERSION) && \
    (HAVE_FIPS_VERSION == 5)

    /* run FIPS 140-3 conditional algorithm self tests early to prevent
     * multi threaded issues later on */
#if !defined(NO_AES) && !defined(NO_AES_CBC)
    if (ret == 0) {
        ret = wc_RunCast_fips(FIPS_CAST_AES_CBC);
        if (ret != 0) {
            printf("AES-CBC CAST failed");
            failCount++;
        }
    }
#endif
#ifdef HAVE_AESGCM
    if (ret == 0) {
        ret = wc_RunCast_fips(FIPS_CAST_AES_GCM);
        if (ret != 0) {
            printf("AES-GCM CAST failed");
            failCount++;
        }
    }
#endif
#ifndef NO_SHA
    if (ret == 0) {
        ret = wc_RunCast_fips(FIPS_CAST_HMAC_SHA1);
        if (ret != 0) {
            printf("HMAC-SHA1 CAST failed");
            failCount++;
        }
    }
#endif
    /* the only non-optional CAST */
    if (ret == 0) {
        ret = wc_RunCast_fips(FIPS_CAST_HMAC_SHA2_256);
        if (ret != 0) {
            printf("HMAC-SHA2-256 CAST failed");
            failCount++;
        }
    }
#ifdef WOLFSSL_SHA512
    if (ret == 0) {
        ret = wc_RunCast_fips(FIPS_CAST_HMAC_SHA2_512);
        if (ret != 0) {
            printf("HMAC-SHA2-512 CAST failed");
            failCount++;
        }
    }
#endif
#ifdef WOLFSSL_SHA3
    if (ret == 0) {
        ret = wc_RunCast_fips(FIPS_CAST_HMAC_SHA3_256);
        if (ret != 0) {
            printf("HMAC-SHA3-256 CAST failed");
            failCount++;
        }
    }
#endif
#ifdef HAVE_HASHDRBG
    if (ret == 0) {
        ret = wc_RunCast_fips(FIPS_CAST_DRBG);
        if (ret != 0) {
            printf("Hash_DRBG CAST failed");
            failCount++;
        }
    }
#endif
#ifndef NO_RSA
    if (ret == 0) {
        ret = wc_RunCast_fips(FIPS_CAST_RSA_SIGN_PKCS1v15);
        if (ret != 0) {
            printf("RSA sign CAST failed");
            failCount++;
        }
    }
#endif
#if defined(HAVE_ECC_CDH) && defined(HAVE_ECC_CDH_CAST)
    if (ret == 0) {
        ret = wc_RunCast_fips(FIPS_CAST_ECC_CDH);
        if (ret != 0) {
            printf("ECC CDH CAST failed");
            failCount++;
        }
    }
#endif
#ifdef HAVE_ECC_DHE
    if (ret == 0) {
        ret = wc_RunCast_fips(FIPS_CAST_ECC_PRIMITIVE_Z);
        if (ret != 0) {
            printf("ECC Primitive Z CAST failed");
            failCount++;
        }
    }
#endif
#ifdef HAVE_ECC
    if (ret == 0) {
        ret = wc_RunCast_fips(FIPS_CAST_ECDSA);
        if (ret != 0) {
            printf("ECDSA CAST failed");
            failCount++;
        }
    }
#endif
#ifndef NO_DH
    if (ret == 0) {
        ret = wc_RunCast_fips(FIPS_CAST_DH_PRIMITIVE_Z);
        if (ret != 0) {
            printf("DH Primitive Z CAST failed");
            failCount++;
        }
    }
#endif
#ifdef WOLFSSL_HAVE_PRF
    if (ret == 0) {
        ret = wc_RunCast_fips(FIPS_CAST_KDF_TLS12);
        if (ret != 0) {
            printf("KDF TLSv1.2 CAST failed");
            failCount++;
        }
    }
#endif
#if defined(WOLFSSL_HAVE_PRF) && defined(WOLFSSL_TLS13)
    if (ret == 0) {
        ret = wc_RunCast_fips(FIPS_CAST_KDF_TLS13);
        if (ret != 0) {
            printf("KDF TLSv1.3 CAST failed");
            failCount++;
        }
    }
#endif
#ifdef WOLFSSL_WOLFSSH
    if (ret == 0) {
        ret = wc_RunCast_fips(FIPS_CAST_KDF_SSH);
        if (ret != 0) {
            printf("KDF SSHv2.0 CAST failed");
            failCount++;
        }
    }
#endif
#endif /* HAVE_FIPS && HAVE_FIPS_VERSION == 5 */

    return failCount;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_getFipsVersion
(JNIEnv* env, jclass this)
{
    jint result = 0;
    #if defined(HAVE_FIPS)
        #ifdef HAVE_FIPS_VERSION
            result = HAVE_FIPS_VERSION;
        #else
            result = 1;
        #endif
    #endif
    return result;
}

/*
 * ### FIPS Approved Security Methods ##########################################
 */

/*
 * wolfCrypt FIPS API - Symmetric encrypt/decrypt Service
 */

/* AES */

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1AesSetKey_1fips__Lcom_wolfssl_wolfcrypt_Aes_2Ljava_nio_ByteBuffer_2JLjava_nio_ByteBuffer_2I(
    JNIEnv* env, jclass class, jobject aes_object, jobject key_buffer,
    jlong size, jobject iv_buffer, jint dir)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_AES)

    Aes* aes  = NULL;
    byte* key = NULL;
    byte* iv  = NULL;

    aes = (Aes*) getNativeStruct(env, aes_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    key = getDirectBufferAddress(env, key_buffer);
    iv  = getDirectBufferAddress(env, iv_buffer);

    if (!aes || !key)
        return BAD_FUNC_ARG;

#if FIPS_VERSION_GT(5,0)
    ret = wc_AesSetKey_fips(aes, key, (word32)size, iv, dir);
#else
    ret = AesSetKey_fips(aes, key, (word32)size, iv, dir);
#endif

    LogStr("AesSetKey_fips(aes=%p, key, iv, %s) = %d\n", aes,
        dir ? "dec" : "enc", ret);
    LogStr("key[%u]: [%p]\n", (word32)size, key);
    LogHex(key, 0, size);
    LogStr("iv[%u]: [%p]\n", (word32)AES_BLOCK_SIZE, iv);
    LogHex(iv, 0, AES_BLOCK_SIZE);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1AesSetKey_1fips__Lcom_wolfssl_wolfcrypt_Aes_2_3BJ_3BI(
    JNIEnv* env, jclass class, jobject aes_object, jbyteArray key_buffer,
    jlong size, jbyteArray iv_buffer, jint dir)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_AES)

    Aes* aes  = NULL;
    byte* key = NULL;
    byte* iv  = NULL;

    aes = (Aes*) getNativeStruct(env, aes_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    key = getByteArray(env, key_buffer);
    iv  = getByteArray(env, iv_buffer);

    if (aes == NULL || key == NULL) {
        ret = BAD_FUNC_ARG;
    }
    else {
    #if FIPS_VERSION_GT(5,0)
        ret = wc_AesSetKey_fips(aes, key, (word32)size, iv, dir);
    #else
        ret = AesSetKey_fips(aes, key, (word32)size, iv, dir);
    #endif
    }

    LogStr("AesSetKey_fips(aes=%p, key, iv, %s) = %d\n", aes,
        dir ? "dec" : "enc", ret);
    LogStr("key[%u]: [%p]\n", (word32)size, key);
    LogHex(key, 0, size);
    LogStr("iv[%u]: [%p]\n", (word32)AES_BLOCK_SIZE, iv);
    LogHex(iv, 0, AES_BLOCK_SIZE);

    releaseByteArray(env, key_buffer, key, 1);
    releaseByteArray(env,  iv_buffer,  iv, 1);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1AesGcmSetExtIV_1fips__Lcom_wolfssl_wolfcrypt_Aes_2Ljava_nio_ByteBuffer_2J
  (JNIEnv* env, jclass class, jobject aes_object, jobject iv_buffer, jlong size)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && (defined(HAVE_FIPS_VERSION) && \
    (HAVE_FIPS_VERSION >= 2)) && !defined(NO_AES) && defined(HAVE_AESGCM)

    Aes* aes = NULL;
    byte* iv = NULL;

    aes = (Aes*) getNativeStruct(env, aes_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    iv = getDirectBufferAddress(env, iv_buffer);

    if (aes == NULL || iv == NULL || size < 0) {
        return BAD_FUNC_ARG;
    }

    #if FIPS_VERSION_GT(5,0)
        ret = wc_AesGcmSetExtIV_fips(aes, iv, (word32)size);
    #else
        ret = AesGcmSetExtIV_fips(aes, iv, (word32)size);
    #endif

    LogStr("AesGcmSetExtIV_fips(aes=%p, iv) = %d\n", aes, ret);
    LogStr("iv[%u]: [%p]\n", (word32)size, iv);
    LogHex(iv, 0, size);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1AesGcmSetExtIV_1fips__Lcom_wolfssl_wolfcrypt_Aes_2_3BJ
  (JNIEnv* env, jclass class, jobject aes_object, jbyteArray iv_buffer, jlong size)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && (defined(HAVE_FIPS_VERSION) && \
    (HAVE_FIPS_VERSION >= 1)) && !defined(NO_AES) && defined(HAVE_AESGCM)

    Aes* aes = NULL;
    byte* iv = NULL;

    aes = (Aes*) getNativeStruct(env, aes_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    iv = getByteArray(env, iv_buffer);

    if (aes == NULL || iv == NULL || size < 0) {
        return BAD_FUNC_ARG;
    }

    #if FIPS_VERSION_GT(5,0)
        ret = wc_AesGcmSetExtIV_fips(aes, iv, (word32)size);
    #else
        ret = AesGcmSetExtIV_fips(aes, iv, (word32)size);
    #endif

    LogStr("AesGcmSetExtIV_fips(aes=%p, iv) = %d\n", aes, ret);
    LogStr("iv[%u]: [%p]\n", (word32)size, iv);
    LogHex(iv, 0, size);

    releaseByteArray(env, iv_buffer, iv, 1);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1AesSetIV_1fips__Lcom_wolfssl_wolfcrypt_Aes_2Ljava_nio_ByteBuffer_2(
    JNIEnv* env, jclass class, jobject aes_object, jobject iv_buffer)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_AES)

    Aes* aes = NULL;
    byte* iv = NULL;

    aes = (Aes*) getNativeStruct(env, aes_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    iv = getDirectBufferAddress(env, iv_buffer);

    if (!aes || !iv)
        return BAD_FUNC_ARG;

    #if FIPS_VERSION_GT(5,0)
        ret = wc_AesSetIV_fips(aes, iv);
    #else
        ret = AesSetIV_fips(aes, iv);
    #endif

    LogStr("AesSetIV_fips(aes=%p, iv) = %d\n", aes, ret);
    LogStr("iv[%u]: [%p]\n", (word32)AES_BLOCK_SIZE, iv);
    LogHex(iv, 0, AES_BLOCK_SIZE);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1AesSetIV_1fips__Lcom_wolfssl_wolfcrypt_Aes_2_3B(
    JNIEnv* env, jclass class, jobject aes_object, jbyteArray iv_buffer)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_AES)

    Aes* aes = NULL;
    byte* iv = NULL;

    aes = (Aes*) getNativeStruct(env, aes_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    iv = getByteArray(env, iv_buffer);

    if (aes == NULL || iv == NULL) {
        ret = BAD_FUNC_ARG;
    }
    else {
    #if FIPS_VERSION_GT(5,0)
        ret = wc_AesSetIV_fips(aes, iv);
    #else
        ret = AesSetIV_fips(aes, iv);
    #endif
    }

    LogStr("AesSetIV_fips(aes=%p, iv) = %d\n", aes, ret);
    LogStr("iv[%u]: [%p]\n", (word32)AES_BLOCK_SIZE, iv);
    LogHex(iv, 0, AES_BLOCK_SIZE);

    releaseByteArray(env, iv_buffer, iv, 1);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1AesCbcEncrypt_1fips__Lcom_wolfssl_wolfcrypt_Aes_2Ljava_nio_ByteBuffer_2Ljava_nio_ByteBuffer_2J(
    JNIEnv* env, jclass class, jobject aes_object, jobject out_buffer,
    jobject in_buffer, jlong size)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_AES)

    Aes*  aes = NULL;
    byte* out = NULL;
    byte* in  = NULL;

    aes = (Aes*) getNativeStruct(env, aes_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    out = getDirectBufferAddress(env, out_buffer);
    in  = getDirectBufferAddress(env, in_buffer);

    if (!aes || !out || !in)
        return BAD_FUNC_ARG;

    #if FIPS_VERSION_GT(5,0)
        ret = wc_AesCbcEncrypt_fips(aes, out, in, (word32) size);
    #else
        ret = AesCbcEncrypt_fips(aes, out, in, (word32) size);
    #endif

    LogStr("AesCbcEncrypt_fips(aes=%p, out, in) = %d\n", aes, ret);
    LogStr("in[%u]: [%p]\n", (word32)size, in);
    LogHex(in, 0, size);
    LogStr("out[%u]: [%p]\n", (word32)size, out);
    LogHex(out, 0, size);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1AesCbcEncrypt_1fips__Lcom_wolfssl_wolfcrypt_Aes_2_3B_3BJ(
    JNIEnv* env, jclass class, jobject aes_object, jbyteArray out_buffer,
    jbyteArray in_buffer, jlong size)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_AES)

    Aes*  aes = NULL;
    byte* out = NULL;
    byte* in  = NULL;

    aes = (Aes*) getNativeStruct(env, aes_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    out = getByteArray(env, out_buffer);
    in  = getByteArray(env, in_buffer);

    if (aes == NULL || out == NULL || in == NULL) {
        ret = BAD_FUNC_ARG;
    }
    else {
    #if FIPS_VERSION_GT(5,0)
        ret = wc_AesCbcEncrypt_fips(aes, out, in, (word32) size);
    #else
        ret = AesCbcEncrypt_fips(aes, out, in, (word32) size);
    #endif
    }

    LogStr("AesCbcEncrypt_fips(aes=%p, out, in) = %d\n", aes, ret);
    LogStr("in[%u]: [%p]\n", (word32)size, in);
    LogHex(in, 0, size);
    LogStr("out[%u]: [%p]\n", (word32)size, out);
    LogHex(out, 0, size);

    releaseByteArray(env, out_buffer, out, ret);
    releaseByteArray(env,  in_buffer,  in, 1);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1AesCbcDecrypt_1fips__Lcom_wolfssl_wolfcrypt_Aes_2Ljava_nio_ByteBuffer_2Ljava_nio_ByteBuffer_2J(
    JNIEnv* env, jclass class, jobject aes_object, jobject out_buffer,
    jobject in_buffer, jlong size)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_AES)

    Aes*  aes = NULL;
    byte* out = NULL;
    byte* in  = NULL;

    aes = (Aes*) getNativeStruct(env, aes_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    out = getDirectBufferAddress(env, out_buffer);
    in  = getDirectBufferAddress(env, in_buffer);

    if (!aes || !out || !in)
        return BAD_FUNC_ARG;

    #if FIPS_VERSION_GT(5,0)
        ret = wc_AesCbcDecrypt_fips(aes, out, in, (word32) size);
    #else
        ret = AesCbcDecrypt_fips(aes, out, in, (word32) size);
    #endif

    LogStr("AesCbcDecrypt_fips(aes=%p, out, in) = %d\n", aes, ret);
    LogStr("in[%u]: [%p]\n", (word32)size, in);
    LogHex(in, 0, size);
    LogStr("out[%u]: [%p]\n", (word32)size, out);
    LogHex(out, 0, size);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1AesCbcDecrypt_1fips__Lcom_wolfssl_wolfcrypt_Aes_2_3B_3BJ(
    JNIEnv* env, jclass class, jobject aes_object, jbyteArray out_buffer,
    jbyteArray in_buffer, jlong size)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_AES)

    Aes*  aes = NULL;
    byte* out = NULL;
    byte* in  = NULL;

    aes = (Aes*) getNativeStruct(env, aes_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    out = getByteArray(env, out_buffer);
    in  = getByteArray(env, in_buffer);

    if (aes == NULL || out == NULL || in == NULL) {
        ret = BAD_FUNC_ARG;
    }
    else {
    #if FIPS_VERSION_GT(5,0)
        ret = wc_AesCbcDecrypt_fips(aes, out, in, (word32) size);
    #else
        ret = AesCbcDecrypt_fips(aes, out, in, (word32) size);
    #endif
    }

    LogStr("AesCbcDecrypt_fips(aes=%p, out, in) = %d\n", aes, ret);
    LogStr("in[%u]: [%p]\n", (word32)size, in);
    LogHex(in, 0, size);
    LogStr("out[%u]: [%p]\n", (word32)size, out);
    LogHex(out, 0, size);

    releaseByteArray(env, out_buffer, out, ret);
    releaseByteArray(env,  in_buffer,  in, 1);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1AesGcmSetKey_1fips__Lcom_wolfssl_wolfcrypt_Aes_2Ljava_nio_ByteBuffer_2J(
    JNIEnv* env, jclass class, jobject aes_object, jobject key_buffer,
    jlong size)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && defined(HAVE_AESGCM)

    Aes*  aes = NULL;
    byte* key = NULL;

    aes = (Aes*) getNativeStruct(env, aes_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    key = getDirectBufferAddress(env, key_buffer);

    if (!aes || !key)
        return BAD_FUNC_ARG;

    #if FIPS_VERSION_GT(5,0)
        ret = wc_AesGcmSetKey_fips(aes, key, (word32)size);
    #else
        ret = AesGcmSetKey_fips(aes, key, (word32)size);
    #endif

    LogStr("AesGcmSetKey_fips(aes=%p, key) = %d\n", aes, ret);
    LogStr("key[%u]: [%p]\n", (word32)size, key);
    LogHex(key, 0, size);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1AesGcmSetKey_1fips__Lcom_wolfssl_wolfcrypt_Aes_2_3BJ(
    JNIEnv* env, jclass class, jobject aes_object, jbyteArray key_buffer,
    jlong size)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && defined(HAVE_AESGCM)

    Aes*  aes = NULL;
    byte* key = NULL;

    aes = (Aes*) getNativeStruct(env, aes_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    key = getByteArray(env, key_buffer);

    if (aes == NULL || key == NULL) {
        ret = BAD_FUNC_ARG;
    }
    else {
    #if FIPS_VERSION_GT(5,0)
        ret = wc_AesGcmSetKey_fips(aes, key, (word32)size);
    #else
        ret = AesGcmSetKey_fips(aes, key, (word32)size);
    #endif
    }

    LogStr("AesGcmSetKey_fips(aes=%p, key) = %d\n", aes, ret);
    LogStr("key[%u]: [%p]\n", (word32)size, key);
    LogHex(key, 0, size);

    releaseByteArray(env, key_buffer, key, 1);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1AesGcmEncrypt_1fips__Lcom_wolfssl_wolfcrypt_Aes_2Ljava_nio_ByteBuffer_2Ljava_nio_ByteBuffer_2JLjava_nio_ByteBuffer_2JLjava_nio_ByteBuffer_2JLjava_nio_ByteBuffer_2J(
    JNIEnv* env, jclass class, jobject aes_object, jobject out_buffer,
    jobject in_buffer, jlong size, jobject iv_buffer, jlong ivSz,
    jobject authTag_buffer, jlong authTagSz, jobject authIn_buffer,
    jlong authInSz)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && defined(HAVE_AESGCM)

    Aes*  aes = NULL;
    byte* out = NULL;
    byte* in  = NULL;
    byte* iv  = NULL;
    byte* authTag = NULL;
    byte* authIn  = NULL;

    aes = (Aes*) getNativeStruct(env, aes_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    out = getDirectBufferAddress(env, out_buffer);
    in  = getDirectBufferAddress(env, in_buffer);
    iv  = getDirectBufferAddress(env, iv_buffer);
    authTag = getDirectBufferAddress(env, authTag_buffer);
    authIn  = getDirectBufferAddress(env, authIn_buffer);

    if (!aes || !out || !in || (!iv && ivSz) || (!authTag && authTagSz)
        || (!authIn && authInSz)) {
        return BAD_FUNC_ARG;
    }

    #if FIPS_VERSION_GT(5,0)
        ret = wc_AesGcmEncrypt_fips(aes, out, in, (word32)size, iv,
            (word32) ivSz, authTag, (word32)authTagSz, authIn,
            (word32)authInSz);
    #else
        ret = AesGcmEncrypt_fips(aes, out, in, (word32)size, iv, (word32)ivSz,
            authTag, (word32)authTagSz, authIn, (word32)authInSz);
    #endif

    LogStr(
        "AesGcmEncrypt_fips(aes=%p, out, in, iv, authTag, authIn) = %d\n",
        aes, ret);
    LogStr("in[%u]: [%p]\n", (word32)size, in);
    LogHex(in, 0, size);
    LogStr("out[%u]: [%p]\n", (word32)size, out);
    LogHex(out, 0, size);
    LogStr("iv[%u]: [%p]\n", (word32)ivSz, iv);
    LogHex(iv, 0, ivSz);
    LogStr("authTag[%u]: [%p]\n", (word32)authTagSz, authTag);
    LogHex(authTag, 0, authTagSz);
    LogStr("authIn[%u]: [%p]\n", (word32)authInSz, authIn);
    LogHex(authIn, 0, authInSz);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1AesGcmEncrypt_1fips__Lcom_wolfssl_wolfcrypt_Aes_2_3B_3BJ_3BJ_3BJ_3BJ(
    JNIEnv* env, jclass class, jobject aes_object, jbyteArray out_buffer,
    jbyteArray in_buffer, jlong size, jbyteArray iv_buffer, jlong ivSz,
    jbyteArray authTag_buffer, jlong authTagSz, jbyteArray authIn_buffer,
    jlong authInSz)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && defined(HAVE_AESGCM)

    Aes*  aes = NULL;
    byte* out = NULL;
    byte* in  = NULL;
    byte* iv  = NULL;
    byte* authTag = NULL;
    byte* authIn  = NULL;

    aes = (Aes*) getNativeStruct(env, aes_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    out = getByteArray(env, out_buffer);
    in  = getByteArray(env, in_buffer);
    iv  = getByteArray(env, iv_buffer);
    authTag = getByteArray(env, authTag_buffer);
    authIn  = getByteArray(env, authIn_buffer);

    if (!aes || !out || !in || (!iv && ivSz) || (!authTag && authTagSz)
        || (!authIn && authInSz)) {
        ret = BAD_FUNC_ARG;

    }
    else {
    #if FIPS_VERSION_GT(5,0)
        ret = wc_AesGcmEncrypt_fips(aes, out, in, (word32)size, iv,
            (word32)ivSz, authTag, (word32)authTagSz, authIn, (word32)authInSz);
    #else
        ret = AesGcmEncrypt_fips(aes, out, in, (word32)size, iv, (word32)ivSz,
            authTag, (word32)authTagSz, authIn, (word32)authInSz);
    #endif
    }

    LogStr(
        "AesGcmEncrypt_fips(aes=%p, out, in, iv, authTag, authIn) = %d\n",
        aes, ret);
    LogStr("in[%u]: [%p]\n", (word32)size, in);
    LogHex(in, 0, size);
    LogStr("out[%u]: [%p]\n", (word32)size, out);
    LogHex(out, 0, size);
    LogStr("iv[%u]: [%p]\n", (word32)ivSz, iv);
    LogHex(iv, 0, ivSz);
    LogStr("authTag[%u]: [%p]\n", (word32)authTagSz, authTag);
    LogHex(authTag, 0, authTagSz);
    LogStr("authIn[%u]: [%p]\n", (word32)authInSz, authIn);
    LogHex(authIn, 0, authInSz);

    releaseByteArray(env, out_buffer, out, ret);
    releaseByteArray(env, in_buffer, in, 1);
    releaseByteArray(env, iv_buffer, iv, 1);
    releaseByteArray(env, authTag_buffer, authTag, ret);
    releaseByteArray(env, authIn_buffer, authIn, 1);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1AesGcmDecrypt_1fips__Lcom_wolfssl_wolfcrypt_Aes_2Ljava_nio_ByteBuffer_2Ljava_nio_ByteBuffer_2JLjava_nio_ByteBuffer_2JLjava_nio_ByteBuffer_2JLjava_nio_ByteBuffer_2J(
    JNIEnv* env, jclass class, jobject aes_object, jobject out_buffer,
    jobject in_buffer, jlong size, jobject iv_buffer, jlong ivSz,
    jobject authTag_buffer, jlong authTagSz, jobject authIn_buffer,
    jlong authInSz)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && defined(HAVE_AESGCM)

    Aes*  aes = NULL;
    byte* out = NULL;
    byte* in  = NULL;
    byte* iv  = NULL;
    byte* authTag = NULL;
    byte* authIn  = NULL;

    aes = (Aes*) getNativeStruct(env, aes_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    out = getDirectBufferAddress(env, out_buffer);
    in  = getDirectBufferAddress(env, in_buffer);
    iv  = getDirectBufferAddress(env, iv_buffer);
    authTag = getDirectBufferAddress(env, authTag_buffer);
    authIn  = getDirectBufferAddress(env, authIn_buffer);

    if (!aes || !out || !in || (!iv && ivSz) || (!authTag && authTagSz)
        || (!authIn && authInSz))
        return BAD_FUNC_ARG;

    #if FIPS_VERSION_GT(5,0)
        ret = wc_AesGcmDecrypt_fips(aes, out, in, (word32)size, iv,
            (word32)ivSz, authTag, (word32)authTagSz, authIn, (word32)authInSz);
    #else
        ret = AesGcmDecrypt_fips(aes, out, in, (word32)size, iv, (word32)ivSz,
            authTag, (word32)authTagSz, authIn, (word32)authInSz);
    #endif

    LogStr(
        "AesGcmDecrypt_fips(aes=%p, out, in, iv, authTag, authIn) = %d\n",
        aes, ret);
    LogStr("in[%u]: [%p]\n", (word32)AES_BLOCK_SIZE, in);
    LogHex(in, 0, AES_BLOCK_SIZE);
    LogStr("out[%u]: [%p]\n", (word32)AES_BLOCK_SIZE, out);
    LogHex(out, 0, AES_BLOCK_SIZE);
    LogStr("iv[%u]: [%p]\n", (word32)ivSz, iv);
    LogHex(iv, 0, ivSz);
    LogStr("authTag[%u]: [%p]\n", (word32)authTagSz, authTag);
    LogHex(authTag, 0, authTagSz);
    LogStr("authIn[%u]: [%p]\n", (word32)authInSz, authIn);
    LogHex(authIn, 0, authInSz);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1AesGcmDecrypt_1fips__Lcom_wolfssl_wolfcrypt_Aes_2_3B_3BJ_3BJ_3BJ_3BJ(
    JNIEnv* env, jclass class, jobject aes_object, jbyteArray out_buffer,
    jbyteArray in_buffer, jlong size, jbyteArray iv_buffer, jlong ivSz,
    jbyteArray authTag_buffer, jlong authTagSz, jbyteArray authIn_buffer,
    jlong authInSz)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && defined(HAVE_AESGCM)

    Aes*  aes = NULL;
    byte* out = NULL;
    byte* in  = NULL;
    byte* iv  = NULL;
    byte* authTag = NULL;
    byte* authIn  = NULL;

    aes = (Aes*) getNativeStruct(env, aes_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    out = getByteArray(env, out_buffer);
    in  = getByteArray(env, in_buffer);
    iv  = getByteArray(env, iv_buffer);
    authTag = getByteArray(env, authTag_buffer);
    authIn  = getByteArray(env, authIn_buffer);

    if (!aes || !out || !in || (!iv && ivSz) || (!authTag && authTagSz)
        || (!authIn && authInSz)) {
        ret = BAD_FUNC_ARG;
    }
    else {
    #if FIPS_VERSION_GT(5,0)
        ret = wc_AesGcmDecrypt_fips(aes, out, in, (word32)size, iv,
            (word32)ivSz, authTag, (word32)authTagSz, authIn, (word32)authInSz);
    #else
        ret = AesGcmDecrypt_fips(aes, out, in, (word32)size, iv, (word32)ivSz,
            authTag, (word32)authTagSz, authIn, (word32)authInSz);
    #endif
    }

    LogStr(
        "AesGcmDecrypt_fips(aes=%p, out, in, iv, authTag, authIn) = %d\n",
        aes, ret);
    LogStr("in[%u]: [%p]\n", (word32)AES_BLOCK_SIZE, in);
    LogHex(in, 0, AES_BLOCK_SIZE);
    LogStr("out[%u]: [%p]\n", (word32)AES_BLOCK_SIZE, out);
    LogHex(out, 0, AES_BLOCK_SIZE);
    LogStr("iv[%u]: [%p]\n", (word32)ivSz, iv);
    LogHex(iv, 0, ivSz);
    LogStr("authTag[%u]: [%p]\n", (word32)authTagSz, authTag);
    LogHex(authTag, 0, authTagSz);
    LogStr("authIn[%u]: [%p]\n", (word32)authInSz, authIn);
    LogHex(authIn, 0, authInSz);

    releaseByteArray(env, out_buffer, out, ret);
    releaseByteArray(env, in_buffer, in, 1);
    releaseByteArray(env, iv_buffer, iv, 1);
    releaseByteArray(env, authTag_buffer, authTag, ret);
    releaseByteArray(env, authIn_buffer, authIn, 1);

#endif

    return ret;
}

/* DES3 */

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1Des3_1SetKey_1fips__Lcom_wolfssl_wolfcrypt_Des3_2Ljava_nio_ByteBuffer_2Ljava_nio_ByteBuffer_2I(
    JNIEnv* env, jclass class, jobject des_object, jobject key_buffer,
    jobject iv_buffer, jint dir)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && \
    (!defined(HAVE_FIPS_VERSION) || (HAVE_FIPS_VERSION <= 2)) && \
    !defined(NO_DES3)

    Des3* des = NULL;
    byte* key = NULL;
    byte* iv  = NULL;

    des = (Des3*) getNativeStruct(env, des_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    key = getDirectBufferAddress(env, key_buffer);
    iv  = getDirectBufferAddress(env, iv_buffer);

    if (!des || !key)
        return BAD_FUNC_ARG;

    ret = Des3_SetKey_fips(des, key, iv, dir);

    LogStr("Des3_SetKey_fips(des=%p, key, iv, %s) = %d\n", des,
        dir ? "dec" : "enc", ret);
    LogStr("key[%u]: [%p]\n", (word32)DES3_KEYLEN, key);
    LogHex(key, 0, DES3_KEYLEN);
    LogStr("iv[%u]: [%p]\n", (word32)DES3_IVLEN, iv);
    LogHex(iv, 0, DES3_IVLEN);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1Des3_1SetKey_1fips__Lcom_wolfssl_wolfcrypt_Des3_2_3B_3BI(
    JNIEnv* env, jclass class, jobject des_object, jbyteArray key_buffer,
    jbyteArray iv_buffer, jint dir)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && \
    (!defined(HAVE_FIPS_VERSION) || (HAVE_FIPS_VERSION <= 2)) && \
    !defined(NO_DES3)

    Des3* des = NULL;
    byte* key = NULL;
    byte* iv  = NULL;

    des = (Des3*) getNativeStruct(env, des_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    key = getByteArray(env, key_buffer);
    iv  = getByteArray(env, iv_buffer);

    ret = (!des || !key) ? BAD_FUNC_ARG
                         : Des3_SetKey_fips(des, key, iv, dir);

    LogStr("Des3_SetKey_fips(des=%p, key, iv, %s) = %d\n", des,
        dir ? "dec" : "enc", ret);
    LogStr("key[%u]: [%p]\n", (word32)DES3_KEYLEN, key);
    LogHex(key, 0, DES3_KEYLEN);
    LogStr("iv[%u]: [%p]\n", (word32)DES3_IVLEN, iv);
    LogHex(iv, 0, DES3_IVLEN);

    releaseByteArray(env, key_buffer, key, 1);
    releaseByteArray(env, iv_buffer, iv, 1);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1Des3_1SetIV_1fips__Lcom_wolfssl_wolfcrypt_Des3_2Ljava_nio_ByteBuffer_2(
    JNIEnv* env, jclass class, jobject des_object, jobject iv_buffer)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && \
    (!defined(HAVE_FIPS_VERSION) || (HAVE_FIPS_VERSION <= 2)) && \
    !defined(NO_DES3)

    Des3* des = NULL;
    byte* iv  = NULL;

    des = (Des3*) getNativeStruct(env, des_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    iv = getDirectBufferAddress(env, iv_buffer);

    if (!des || !iv)
        return BAD_FUNC_ARG;
    ret = Des3_SetIV_fips(des, iv);

    LogStr("Des3_SetIV_fips(des=%p, iv) = %d\n", des, ret);
    LogStr("iv[%u]: [%p]\n", (word32)DES_BLOCK_SIZE, iv);
    LogHex(iv, 0, DES_BLOCK_SIZE);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1Des3_1SetIV_1fips__Lcom_wolfssl_wolfcrypt_Des3_2_3B(
    JNIEnv* env, jclass class, jobject des_object, jbyteArray iv_buffer)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && \
    (!defined(HAVE_FIPS_VERSION) || (HAVE_FIPS_VERSION <= 2)) && \
    !defined(NO_DES3)

    Des3* des = NULL;
    byte* iv  = NULL;

    des = (Des3*) getNativeStruct(env, des_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    iv = getByteArray(env, iv_buffer);

    ret = (!des || !iv) ? BAD_FUNC_ARG
                        : Des3_SetIV_fips(des, iv);

    LogStr("Des3_SetIV_fips(des=%p, iv) = %d\n", des, ret);
    LogStr("iv[%u]: [%p]\n", (word32)DES_BLOCK_SIZE, iv);
    LogHex(iv, 0, DES_BLOCK_SIZE);

    releaseByteArray(env, iv_buffer, iv, 1);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1Des3_1CbcEncrypt_1fips__Lcom_wolfssl_wolfcrypt_Des3_2Ljava_nio_ByteBuffer_2Ljava_nio_ByteBuffer_2J(
    JNIEnv* env, jclass class, jobject des_object, jobject out_buffer,
    jobject in_buffer, jlong size)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && \
    (!defined(HAVE_FIPS_VERSION) || (HAVE_FIPS_VERSION <= 2)) && \
    !defined(NO_DES3)

    Des3* des = NULL;
    byte* out = NULL;
    byte* in  = NULL;

    des = (Des3*) getNativeStruct(env, des_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    out = getDirectBufferAddress(env, out_buffer);
    in  = getDirectBufferAddress(env, in_buffer);

    if (!des || !out || !in)
        return BAD_FUNC_ARG;

    ret = Des3_CbcEncrypt_fips(des, out, in, (word32) size);

    LogStr("Des3_CbcEncrypt_fips(des=%p, out, in) = %d\n", des, ret);
    LogStr("in[%u]: [%p]\n", (word32)size, in);
    LogHex(in, 0, size);
    LogStr("out[%u]: [%p]\n", (word32)size, out);
    LogHex(out, 0, size);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1Des3_1CbcEncrypt_1fips__Lcom_wolfssl_wolfcrypt_Des3_2_3B_3BJ(
    JNIEnv* env, jclass class, jobject des_object, jbyteArray out_buffer,
    jbyteArray in_buffer, jlong size)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && \
    (!defined(HAVE_FIPS_VERSION) || (HAVE_FIPS_VERSION <= 2)) && \
    !defined(NO_DES3)

    Des3* des = NULL;
    byte* out = NULL;
    byte* in  = NULL;

    des = (Des3*) getNativeStruct(env, des_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    out = getByteArray(env, out_buffer);
    in  = getByteArray(env, in_buffer);

    ret = (!des || !out || !in) ? BAD_FUNC_ARG
                                : Des3_CbcEncrypt_fips(des, out, in,
                                                       (word32) size);

    LogStr("Des3_CbcEncrypt_fips(des=%p, out, in) = %d\n", des, ret);
    LogStr("in[%u]: [%p]\n", (word32)size, in);
    LogHex(in, 0, size);
    LogStr("out[%u]: [%p]\n", (word32)size, out);
    LogHex(out, 0, size);

    releaseByteArray(env, out_buffer, out, ret);
    releaseByteArray(env, in_buffer, in, 1);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1Des3_1CbcDecrypt_1fips__Lcom_wolfssl_wolfcrypt_Des3_2Ljava_nio_ByteBuffer_2Ljava_nio_ByteBuffer_2J(
    JNIEnv* env, jclass class, jobject des_object, jobject out_buffer,
    jobject in_buffer, jlong size)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && \
    (!defined(HAVE_FIPS_VERSION) || (HAVE_FIPS_VERSION <= 2)) && \
    !defined(NO_DES3)

    Des3* des = NULL;
    byte* out = NULL;
    byte* in  = NULL;

    des = (Des3*) getNativeStruct(env, des_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    out = getDirectBufferAddress(env, out_buffer);
    in  = getDirectBufferAddress(env, in_buffer);

    if (!des || !out || !in)
        return BAD_FUNC_ARG;

    ret = Des3_CbcDecrypt_fips(des, out, in, (word32) size);

    LogStr("Des3_CbcDecrypt_fips(des=%p, out, in) = %d\n", des, ret);
    LogStr("in[%u]: [%p]\n", (word32)size, in);
    LogHex(in, 0, size);
    LogStr("out[%u]: [%p]\n", (word32)size, out);
    LogHex(out, 0, size);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1Des3_1CbcDecrypt_1fips__Lcom_wolfssl_wolfcrypt_Des3_2_3B_3BJ(
    JNIEnv* env, jclass class, jobject des_object, jbyteArray out_buffer,
    jbyteArray in_buffer, jlong size)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && \
    (!defined(HAVE_FIPS_VERSION) || (HAVE_FIPS_VERSION <= 2)) && \
    !defined(NO_DES3)

    Des3* des = NULL;
    byte* out = NULL;
    byte* in  = NULL;

    des = (Des3*) getNativeStruct(env, des_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    out = getByteArray(env, out_buffer);
    in  = getByteArray(env, in_buffer);

    ret = (!des || !out || !in) ? BAD_FUNC_ARG
                                : Des3_CbcDecrypt_fips(des, out, in, (word32) size);

    LogStr("Des3_CbcDecrypt_fips(des=%p, out, in) = %d\n", des, ret);
    LogStr("in[%u]: [%p]\n", (word32)size, in);
    LogHex(in, 0, size);
    LogStr("out[%u]: [%p]\n", (word32)size, out);
    LogHex(out, 0, size);

    releaseByteArray(env, out_buffer, out, ret);
    releaseByteArray(env, in_buffer, in, 1);

#endif

    return ret;
}

/*
 * wolfCrypt FIPS API - Keyed hash Service
 */

/* HMAC */

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1HmacSetKey_1fips__Lcom_wolfssl_wolfcrypt_Hmac_2ILjava_nio_ByteBuffer_2J(
    JNIEnv* env, jclass class, jobject hmac_object, jint type,
    jobject key_buffer, jlong keySz)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_HMAC)

    Hmac* hmac = NULL;
    byte* key  = NULL;

    hmac = (Hmac*) getNativeStruct(env, hmac_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    key = getDirectBufferAddress(env, key_buffer);

    if (!hmac || !key)
        return BAD_FUNC_ARG;

    #if FIPS_VERSION_GT(5,0)
        ret = wc_HmacSetKey_fips(hmac, type, key, (word32)keySz);
    #else
        ret = HmacSetKey_fips(hmac, type, key, (word32)keySz);
    #endif

    LogStr("HmacSetKey_fips(hmac=%p, type=%d, key, keySz) = %d\n", hmac, type,
        ret);
    LogStr("key[%u]: [%p]\n", (word32)keySz, key);
    LogHex(key, 0, keySz);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1HmacSetKey_1fips__Lcom_wolfssl_wolfcrypt_Hmac_2I_3BJ(
    JNIEnv* env, jclass class, jobject hmac_object, jint type,
    jbyteArray key_buffer, jlong keySz)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_HMAC)

    Hmac* hmac = NULL;
    byte* key  = NULL;

    hmac = (Hmac*) getNativeStruct(env, hmac_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    key = getByteArray(env, key_buffer);

    if (hmac == NULL || key == NULL) {
        ret = BAD_FUNC_ARG;
    }
    else {
    #if FIPS_VERSION_GT(5,0)
        ret = wc_HmacSetKey_fips(hmac, type, key, (word32)keySz);
    #else
        ret = HmacSetKey_fips(hmac, type, key, (word32)keySz);
    #endif
    }

    LogStr("HmacSetKey_fips(hmac=%p, type=%d, key, keySz) = %d\n", hmac, type,
        ret);
    LogStr("key[%u]: [%p]\n", (word32)keySz, key);
    LogHex(key, 0, keySz);

    releaseByteArray(env, key_buffer, key, 1);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1HmacUpdate_1fips__Lcom_wolfssl_wolfcrypt_Hmac_2Ljava_nio_ByteBuffer_2J(
    JNIEnv* env, jclass class, jobject hmac_object, jobject data_buffer,
    jlong len)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_HMAC)

    Hmac* hmac = NULL;
    byte* data = NULL;

    hmac = (Hmac*) getNativeStruct(env, hmac_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    data = getDirectBufferAddress(env, data_buffer);

    if (!hmac || !data)
        return BAD_FUNC_ARG;

    #if FIPS_VERSION_GT(5,0)
        ret = wc_HmacUpdate_fips(hmac, data, (word32)len);
    #else
        ret = HmacUpdate_fips(hmac, data, (word32)len);
    #endif

    LogStr("HmacUpdate_fips(hmac=%p, data, len) = %d\n", hmac, ret);
    LogStr("data[%u]: [%p]\n", (word32)len, data);
    LogHex(data, 0, len);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1HmacUpdate_1fips__Lcom_wolfssl_wolfcrypt_Hmac_2_3BJ(
    JNIEnv* env, jclass class, jobject hmac_object, jbyteArray data_buffer,
    jlong len)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_HMAC)

    Hmac* hmac = NULL;
    byte* data = NULL;

    hmac = (Hmac*) getNativeStruct(env, hmac_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    data = getByteArray(env, data_buffer);

    if (hmac == NULL || data == NULL) {
        ret = BAD_FUNC_ARG;
    }
    else {
    #if FIPS_VERSION_GT(5,0)
        ret = wc_HmacUpdate_fips(hmac, data, (word32)len);
    #else
        ret = HmacUpdate_fips(hmac, data, (word32)len);
    #endif
    }

    LogStr("HmacUpdate_fips(hmac=%p, data, len) = %d\n", hmac, ret);
    LogStr("data[%u]: [%p]\n", (word32)len, data);
    LogHex(data, 0, len);

    releaseByteArray(env, data_buffer, data, 1);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1HmacFinal_1fips__Lcom_wolfssl_wolfcrypt_Hmac_2Ljava_nio_ByteBuffer_2(
    JNIEnv* env, jclass class, jobject hmac_object, jobject hash_buffer)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_HMAC)

    Hmac* hmac = NULL;
    byte* hash = NULL;

    hmac = (Hmac*) getNativeStruct(env, hmac_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    hash = getDirectBufferAddress(env, hash_buffer);

    if (!hmac || !hash)
        return BAD_FUNC_ARG;

    #if FIPS_VERSION_GT(5,0)
        ret = wc_HmacFinal_fips(hmac, hash);
    #else
        ret = HmacFinal_fips(hmac, hash);
    #endif

    LogStr("HmacFinal_fips(hmac=%p, hash) = %d\n", hmac, ret);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1HmacFinal_1fips__Lcom_wolfssl_wolfcrypt_Hmac_2_3B(
    JNIEnv* env, jclass class, jobject hmac_object, jbyteArray hash_buffer)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_HMAC)

    Hmac* hmac = NULL;
    byte* hash = NULL;

    hmac = (Hmac*) getNativeStruct(env, hmac_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    hash = getByteArray(env, hash_buffer);

    if (hmac == NULL || hash == NULL) {
        ret = BAD_FUNC_ARG;
    }
    else {
    #if FIPS_VERSION_GT(5,0)
        ret = wc_HmacFinal_fips(hmac, hash);
    #else
        ret = HmacFinal_fips(hmac, hash);
    #endif
    }

    LogStr("HmacFinal_fips(hmac=%p, hash) = %d\n", hmac, ret);

    releaseByteArray(env, hash_buffer, hash, ret);

#endif

    return ret;
}

/*
 * wolfCrypt FIPS API - Random number generation Service
 */

/* RNG */

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1InitRng_1fips(
    JNIEnv* env, jclass class, jobject rng_object)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS)

    RNG* rng = (RNG*) getNativeStruct(env, rng_object);
    if ((!rng) || ((*env)->ExceptionOccurred(env))) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    #if FIPS_VERSION_GT(5,0)
        ret = wc_InitRng_fips(rng);
    #else
        ret = InitRng_fips(rng);
    #endif

    LogStr("InitRng_fips(rng=%p) = %d\n", rng, ret);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1FreeRng_1fips(
    JNIEnv* env, jclass class, jobject rng_object)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS)

    RNG* rng = (RNG*) getNativeStruct(env, rng_object);
    if ((!rng) || ((*env)->ExceptionOccurred(env))) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    #if FIPS_VERSION_GT(5,0)
        ret = wc_FreeRng_fips(rng);
    #else
        ret = FreeRng_fips(rng);
    #endif

    LogStr("FreeRng_fips(rng=%p) = %d\n", rng, ret);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1RNG_1GenerateBlock_1fips__Lcom_wolfssl_wolfcrypt_Rng_2Ljava_nio_ByteBuffer_2J(
    JNIEnv* env, jclass class, jobject rng_object, jobject buf_buffer,
    jlong bufSz)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS)

    RNG*  rng = NULL;
    byte* buf = NULL;

    rng = (RNG*) getNativeStruct(env, rng_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    buf = getDirectBufferAddress(env, buf_buffer);

    if (!rng || !buf)
        return BAD_FUNC_ARG;

    #if FIPS_VERSION_GT(5,0)
        ret = wc_RNG_GenerateBlock_fips(rng, buf, (word32)bufSz);
    #else
        ret = RNG_GenerateBlock_fips(rng, buf, (word32)bufSz);
    #endif

    LogStr("RNG_GenerateBlock_fips(rng=%p, buf, bufSz) = %d\n", rng, ret);
    LogStr("output[%u]: [%p]\n", (word32)bufSz, buf);
    LogHex(buf, 0, bufSz);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1RNG_1GenerateBlock_1fips__Lcom_wolfssl_wolfcrypt_Rng_2_3BJ(
    JNIEnv* env, jclass class, jobject rng_object, jbyteArray buf_buffer,
    jlong bufSz)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS)

    RNG*  rng = NULL;
    byte* buf = NULL;

    rng = (RNG*) getNativeStruct(env, rng_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    buf = getByteArray(env, buf_buffer);

    if (rng == NULL || buf == NULL) {
        ret = BAD_FUNC_ARG;
    }
    else {
    #if FIPS_VERSION_GT(5,0)
        ret = wc_RNG_GenerateBlock_fips(rng, buf, (word32)bufSz);
    #else
        ret = RNG_GenerateBlock_fips(rng, buf, (word32)bufSz);
    #endif
    }

    LogStr("RNG_GenerateBlock_fips(rng=%p, buf, bufSz) = %d\n", rng, ret);
    LogStr("output[%u]: [%p]\n", (word32)bufSz, buf);
    LogHex(buf, 0, bufSz);

    releaseByteArray(env, buf_buffer, buf, ret);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1RNG_1HealthTest_1fips__ILjava_nio_ByteBuffer_2JLjava_nio_ByteBuffer_2JLjava_nio_ByteBuffer_2J(
    JNIEnv* env, jclass class, jint reseed, jobject entropyA_object,
    jlong entropyASz, jobject entropyB_object, jlong entropyBSz,
    jobject output_object, jlong outputSz)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS)

    const byte* entropyA = getDirectBufferAddress(env, entropyA_object);
    const byte* entropyB = getDirectBufferAddress(env, entropyB_object);
    byte* output = getDirectBufferAddress(env, output_object);

    if (!entropyA || (reseed && !entropyB) || !output)
        return BAD_FUNC_ARG;

    #if FIPS_VERSION_GT(5,0)
        ret = wc_RNG_HealthTest_fips(reseed, entropyA, (word32)entropyASz,
            entropyB, (word32)entropyBSz, output, (word32)outputSz);
    #else
        ret = RNG_HealthTest_fips(reseed, entropyA, (word32)entropyASz,
            entropyB, (word32)entropyBSz, output, (word32)outputSz);
    #endif

    LogStr("RNG_HealthTest_fips(reseed=%d, entropyA, entropyASz, "
        "entropyB, entropyBSz, output, outputSz) = %d\n", reseed, ret);
    LogStr("entropyA[%u]: [%p]\n", (word32)entropyASz, entropyA);
    LogHex((byte*) entropyA, 0, entropyASz);
    LogStr("entropyB[%u]: [%p]\n", (word32)entropyBSz, entropyB);
    LogHex((byte*) entropyB, 0, entropyBSz);
    LogStr("output[%u]: [%p]\n", (word32)outputSz, output);
    LogHex(output, 0, outputSz);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1RNG_1HealthTest_1fips__I_3BJ_3BJ_3BJ(
    JNIEnv* env, jclass class, jint reseed, jbyteArray entropyA_object,
    jlong entropyASz, jbyteArray entropyB_object, jlong entropyBSz,
    jbyteArray output_object, jlong outputSz)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS)

    const byte* entropyA = getByteArray(env, entropyA_object);
    const byte* entropyB = getByteArray(env, entropyB_object);
    byte* output = getByteArray(env, output_object);

    if (!entropyA || (reseed && !entropyB) || !output) {
        ret = BAD_FUNC_ARG;
    }
    else {
    #if FIPS_VERSION_GT(5,0)
        ret = wc_RNG_HealthTest_fips(reseed, entropyA, (word32)entropyASz,
            entropyB, (word32)entropyBSz, output, (word32)outputSz);
    #else
        ret = RNG_HealthTest_fips(reseed, entropyA, (word32)entropyASz,
            entropyB, (word32)entropyBSz, output, (word32)outputSz);
    #endif
    }

    LogStr("RNG_HealthTest_fips(reseed=%d, entropyA, entropyASz, "
        "entropyB, entropyBSz, output, outputSz) = %d\n", reseed, ret);
    LogStr("entropyA[%u]: [%p]\n", (word32)entropyASz, entropyA);
    LogHex((byte*) entropyA, 0, entropyASz);
    LogStr("entropyB[%u]: [%p]\n", (word32)entropyBSz, entropyB);
    LogHex((byte*) entropyB, 0, entropyBSz);
    LogStr("output[%u]: [%p]\n", (word32)outputSz, output);
    LogHex(output, 0, outputSz);

    releaseByteArray(env, entropyA_object, (byte*)entropyA, 1);
    releaseByteArray(env, entropyB_object, (byte*)entropyB, 1);
    releaseByteArray(env, output_object, output, ret);

#endif

    return ret;
}

/*
 * wolfCrypt FIPS API - Digital signature Service
 */

/* RSA */

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1InitRsaKey_1fips(
    JNIEnv* env, jclass class, jobject rsa_object, jobject heap_object)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_RSA)

    RsaKey* key = NULL;
    void* heap  = NULL;

    key = (RsaKey*) getNativeStruct(env, rsa_object);
    if ((!key) || ((*env)->ExceptionOccurred(env))) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    heap = getDirectBufferAddress(env, heap_object);

    #if FIPS_VERSION_GT(5,0)
        ret = wc_InitRsaKey_fips(key, heap);
    #else
        ret = InitRsaKey_fips(key, heap);
    #endif

    LogStr("InitRsaKey_fips(key=%p, heap=%p) = %d\n", key, heap, ret);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1FreeRsaKey_1fips(
    JNIEnv* env, jclass class, jobject rsa_object)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_RSA)

    RsaKey* key = (RsaKey*) getNativeStruct(env, rsa_object);

    if ((!key) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    #if FIPS_VERSION_GT(5,0)
        ret = wc_FreeRsaKey_fips(key);
    #else
        ret = FreeRsaKey_fips(key);
    #endif

    LogStr("FreeRsaKey_fips(key=%p) = %d\n", key, ret);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1RsaSSL_1Sign_1fips__Ljava_nio_ByteBuffer_2JLjava_nio_ByteBuffer_2JLcom_wolfssl_wolfcrypt_Rsa_2Lcom_wolfssl_wolfcrypt_Rng_2(
    JNIEnv* env, jclass class, jobject in_object, jlong inLen,
    jobject out_object, jlong outLen, jobject rsa_object, jobject rng_object)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_RSA)

    byte* in    = NULL;
    byte* out   = NULL;
    RsaKey* key = NULL;
    RNG* rng    = NULL;

    key = (RsaKey*) getNativeStruct(env, rsa_object);
    if ((!key) || ((*env)->ExceptionOccurred(env))) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    rng = (RNG*) getNativeStruct(env, rsa_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    in  = getDirectBufferAddress(env, in_object);
    out = getDirectBufferAddress(env, out_object);

    /**
     * Providing an rng is optional. RNG_GenerateBlock will return BAD_FUNC_ARG
     * on a NULL rng if an RNG is needed by RsaPad.
     */
    if (!in || !out)
        return BAD_FUNC_ARG;

    #if FIPS_VERSION_GT(5,0)
        ret = wc_RsaSSL_Sign_fips(in, (word32)inLen, out, (word32)outLen,
            key, rng);
    #else
        ret = RsaSSL_Sign_fips(in, (word32)inLen, out, (word32)outLen,
            key, rng);
    #endif

    LogStr("RsaSSL_Sign_fips(in, inLen, out, outLen, key=%p, rng=%p) = %d\n",
        key, rng, ret);
    LogStr("in[%u]: [%p]\n", (word32)inLen, in);
    LogHex((byte*) in, 0, inLen);
    LogStr("out[%u]: [%p]\n", (word32)outLen, out);
    LogHex((byte*) out, 0, outLen);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1RsaSSL_1Sign_1fips___3BJ_3BJLcom_wolfssl_wolfcrypt_Rsa_2Lcom_wolfssl_wolfcrypt_Rng_2(
    JNIEnv* env, jclass class, jbyteArray in_object, jlong inLen,
    jbyteArray out_object, jlong outLen, jobject rsa_object, jobject rng_object)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_RSA)

    byte* in    = NULL;
    byte* out   = NULL;
    RsaKey* key = NULL;
    RNG* rng    = NULL;
    word32 inSz = 0;
    word32 outSz = 0;

    key = (RsaKey*) getNativeStruct(env, rsa_object);
    if (key == NULL || (*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    rng = (RNG*) getNativeStruct(env, rsa_object);
    if ((*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    in    = getByteArray(env, in_object);
    inSz  = getByteArrayLength(env, in_object);
    out   = getByteArray(env, out_object);
    outSz = getByteArrayLength(env, out_object);

    /* sanity check on array pointers and sizes */
    if (in == NULL || out == NULL ||
        (inSz < (word32)inLen) || (outSz < outLen)) {
        ret = BAD_FUNC_ARG;
    }
    else {
        /**
         * Providing an rng is optional. RNG_GenerateBlock will return
         * BAD_FUNC_ARG on a NULL rng if an RNG is needed by RsaPad.
         */
    #if FIPS_VERSION_GT(5,0)
        ret = wc_RsaSSL_Sign_fips(in, (word32)inLen, out, (word32)outLen,
                               key, rng);
    #else
        ret = RsaSSL_Sign_fips(in, (word32)inLen, out, (word32)outLen,
                               key, rng);
    #endif
    }

    LogStr("RsaSSL_Sign_fips(in, inLen, out, outLen, key=%p, rng=%p) = %d\n",
        key, rng, ret);
    LogStr("in[%u]: [%p]\n", (word32)inLen, in);
    LogHex((byte*) in, 0, inLen);
    LogStr("out[%u]: [%p]\n", (word32)outLen, out);
    LogHex((byte*) out, 0, outLen);

    releaseByteArray(env, in_object, in, 1);
    if (ret < 0) {
        /* JNI_ABORT, free local array, don't copy back */
        releaseByteArray(env, out_object, out, 1);
    }
    else {
        /* free local array, copy data back to src */
        releaseByteArray(env, out_object, out, 0);
    }
#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1RsaSSL_1Verify_1fips__Ljava_nio_ByteBuffer_2JLjava_nio_ByteBuffer_2JLcom_wolfssl_wolfcrypt_Rsa_2(
    JNIEnv* env, jclass class, jobject in_object, jlong inLen,
    jobject out_object, jlong outLen, jobject rsa_object)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_RSA)

    byte* in    = NULL;
    byte* out   = NULL;
    RsaKey* key = NULL;

    key = (RsaKey*) getNativeStruct(env, rsa_object);
    if ((!key) || ((*env)->ExceptionOccurred(env))) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    in  = getDirectBufferAddress(env, in_object);
    out = getDirectBufferAddress(env, out_object);

    if (!in || !out)
        return BAD_FUNC_ARG;

    #if FIPS_VERSION_GT(5,0)
        ret = wc_RsaSSL_Verify_fips(in, (word32)inLen, out,
            (word32)outLen, key);
    #else
        ret = RsaSSL_Verify_fips(in, (word32)inLen, out,
            (word32)outLen, key);
    #endif

    LogStr("RsaSSL_Verify_fips(in, inLen, out, outLen, key=%p) = %d\n", key,
        ret);
    LogStr("in[%u]: [%p]\n", (word32)inLen, in);
    LogHex((byte*) in, 0, inLen);
    LogStr("out[%u]: [%p]\n", (word32)outLen, out);
    LogHex((byte*) out, 0, outLen);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1RsaSSL_1Verify_1fips___3BJ_3BJLcom_wolfssl_wolfcrypt_Rsa_2(
    JNIEnv* env, jclass class, jbyteArray in_object, jlong inLen,
    jbyteArray out_object, jlong outLen, jobject rsa_object)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_RSA)

    byte* in    = NULL;
    byte* out   = NULL;
    RsaKey* key = NULL;
    word32 inSz = 0;
    word32 outSz = 0;

    key = (RsaKey*) getNativeStruct(env, rsa_object);
    if (key == NULL || (*env)->ExceptionOccurred(env)) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    in    = getByteArray(env, in_object);
    inSz  = getByteArrayLength(env, in_object);
    out   = getByteArray(env, out_object);
    outSz = getByteArrayLength(env, out_object);

    /* sanity check on array pointers and sizes */
    if (in == NULL || out == NULL ||
        (inSz < (word32)inLen) || (outSz < outLen)) {
        ret = BAD_FUNC_ARG;
    }
    else {
    #if FIPS_VERSION_GT(5,0)
        ret = wc_RsaSSL_Verify_fips(in, (word32)inLen, out,
            (word32)outLen, key);
    #else
        ret = RsaSSL_Verify_fips(in, (word32)inLen, out,
            (word32)outLen, key);
    #endif

        LogStr("RsaSSL_Verify_fips(in, inLen, out, outLen, key=%p) = %d\n",
               key, ret);
        LogStr("in[%u]: [%p]\n", (word32)inLen, in);
        LogHex((byte*) in, 0, inLen);
        LogStr("out[%u]: [%p]\n", (word32)outLen, out);
        LogHex((byte*) out, 0, outLen);
    }

    releaseByteArray(env, in_object, in, 1);
    releaseByteArray(env, out_object, out, ret < 0);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1RsaEncryptSize_1fips(
    JNIEnv* env, jclass class, jobject rsa_object)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_RSA)

    RsaKey* key = (RsaKey*) getNativeStruct(env, rsa_object);
    if ((!key) || ((*env)->ExceptionOccurred(env))) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    #if FIPS_VERSION_GT(5,0)
        ret = wc_RsaEncryptSize_fips(key);
    #else
        ret = RsaEncryptSize_fips(key);
    #endif

    LogStr("RsaEncryptSize_fips(key=%p) = %d\n", key, ret);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1RsaPrivateKeyDecode_1fips__Ljava_nio_ByteBuffer_2_3JLcom_wolfssl_wolfcrypt_Rsa_2J(
    JNIEnv* env, jclass class, jobject input_object, jlongArray inOutIdx,
    jobject rsa_object, jlong inSz)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_RSA)

    jlong tmpIdx;
    byte* input = NULL;
    RsaKey* key = NULL;

    key = (RsaKey*) getNativeStruct(env, rsa_object);
    if ((!key) || ((*env)->ExceptionOccurred(env))) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    input = getDirectBufferAddress(env, input_object);
    if (!input)
        return BAD_FUNC_ARG;

    (*env)->GetLongArrayRegion(env, inOutIdx, 0, 1, &tmpIdx);
    if ((*env)->ExceptionOccurred(env)) {
        return BAD_FUNC_ARG;
    }

    #if (HAVE_FIPS_VERSION >= 2)
        ret = 0; wc_RsaPrivateKeyDecode(input, (word32*) &tmpIdx, key,
                                        (word32)inSz);
    #else
        ret = 0; RsaPrivateKeyDecode_fips(input, (word32*) &tmpIdx, key,
                                          (word32)inSz);
    #endif

    (*env)->SetLongArrayRegion(env, inOutIdx, 0, 1, &tmpIdx);

    LogStr("RsaPrivateKeyDecode_fips(input, inOutIdx, key=%p, inSz) = %d\n",
        key, ret);
    LogStr("input[%u]: [%p]\n", (word32)inSz, input);
    LogHex((byte*) input, 0, inSz);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1RsaPrivateKeyDecode_1fips___3B_3JLcom_wolfssl_wolfcrypt_Rsa_2J(
    JNIEnv* env, jclass class, jbyteArray input_object, jlongArray inOutIdx,
    jobject rsa_object, jlong inSz)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_RSA)

    jlong tmpIdx;
    byte* input = NULL;
    RsaKey* key = NULL;

    key = (RsaKey*) getNativeStruct(env, rsa_object);
    if ((!key) || ((*env)->ExceptionOccurred(env))) {
        /* prevent additional JNI calls with pending exception */
        return BAD_FUNC_ARG;
    }

    input = getByteArray(env, input_object);

    (*env)->GetLongArrayRegion(env, inOutIdx, 0, 1, &tmpIdx);
    if ((*env)->ExceptionOccurred(env)) {
        releaseByteArray(env, input_object, input, 1);
        return BAD_FUNC_ARG;
    }

    #if (HAVE_FIPS_VERSION >= 2)
        ret = (!input || !key)
            ? BAD_FUNC_ARG
            : wc_RsaPrivateKeyDecode(input, (word32*) &tmpIdx, key, (word32)inSz);
    #else
        ret = (!input || !key)
            ? BAD_FUNC_ARG
            : RsaPrivateKeyDecode_fips(input, (word32*) &tmpIdx, key,
                                       (word32)inSz);
    #endif

    (*env)->SetLongArrayRegion(env, inOutIdx, 0, 1, &tmpIdx);

    LogStr("RsaPrivateKeyDecode_fips(input, inOutIdx, key=%p, inSz) = %d\n",
        key, ret);
    LogStr("input[%u]: [%p]\n", (word32)inSz, input);
    LogHex((byte*) input, 0, inSz);

    releaseByteArray(env, input_object, input, 1);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1RsaPublicKeyDecode_1fips__Ljava_nio_ByteBuffer_2_3JLcom_wolfssl_wolfcrypt_Rsa_2J(
    JNIEnv* env, jclass class, jobject input_object, jlongArray inOutIdx,
    jobject rsa_object, jlong inSz)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_RSA)

    jlong tmpIdx;
    byte* input = NULL;
    RsaKey* key = NULL;

    key = (RsaKey*) getNativeStruct(env, rsa_object);
    if ((!key) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    input = getDirectBufferAddress(env, input_object);
    if (!input)
        return BAD_FUNC_ARG;

    (*env)->GetLongArrayRegion(env, inOutIdx, 0, 1, &tmpIdx);
    if ((*env)->ExceptionOccurred(env)) {
        return BAD_FUNC_ARG;
    }

    #if (HAVE_FIPS_VERSION >= 2)
        ret = wc_RsaPublicKeyDecode(input, (word32*) &tmpIdx, key,
                                    (word32)inSz);
    #else
        ret = RsaPublicKeyDecode_fips(input, (word32*) &tmpIdx, key,
                                      (word32)inSz);
    #endif

    (*env)->SetLongArrayRegion(env, inOutIdx, 0, 1, &tmpIdx);

    LogStr("RsaPublicKeyDecode_fips(input, inOutIdx, key=%p, inSz) = %d\n", key,
        ret);
    LogStr("input[%u]: [%p]\n", (word32)inSz, input);
    LogHex((byte*) input, 0, inSz);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1RsaPublicKeyDecode_1fips___3B_3JLcom_wolfssl_wolfcrypt_Rsa_2J(
    JNIEnv* env, jclass class, jbyteArray input_object, jlongArray inOutIdx,
    jobject rsa_object, jlong inSz)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_RSA)

    jlong tmpIdx;
    byte* input = NULL;
    RsaKey* key = NULL;

    key = (RsaKey*) getNativeStruct(env, rsa_object);
    if ((!key) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    input = getByteArray(env, input_object);

    (*env)->GetLongArrayRegion(env, inOutIdx, 0, 1, &tmpIdx);
    if ((*env)->ExceptionOccurred(env)) {
        releaseByteArray(env, input_object, input, 1);
        return BAD_FUNC_ARG;
    }
    #if (HAVE_FIPS_VERSION >= 2)
        ret = (!input)
            ? BAD_FUNC_ARG
            : wc_RsaPublicKeyDecode(input, (word32*) &tmpIdx, key,
                                    (word32)inSz);
    #else
        ret = (!input)
            ? BAD_FUNC_ARG
            : RsaPublicKeyDecode_fips(input, (word32*) &tmpIdx, key,
                                      (word32)inSz);
    #endif

    (*env)->SetLongArrayRegion(env, inOutIdx, 0, 1, &tmpIdx);

    LogStr("RsaPublicKeyDecode_fips(input, inOutIdx, key=%p, inSz) = %d\n", key,
        ret);
    LogStr("input[%u]: [%p]\n", (word32)inSz, input);
    LogHex((byte*) input, 0, inSz);

    releaseByteArray(env, input_object, input, 1);

#endif

    return ret;
}

/*
 * wolfCrypt FIPS API - Message digest Service
 */

/* SHA */

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1InitSha_1fips(
    JNIEnv* env, jclass class, jobject sha_object)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_SHA)

    wc_Sha* sha = (wc_Sha*) getNativeStruct(env, sha_object);
    if ((!sha) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    #if FIPS_VERSION_GT(5,0)
        ret = wc_InitSha_fips(sha);
    #else
        ret = InitSha_fips(sha);
    #endif

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1ShaUpdate_1fips__Lcom_wolfssl_wolfcrypt_Sha_2Ljava_nio_ByteBuffer_2J(
    JNIEnv* env, jclass class, jobject sha_object, jobject data_buffer,
    jlong len)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_SHA)

    wc_Sha* sha = NULL;
    byte* data = NULL;

    sha = (wc_Sha*) getNativeStruct(env, sha_object);
    if ((!sha) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    data = getDirectBufferAddress(env, data_buffer);
    if (!data)
        return BAD_FUNC_ARG;

    #if FIPS_VERSION_GT(5,0)
        ret = wc_ShaUpdate_fips(sha, data, (word32)len);
    #else
        ret = ShaUpdate_fips(sha, data, (word32)len);
    #endif

    LogStr("ShaUpdate_fips(sha=%p, data, len) = %d\n", sha, ret);
    LogStr("data[%u]: [%p]\n", (word32)len, data);
    LogHex(data, 0, len);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1ShaUpdate_1fips__Lcom_wolfssl_wolfcrypt_Sha_2_3BJ(
    JNIEnv* env, jclass class, jobject sha_object, jbyteArray data_buffer,
    jlong len)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_SHA)

    wc_Sha* sha = NULL;
    byte* data = NULL;

    sha = (wc_Sha*) getNativeStruct(env, sha_object);
    if ((!sha) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    data = getByteArray(env, data_buffer);

    if (data == NULL) {
        ret = BAD_FUNC_ARG;
    }
    else {
    #if FIPS_VERSION_GT(5,0)
        ret = wc_ShaUpdate_fips(sha, data, (word32)len);
    #else
        ret = ShaUpdate_fips(sha, data, (word32)len);
    #endif
    }

    LogStr("ShaUpdate_fips(sha=%p, data, len) = %d\n", sha, ret);
    LogStr("data[%u]: [%p]\n", (word32)len, data);
    LogHex(data, 0, len);

    releaseByteArray(env, data_buffer, data, 1);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1ShaFinal_1fips__Lcom_wolfssl_wolfcrypt_Sha_2Ljava_nio_ByteBuffer_2(
    JNIEnv* env, jclass class, jobject sha_object, jobject hash_buffer)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_SHA)

    wc_Sha* sha = NULL;
    byte* hash = NULL;

    sha = (wc_Sha*) getNativeStruct(env, sha_object);
    if ((!sha) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    hash = getDirectBufferAddress(env, hash_buffer);
    if (!hash)
        return BAD_FUNC_ARG;

    #if FIPS_VERSION_GT(5,0)
        ret = wc_ShaFinal_fips(sha, hash);
    #else
        ret = ShaFinal_fips(sha, hash);
    #endif

    LogStr("ShaFinal_fips(sha=%p, hash) = %d\n", sha, ret);
    LogStr("hash[%u]: [%p]\n", (word32)SHA_DIGEST_SIZE, hash);
    LogHex(hash, 0, SHA_DIGEST_SIZE);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1ShaFinal_1fips__Lcom_wolfssl_wolfcrypt_Sha_2_3B(
    JNIEnv* env, jclass class, jobject sha_object, jbyteArray hash_buffer)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_SHA)

    wc_Sha* sha = NULL;
    byte* hash = NULL;

    sha = (wc_Sha*) getNativeStruct(env, sha_object);
    if ((!sha) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    hash = getByteArray(env, hash_buffer);

    if (hash == NULL) {
        ret = BAD_FUNC_ARG;
    }
    else {
    #if FIPS_VERSION_GT(5,0)
        ret = wc_ShaFinal_fips(sha, hash);
    #else
        ret = ShaFinal_fips(sha, hash);
    #endif
    }

    LogStr("ShaFinal_fips(sha=%p, hash) = %d\n", sha, ret);
    LogStr("hash[%u]: [%p]\n", (word32)SHA_DIGEST_SIZE, hash);
    LogHex(hash, 0, SHA_DIGEST_SIZE);

    releaseByteArray(env, hash_buffer, hash, ret);

#endif

    return ret;
}

/* SHA256 */

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1InitSha256_1fips(
    JNIEnv* env, jclass class, jobject sha_object)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_SHA256)

    wc_Sha256* sha = (wc_Sha256*) getNativeStruct(env, sha_object);
    if ((!sha) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    #if FIPS_VERSION_GT(5,0)
        ret = wc_InitSha256_fips(sha);
    #else
        ret = InitSha256_fips(sha);
    #endif

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1Sha256Update_1fips__Lcom_wolfssl_wolfcrypt_Sha256_2Ljava_nio_ByteBuffer_2J(
    JNIEnv* env, jclass class, jobject sha_object, jobject data_buffer,
    jlong len)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_SHA256)

    wc_Sha256* sha = NULL;
    byte* data = NULL;

    sha = (wc_Sha256*) getNativeStruct(env, sha_object);
    if ((!sha) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    data = getDirectBufferAddress(env, data_buffer);
    if (!data)
        return BAD_FUNC_ARG;

    #if FIPS_VERSION_GT(5,0)
        ret = wc_Sha256Update_fips(sha, data, (word32)len);
    #else
        ret = Sha256Update_fips(sha, data, (word32)len);
    #endif

    LogStr("Sha256Update_fips(sha=%p, data, len) = %d\n", sha, ret);
    LogStr("data[%u]: [%p]\n", (word32)len, data);
    LogHex(data, 0, len);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1Sha256Update_1fips__Lcom_wolfssl_wolfcrypt_Sha256_2_3BJ(
    JNIEnv* env, jclass class, jobject sha_object, jbyteArray data_buffer,
    jlong len)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_SHA256)

    wc_Sha256* sha = NULL;
    byte* data = NULL;

    sha = (wc_Sha256*) getNativeStruct(env, sha_object);
    if ((!sha) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    data = getByteArray(env, data_buffer);

    if (data == NULL) {
        ret = BAD_FUNC_ARG;
    }
    else {
    #if FIPS_VERSION_GT(5,0)
        ret = wc_Sha256Update_fips(sha, data, (word32)len);
    #else
        ret = Sha256Update_fips(sha, data, (word32)len);
    #endif
    }

    LogStr("Sha256Update_fips(sha=%p, data, len) = %d\n", sha, ret);
    LogStr("data[%u]: [%p]\n", (word32)len, data);
    LogHex(data, 0, len);

    releaseByteArray(env, data_buffer, data, 1);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1Sha256Final_1fips__Lcom_wolfssl_wolfcrypt_Sha256_2Ljava_nio_ByteBuffer_2(
    JNIEnv* env, jclass class, jobject sha_object, jobject hash_buffer)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_SHA256)

    wc_Sha256* sha = NULL;
    byte* hash = NULL;

    sha = (wc_Sha256*) getNativeStruct(env, sha_object);
    if ((!sha) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    hash = getDirectBufferAddress(env, hash_buffer);
    if (!hash)
        return BAD_FUNC_ARG;

    #if FIPS_VERSION_GT(5,0)
        ret = wc_Sha256Final_fips(sha, hash);
    #else
        ret = Sha256Final_fips(sha, hash);
    #endif

    LogStr("Sha256Final_fips(sha=%p, hash) = %d\n", sha, ret);
    LogStr("hash[%u]: [%p]\n", (word32)SHA256_DIGEST_SIZE, hash);
    LogHex(hash, 0, SHA256_DIGEST_SIZE);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1Sha256Final_1fips__Lcom_wolfssl_wolfcrypt_Sha256_2_3B(
    JNIEnv* env, jclass class, jobject sha_object, jbyteArray hash_buffer)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_SHA256)

    wc_Sha256* sha = NULL;
    byte* hash = NULL;

    sha = (wc_Sha256*) getNativeStruct(env, sha_object);
    if ((!sha) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    hash = getByteArray(env, hash_buffer);

    if (hash == NULL) {
        ret = BAD_FUNC_ARG;
    }
    else {
    #if FIPS_VERSION_GT(5,0)
        ret = wc_Sha256Final_fips(sha, hash);
    #else
        ret = Sha256Final_fips(sha, hash);
    #endif
    }

    LogStr("Sha256Final_fips(sha=%p, hash) = %d\n", sha, ret);
    LogStr("hash[%u]: [%p]\n", (word32)SHA256_DIGEST_SIZE, hash);
    LogHex(hash, 0, SHA256_DIGEST_SIZE);

    releaseByteArray(env, hash_buffer, hash, ret);

#endif

    return ret;
}

/* SHA384 */

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1InitSha384_1fips(
    JNIEnv* env, jclass class, jobject sha_object)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && defined(WOLFSSL_SHA512)

    wc_Sha384* sha = (wc_Sha384*) getNativeStruct(env, sha_object);
    if ((!sha) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    #if FIPS_VERSION_GT(5,0)
        ret = wc_InitSha384_fips(sha);
    #else
        ret = InitSha384_fips(sha);
    #endif

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1Sha384Update_1fips__Lcom_wolfssl_wolfcrypt_Sha384_2Ljava_nio_ByteBuffer_2J(
    JNIEnv* env, jclass class, jobject sha_object, jobject data_buffer,
    jlong len)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && defined(WOLFSSL_SHA512)

    wc_Sha384* sha = NULL;
    byte* data = NULL;

    sha = (wc_Sha384*) getNativeStruct(env, sha_object);
    if ((!sha) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    data = getDirectBufferAddress(env, data_buffer);
    if (!data)
        return BAD_FUNC_ARG;

    #if FIPS_VERSION_GT(5,0)
        ret = wc_Sha384Update_fips(sha, data, (word32)len);
    #else
        ret = Sha384Update_fips(sha, data, (word32)len);
    #endif

    LogStr("Sha384Update_fips(sha=%p, data, len) = %d\n", sha, ret);
    LogStr("data[%u]: [%p]\n", (word32)len, data);
    LogHex(data, 0, len);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1Sha384Update_1fips__Lcom_wolfssl_wolfcrypt_Sha384_2_3BJ(
    JNIEnv* env, jclass class, jobject sha_object, jbyteArray data_buffer,
    jlong len)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && defined(WOLFSSL_SHA512)

    wc_Sha384* sha = NULL;
    byte* data = NULL;

    sha = (wc_Sha384*) getNativeStruct(env, sha_object);
    if ((!sha) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    data = getByteArray(env, data_buffer);

    if (data == NULL) {
        ret = BAD_FUNC_ARG;
    }
    else {
    #if FIPS_VERSION_GT(5,0)
        ret = wc_Sha384Update_fips(sha, data, (word32)len);
    #else
        ret = Sha384Update_fips(sha, data, (word32)len);
    #endif
    }

    LogStr("Sha384Update_fips(sha=%p, data, len) = %d\n", sha, ret);
    LogStr("data[%u]: [%p]\n", (word32)len, data);
    LogHex(data, 0, len);

    releaseByteArray(env, data_buffer, data, 1);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1Sha384Final_1fips__Lcom_wolfssl_wolfcrypt_Sha384_2Ljava_nio_ByteBuffer_2(
    JNIEnv* env, jclass class, jobject sha_object, jobject hash_buffer)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && defined(WOLFSSL_SHA512)

    wc_Sha384* sha = NULL;
    byte* hash = NULL;

    sha = (wc_Sha384*) getNativeStruct(env, sha_object);
    if ((!sha) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    hash = getDirectBufferAddress(env, hash_buffer);
    if (!hash)
        return BAD_FUNC_ARG;

    #if FIPS_VERSION_GT(5,0)
        ret = wc_Sha384Final_fips(sha, hash);
    #else
        ret = Sha384Final_fips(sha, hash);
    #endif

    LogStr("Sha384Final_fips(sha=%p, hash) = %d\n", sha, ret);
    LogStr("hash[%u]: [%p]\n", (word32)SHA384_DIGEST_SIZE, hash);
    LogHex(hash, 0, SHA384_DIGEST_SIZE);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1Sha384Final_1fips__Lcom_wolfssl_wolfcrypt_Sha384_2_3B(
    JNIEnv* env, jclass class, jobject sha_object, jbyteArray hash_buffer)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && defined(WOLFSSL_SHA512)

    wc_Sha384* sha = NULL;
    byte* hash = NULL;

    sha = (wc_Sha384*) getNativeStruct(env, sha_object);
    if ((!sha) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    hash = getByteArray(env, hash_buffer);

    if (hash == NULL) {
        ret = BAD_FUNC_ARG;
    }
    else {
    #if FIPS_VERSION_GT(5,0)
        ret = wc_Sha384Final_fips(sha, hash);
    #else
        ret = Sha384Final_fips(sha, hash);
    #endif
    }

    LogStr("Sha384Final_fips(sha=%p, hash) = %d\n", sha, ret);
    LogStr("hash[%u]: [%p]\n", (word32)SHA384_DIGEST_SIZE, hash);
    LogHex(hash, 0, SHA384_DIGEST_SIZE);

    releaseByteArray(env, hash_buffer, hash, ret);

#endif

    return ret;
}

/* SHA512 */

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1InitSha512_1fips(
    JNIEnv* env, jclass class, jobject sha_object)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && defined(WOLFSSL_SHA512)

    wc_Sha512* sha = (wc_Sha512*) getNativeStruct(env, sha_object);
    if ((!sha) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    #if FIPS_VERSION_GT(5,0)
        ret = wc_InitSha512_fips(sha);
    #else
        ret = InitSha512_fips(sha);
    #endif

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1Sha512Update_1fips__Lcom_wolfssl_wolfcrypt_Sha512_2Ljava_nio_ByteBuffer_2J(
    JNIEnv* env, jclass class, jobject sha_object, jobject data_buffer,
    jlong len)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && defined(WOLFSSL_SHA512)

    wc_Sha512* sha = NULL;
    byte* data = NULL;

    sha = (wc_Sha512*) getNativeStruct(env, sha_object);
    if ((!sha) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    data = getDirectBufferAddress(env, data_buffer);
    if (!data)
        return BAD_FUNC_ARG;

    #if FIPS_VERSION_GT(5,0)
        ret = wc_Sha512Update_fips(sha, data, (word32)len);
    #else
        ret = Sha512Update_fips(sha, data, (word32)len);
    #endif

    LogStr("Sha512Update_fips(sha=%p, data, len) = %d\n", sha, ret);
    LogStr("data[%u]: [%p]\n", (word32)len, data);
    LogHex(data, 0, len);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1Sha512Update_1fips__Lcom_wolfssl_wolfcrypt_Sha512_2_3BJ(
    JNIEnv* env, jclass class, jobject sha_object, jbyteArray data_buffer,
    jlong len)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && defined(WOLFSSL_SHA512)

    wc_Sha512* sha = NULL;
    byte* data = NULL;

    sha = (wc_Sha512*) getNativeStruct(env, sha_object);
    if ((!sha) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    data = getByteArray(env, data_buffer);

    if (data == NULL) {
        ret = BAD_FUNC_ARG;
    }
    else {
    #if FIPS_VERSION_GT(5,0)
        ret = wc_Sha512Update_fips(sha, data, (word32)len);
    #else
        ret = Sha512Update_fips(sha, data, (word32)len);
    #endif
    }

    LogStr("Sha512Update_fips(sha=%p, data, len) = %d\n", sha, ret);
    LogStr("data[%u]: [%p]\n", (word32)len, data);
    LogHex(data, 0, len);

    releaseByteArray(env, data_buffer, data, 1);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1Sha512Final_1fips__Lcom_wolfssl_wolfcrypt_Sha512_2Ljava_nio_ByteBuffer_2(
    JNIEnv* env, jclass class, jobject sha_object, jobject hash_buffer)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && defined(WOLFSSL_SHA512)

    wc_Sha512* sha = NULL;
    byte* hash = NULL;

    sha = (wc_Sha512*) getNativeStruct(env, sha_object);
    if ((!sha) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    hash = getDirectBufferAddress(env, hash_buffer);
    if (!hash)
        return BAD_FUNC_ARG;

    #if FIPS_VERSION_GT(5,0)
        ret = wc_Sha512Final_fips(sha, hash);
    #else
        ret = Sha512Final_fips(sha, hash);
    #endif

    LogStr("Sha512Final_fips(sha=%p, hash) = %d\n", sha, ret);
    LogStr("hash[%u]: [%p]\n", (word32)SHA512_DIGEST_SIZE, hash);
    LogHex(hash, 0, SHA512_DIGEST_SIZE);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1Sha512Final_1fips__Lcom_wolfssl_wolfcrypt_Sha512_2_3B(
    JNIEnv* env, jclass class, jobject sha_object, jbyteArray hash_buffer)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && defined(WOLFSSL_SHA512)

    wc_Sha512* sha = NULL;
    byte* hash = NULL;

    sha = (wc_Sha512*) getNativeStruct(env, sha_object);
    if ((!sha) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    hash = getByteArray(env, hash_buffer);

    if (hash == NULL) {
        ret = BAD_FUNC_ARG;
    }
    else {
    #if FIPS_VERSION_GT(5,0)
        ret = wc_Sha512Final_fips(sha, hash);
    #else
        ret = Sha512Final_fips(sha, hash);
    #endif
    }

    LogStr("Sha512Final_fips(sha=%p, hash) = %d\n", sha, ret);
    LogStr("hash[%u]: [%p]\n", (word32)SHA512_DIGEST_SIZE, hash);
    LogHex(hash, 0, SHA512_DIGEST_SIZE);

    releaseByteArray(env, hash_buffer, hash, ret);

#endif

    return ret;
}

/*
 * wolfCrypt FIPS API - Show status Service
 */

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wolfCrypt_1GetStatus_1fips(
    JNIEnv* env, jclass class)
{
#ifdef HAVE_FIPS
    return (jint) wolfCrypt_GetStatus_fips();
#else
    return NOT_COMPILED_IN;
#endif
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wolfCrypt_1SetStatus_1fips(
    JNIEnv* env, jclass class, jint status)
{
#ifdef HAVE_FORCE_FIPS_FAILURE
    return (jint) wolfCrypt_SetStatus_fips(status);
#else
    return NOT_COMPILED_IN;
#endif
}

/*
 * ### FIPS Allowed Security Methods ###########################################
 */

/*
 * wolfCrypt FIPS API - Key transport Service
 */

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1RsaPublicEncrypt_1fips__Ljava_nio_ByteBuffer_2JLjava_nio_ByteBuffer_2JLcom_wolfssl_wolfcrypt_Rsa_2Lcom_wolfssl_wolfcrypt_Rng_2(
    JNIEnv* env, jclass class, jobject in_object, jlong inLen,
    jobject out_object, jlong outLen, jobject rsa_object, jobject rng_object)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_RSA)

    byte* in    = NULL;
    byte* out   = NULL;
    RsaKey* key = NULL;
    RNG* rng    = NULL;

    key = (RsaKey*) getNativeStruct(env, rsa_object);
    if ((!key) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    rng = (RNG*) getNativeStruct(env, rng_object);
    if ((*env)->ExceptionOccurred(env)) {
        return BAD_FUNC_ARG;
    }

    in  = getDirectBufferAddress(env, in_object);
    out = getDirectBufferAddress(env, out_object);

    /**
     * Providing an rng is optional. RNG_GenerateBlock will return BAD_FUNC_ARG
     * on a NULL rng if an RNG is needed by RsaPad.
     */
    if (!in || !out)
        return BAD_FUNC_ARG;

    #if FIPS_VERSION_GT(5,0)
        ret = wc_RsaPublicEncrypt_fips(in, (word32)inLen, out, (word32)outLen,
                                    key, rng);
    #else
        ret = RsaPublicEncrypt_fips(in, (word32)inLen, out, (word32)outLen,
                                    key, rng);
    #endif

    LogStr(
        "RsaPublicEncrypt_fips(in, inLen, out, outLen, key=%p, rng=%p) = %d\n",
        key, rng, ret);
    LogStr("in[%u]: [%p]\n", (word32)inLen, in);
    LogHex((byte*) in, 0, inLen);
    LogStr("out[%u]: [%p]\n", (word32)outLen, out);
    LogHex((byte*) out, 0, outLen);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1RsaPublicEncrypt_1fips___3BJ_3BJLcom_wolfssl_wolfcrypt_Rsa_2Lcom_wolfssl_wolfcrypt_Rng_2(
    JNIEnv* env, jclass class, jbyteArray in_object, jlong inLen,
    jbyteArray out_object, jlong outLen, jobject rsa_object, jobject rng_object)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_RSA)

    byte* in    = NULL;
    byte* out   = NULL;
    RsaKey* key = NULL;
    RNG* rng    = NULL;

    key = (RsaKey*) getNativeStruct(env, rsa_object);
    if ((!key) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    rng = (RNG*) getNativeStruct(env, rng_object);
    if ((*env)->ExceptionOccurred(env)) {
        return BAD_FUNC_ARG;
    }

    in  = getByteArray(env, in_object);
    out = getByteArray(env, out_object);

    /**
     * Providing an rng is optional. RNG_GenerateBlock will return BAD_FUNC_ARG
     * on a NULL rng if an RNG is needed by RsaPad.
     */
    if (in == NULL || out == NULL) {
        ret = BAD_FUNC_ARG;
    }
    else {
    #if FIPS_VERSION_GT(5,0)
        ret = wc_RsaPublicEncrypt_fips(in, (word32)inLen, out, (word32)outLen,
            key, rng);
    #else
        ret = RsaPublicEncrypt_fips(in, (word32)inLen, out, (word32)outLen,
            key, rng);
    #endif
    }

    LogStr(
        "RsaPublicEncrypt_fips(in, inLen, out, outLen, key=%p, rng=%p) = %d\n",
        key, rng, ret);
    LogStr("in[%u]: [%p]\n", (word32)inLen, in);
    LogHex((byte*) in, 0, inLen);
    LogStr("out[%u]: [%p]\n", (word32)outLen, out);
    LogHex((byte*) out, 0, outLen);

    releaseByteArray(env, in_object, in, 1);
    releaseByteArray(env, out_object, out, ret < 0);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1RsaPrivateDecrypt_1fips__Ljava_nio_ByteBuffer_2JLjava_nio_ByteBuffer_2JLcom_wolfssl_wolfcrypt_Rsa_2(
    JNIEnv* env, jclass class, jobject in_object, jlong inLen,
    jobject out_object, jlong outLen, jobject rsa_object)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_RSA)

    byte* in    = NULL;
    byte* out   = NULL;
    RsaKey* key = NULL;

    key = (RsaKey*) getNativeStruct(env, rsa_object);
    if ((!key) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    in  = getDirectBufferAddress(env, in_object);
    out = getDirectBufferAddress(env, out_object);

    if (!in || !out)
        return BAD_FUNC_ARG;

    #if FIPS_VERSION_GT(5,0)
        ret = wc_RsaPrivateDecrypt_fips(in, (word32)inLen, out,
            (word32)outLen, key);
    #else
        ret = RsaPrivateDecrypt_fips(in, (word32)inLen, out,
            (word32)outLen, key);
    #endif

    LogStr("RsaPrivateDecrypt_fips(in, inLen, out, outLen, key=%p) = %d\n", key,
        ret);
    LogStr("in[%u]: [%p]\n", (word32)inLen, in);
    LogHex((byte*) in, 0, inLen);
    LogStr("out[%u]: [%p]\n", (word32)outLen, out);
    LogHex((byte*) out, 0, outLen);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1RsaPrivateDecrypt_1fips___3BJ_3BJLcom_wolfssl_wolfcrypt_Rsa_2(
    JNIEnv* env, jclass class, jbyteArray in_object, jlong inLen,
    jbyteArray out_object, jlong outLen, jobject rsa_object)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_RSA)

    byte* in = NULL;
    byte* out = NULL;
    RsaKey* key = NULL;

    key = (RsaKey*) getNativeStruct(env, rsa_object);
    if ((!key) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    in  = getByteArray(env, in_object);
    out = getByteArray(env, out_object);

    if (in == NULL || out == NULL) {
        ret = BAD_FUNC_ARG;
    }
    else {
    #if FIPS_VERSION_GT(5,0)
        ret = wc_RsaPrivateDecrypt_fips(in, (word32)inLen, out,
            (word32)outLen, key);
    #else
        ret = RsaPrivateDecrypt_fips(in, (word32)inLen, out,
            (word32)outLen, key);
    #endif
    }

    LogStr("RsaPrivateDecrypt_fips(in, inLen, out, outLen, key=%p) = %d\n", key,
        ret);
    LogStr("in[%u]: [%p]\n", (word32)inLen, in);
    LogHex((byte*) in, 0, inLen);
    LogStr("out[%u]: [%p]\n", (word32)outLen, out);
    LogHex((byte*) out, 0, outLen);

    releaseByteArray(env, in_object, in, 1);
    releaseByteArray(env, out_object, out, ret < 0);

#endif

    return ret;
}

/*
 * wolfCrypt FIPS API - Message digest MD5 Service
 */

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1InitMd5_1fips(
    JNIEnv* env, jclass class, jobject md5_object)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_MD5)

    wc_Md5* md5 = (wc_Md5*) getNativeStruct(env, md5_object);
    if ((!md5) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    InitMd5(md5);
    ret = com_wolfssl_wolfcrypt_WolfCrypt_SUCCESS;

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1Md5Update__Lcom_wolfssl_wolfcrypt_Md5_2Ljava_nio_ByteBuffer_2J(
    JNIEnv* env, jclass class, jobject md5_object, jobject data_buffer,
    jlong len)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_MD5)

    wc_Md5* md5 = NULL;
    byte* data = NULL;

    md5 = (wc_Md5*) getNativeStruct(env, md5_object);
    if ((!md5) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    data = getDirectBufferAddress(env, data_buffer);
    if (!data)
        return BAD_FUNC_ARG;

    Md5Update(md5, data, (word32)len);
    ret = com_wolfssl_wolfcrypt_WolfCrypt_SUCCESS;

    LogStr("Md5Update_fips(md5=%p, data, len) = %d\n", md5, ret);
    LogStr("data[%u]: [%p]\n", (word32)len, data);
    LogHex(data, 0, len);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1Md5Update__Lcom_wolfssl_wolfcrypt_Md5_2_3BJ(
    JNIEnv* env, jclass class, jobject md5_object, jbyteArray data_buffer,
    jlong len)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_MD5)

    wc_Md5* md5 = NULL;
    byte* data = NULL;

    md5 = (wc_Md5*) getNativeStruct(env, md5_object);
    if ((!md5) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    data = getByteArray(env, data_buffer);
    if (!data)
        ret = BAD_FUNC_ARG;
    else {
        Md5Update(md5, data, (word32)len);
        ret = com_wolfssl_wolfcrypt_WolfCrypt_SUCCESS;
    }

    LogStr("Md5Update_fips(md5=%p, data, len) = %d\n", md5, ret);
    LogStr("data[%u]: [%p]\n", (word32)len, data);
    LogHex(data, 0, len);

    releaseByteArray(env, data_buffer, data, 1);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1Md5Final__Lcom_wolfssl_wolfcrypt_Md5_2Ljava_nio_ByteBuffer_2(
    JNIEnv* env, jclass class, jobject md5_object, jobject hash_buffer)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_MD5)

    wc_Md5* md5 = NULL;
    byte* hash = NULL;

    md5 = (wc_Md5*) getNativeStruct(env, md5_object);
    if ((!md5) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    hash = getDirectBufferAddress(env, hash_buffer);
    if (!hash)
        return BAD_FUNC_ARG;

    Md5Final(md5, hash);
    ret = com_wolfssl_wolfcrypt_WolfCrypt_SUCCESS;

    LogStr("Md5Final_fips(md5=%p, hash) = %d\n", md5, ret);
    LogStr("hash[%u]: [%p]\n", (word32)MD5_DIGEST_SIZE, hash);
    LogHex(hash, 0, MD5_DIGEST_SIZE);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1Md5Final__Lcom_wolfssl_wolfcrypt_Md5_2_3B(
    JNIEnv* env, jclass class, jobject md5_object, jbyteArray hash_buffer)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_MD5)

    wc_Md5* md5 = NULL;
    byte* hash = NULL;

    md5 = (wc_Md5*) getNativeStruct(env, md5_object);
    if ((!md5) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    hash = getByteArray(env, hash_buffer);
    if (!hash)
        ret = BAD_FUNC_ARG;
    else {
        Md5Final(md5, hash);
        ret = com_wolfssl_wolfcrypt_WolfCrypt_SUCCESS;
    }

    LogStr("Md5Final_fips(md5=%p, hash) = %d\n", md5, ret);
    LogStr("hash[%u]: [%p]\n", (word32)MD5_DIGEST_SIZE, hash);
    LogHex(hash, 0, MD5_DIGEST_SIZE);

    releaseByteArray(env, hash_buffer, hash, ret);

#endif

    return ret;
}

/*
 * wolfCrypt FIPS API - Key agreement Service
 */

JNIEXPORT void JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1InitDhKey(
    JNIEnv* env, jclass class, jobject key_object)
{
#if defined(HAVE_FIPS) && !defined(NO_DH)

    DhKey* key = (DhKey*) getNativeStruct(env, key_object);
    if ((!key) || ((*env)->ExceptionOccurred(env))) {
        return;
    }

    wc_InitDhKey(key);

#endif
}

JNIEXPORT void JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1FreeDhKey(
    JNIEnv* env, jclass class, jobject key_object)
{
#if defined(HAVE_FIPS) && !defined(NO_DH)

    DhKey* key = (DhKey*) getNativeStruct(env, key_object);
    if ((!key) || ((*env)->ExceptionOccurred(env))) {
        return;
    }

    wc_FreeDhKey(key);

#endif
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1DhGenerateKeyPair__Lcom_wolfssl_wolfcrypt_Dh_2Lcom_wolfssl_wolfcrypt_Rng_2Ljava_nio_ByteBuffer_2_3JLjava_nio_ByteBuffer_2_3J(
    JNIEnv* env, jclass class, jobject key_object, jobject rng_object,
    jobject priv_buffer, jlongArray privSz, jobject pub_buffer,
    jlongArray pubSz)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_DH)

    DhKey* key = NULL;
    RNG*  rng  = NULL;
    byte* priv = NULL;
    byte* pub  = NULL;
    jlong tmpPrivSz, tmpPubSz;

    key = (DhKey*) getNativeStruct(env, key_object);
    if ((!key) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    rng = (RNG*) getNativeStruct(env, rng_object);
    if ((!rng) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    priv = getDirectBufferAddress(env, priv_buffer);
    pub  = getDirectBufferAddress(env, pub_buffer);

    if (!priv || !pub)
        return BAD_FUNC_ARG;

    (*env)->GetLongArrayRegion(env, privSz, 0, 1, &tmpPrivSz);
    if ((*env)->ExceptionOccurred(env)) {
        return BAD_FUNC_ARG;
    }

    (*env)->GetLongArrayRegion(env, pubSz, 0, 1, &tmpPubSz);
    if ((*env)->ExceptionOccurred(env)) {
        return BAD_FUNC_ARG;
    }

    ret = wc_DhGenerateKeyPair(key, rng, priv, (word32*) &tmpPrivSz,
                                         pub,  (word32*) &tmpPubSz);

    (*env)->SetLongArrayRegion(env, privSz, 0, 1, &tmpPrivSz);
    if ((*env)->ExceptionOccurred(env)) {
        return BAD_FUNC_ARG;
    }

    (*env)->SetLongArrayRegion(env, pubSz, 0, 1, &tmpPubSz);
    /* no more JNI calls, not checking for exception */

    LogStr("DhGenerateKeyPair(key=%p, rng=%p, priv, privSz, pub, pubSz) = %d\n",
        key, rng, ret);
    LogStr("priv[%u]: [%p]\n", (word32)tmpPrivSz, priv);
    LogHex(priv, 0, tmpPrivSz);
    LogStr("pub[%u]: [%p]\n", (word32)tmpPubSz, pub);
    LogHex(pub, 0, tmpPubSz);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1DhGenerateKeyPair__Lcom_wolfssl_wolfcrypt_Dh_2Lcom_wolfssl_wolfcrypt_Rng_2_3B_3J_3B_3J(
    JNIEnv* env, jclass class, jobject key_object, jobject rng_object,
    jbyteArray priv_buffer, jlongArray privSz, jbyteArray pub_buffer,
    jlongArray pubSz)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_DH)

    DhKey* key = NULL;
    RNG*  rng  = NULL;
    byte* priv = NULL;
    byte* pub  = NULL;
    jlong tmpPrivSz, tmpPubSz;

    key = (DhKey*) getNativeStruct(env, key_object);
    if ((!key) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    rng = (RNG*) getNativeStruct(env, rng_object);
    if ((!rng) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    (*env)->GetLongArrayRegion(env, privSz, 0, 1, &tmpPrivSz);
    if ((*env)->ExceptionOccurred(env)) {
        return BAD_FUNC_ARG;
    }

    (*env)->GetLongArrayRegion(env, pubSz, 0, 1, &tmpPubSz);
    if ((*env)->ExceptionOccurred(env)) {
        return BAD_FUNC_ARG;
    }

    priv = getByteArray(env, priv_buffer);
    pub  = getByteArray(env, pub_buffer);

    ret = (!priv || !pub)
        ? BAD_FUNC_ARG
        : wc_DhGenerateKeyPair(key, rng, priv, (word32*) &tmpPrivSz,
                                         pub,  (word32*) &tmpPubSz);

    (*env)->SetLongArrayRegion(env, privSz, 0, 1, &tmpPrivSz);
    if ((*env)->ExceptionOccurred(env)) {
        releaseByteArray(env, priv_buffer, priv, ret < 0);
        releaseByteArray(env, pub_buffer, pub, ret < 0);
        return BAD_FUNC_ARG;
    }

    (*env)->SetLongArrayRegion(env, pubSz, 0, 1, &tmpPubSz);

    LogStr("DhGenerateKeyPair(key=%p, rng=%p, priv, privSz, pub, pubSz) = %d\n",
        key, rng, ret);
    LogStr("priv[%u]: [%p]\n", (word32)tmpPrivSz, priv);
    LogHex(priv, 0, tmpPrivSz);
    LogStr("pub[%u]: [%p]\n", (word32)tmpPubSz, pub);
    LogHex(pub, 0, tmpPubSz);

    releaseByteArray(env, priv_buffer, priv, ret < 0);
    releaseByteArray(env, pub_buffer, pub, ret < 0);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1DhAgree__Lcom_wolfssl_wolfcrypt_Dh_2Ljava_nio_ByteBuffer_2_3JLjava_nio_ByteBuffer_2JLjava_nio_ByteBuffer_2J(
    JNIEnv* env, jclass class, jobject key_object, jobject agree_buffer,
    jlongArray agreeSz, jobject priv_buffer, jlong privSz, jobject pub_buffer,
    jlong pubSz)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_DH)

    DhKey* key = NULL;
    byte* agree = NULL;
    byte* priv = NULL;
    byte* pub = NULL;
    jlong tmpAgreeSz;

    key = (DhKey*) getNativeStruct(env, key_object);
    if ((!key) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    agree = getDirectBufferAddress(env, agree_buffer);
    priv  = getDirectBufferAddress(env, priv_buffer);
    pub   = getDirectBufferAddress(env, pub_buffer);

    if (!agree || !priv || !pub)
        return BAD_FUNC_ARG;

    (*env)->GetLongArrayRegion(env, agreeSz, 0, 1, &tmpAgreeSz);
    if ((*env)->ExceptionOccurred(env)) {
        return BAD_FUNC_ARG;
    }

    ret = wc_DhAgree(key, agree, (word32*) &tmpAgreeSz, priv, (word32)privSz,
                     pub, (word32)pubSz);

    (*env)->SetLongArrayRegion(env, agreeSz, 0, 1, &tmpAgreeSz);

    LogStr("DhAgree(key=%p, agree, agreeSz, priv, privSz, pub, pubSz) = %d\n",
        key, ret);
    LogStr("agree[%u]: [%p]\n", (word32)tmpAgreeSz, agree);
    LogHex(agree, 0, tmpAgreeSz);
    LogStr("priv[%u]: [%p]\n", (word32)privSz, priv);
    LogHex(priv, 0, privSz);
    LogStr("pub[%u]: [%p]\n", (word32)pubSz, pub);
    LogHex(pub, 0, pubSz);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1DhAgree__Lcom_wolfssl_wolfcrypt_Dh_2_3B_3J_3BJ_3BJ(
    JNIEnv* env, jclass class, jobject key_object, jbyteArray agree_buffer,
    jlongArray agreeSz, jbyteArray priv_buffer, jlong privSz, jbyteArray pub_buffer,
    jlong pubSz)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_DH)

    DhKey* key  = NULL;
    byte* agree = NULL;
    byte* priv  = NULL;
    byte* pub   = NULL;
    jlong tmpAgreeSz;

    key = (DhKey*) getNativeStruct(env, key_object);
    if ((!key) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    (*env)->GetLongArrayRegion(env, agreeSz, 0, 1, &tmpAgreeSz);
    if ((*env)->ExceptionOccurred(env)) {
        return BAD_FUNC_ARG;
    }

    agree = getByteArray(env, agree_buffer);
    priv  = getByteArray(env, priv_buffer);
    pub   = getByteArray(env, pub_buffer);

    ret = (!key || !agree || !priv || !pub)
        ? BAD_FUNC_ARG
        : wc_DhAgree(key, agree, (word32*) &tmpAgreeSz, priv, (word32)privSz,
                     pub, (word32)pubSz);

    (*env)->SetLongArrayRegion(env, agreeSz, 0, 1, &tmpAgreeSz);

    LogStr("DhAgree(key=%p, agree, agreeSz, priv, privSz, pub, pubSz) = %d\n",
        key, ret);
    LogStr("agree[%u]: [%p]\n", (word32)tmpAgreeSz, agree);
    LogHex(agree, 0, tmpAgreeSz);
    LogStr("priv[%u]: [%p]\n", (word32)privSz, priv);
    LogHex(priv, 0, privSz);
    LogStr("pub[%u]: [%p]\n", (word32)pubSz, pub);
    LogHex(pub, 0, pubSz);

    releaseByteArray(env, agree_buffer, agree, ret < 0);
    releaseByteArray(env, priv_buffer, priv, 1);
    releaseByteArray(env, pub_buffer, pub, 1);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1DhKeyDecode__Ljava_nio_ByteBuffer_2_3JLcom_wolfssl_wolfcrypt_Dh_2J(
    JNIEnv* env, jclass class, jobject input_buffer, jlongArray inOutIdx,
    jobject key_object, jlong inSz)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_DH)

    DhKey* key  = NULL;
    byte* input = NULL;
    jlong tmpInOutIdx;

    key = (DhKey*) getNativeStruct(env, key_object);
    if ((!key) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    input = getDirectBufferAddress(env, input_buffer);
    if (!input)
        return BAD_FUNC_ARG;

    (*env)->GetLongArrayRegion(env, inOutIdx, 0, 1, &tmpInOutIdx);
    if ((*env)->ExceptionOccurred(env)) {
        return BAD_FUNC_ARG;
    }

    ret = wc_DhKeyDecode(input, (word32*) &tmpInOutIdx, key, (word32)inSz);

    (*env)->SetLongArrayRegion(env, inOutIdx, 0, 1, &tmpInOutIdx);

    LogStr("DhKeyDecode(input, &inOutIdx, key=%p, inSz) = %d\n", key, ret);
    LogStr("input[%u]: [%p]\n", (word32)inSz, input);
    LogHex(input, 0, inSz);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1DhKeyDecode___3B_3JLcom_wolfssl_wolfcrypt_Dh_2J(
    JNIEnv* env, jclass class, jbyteArray input_buffer, jlongArray inOutIdx,
    jobject key_object, jlong inSz)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_DH)

    DhKey* key  = NULL;
    byte* input = NULL;
    jlong tmpInOutIdx;

    key = (DhKey*) getNativeStruct(env, key_object);
    if ((!key) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    (*env)->GetLongArrayRegion(env, inOutIdx, 0, 1, &tmpInOutIdx);
    if ((*env)->ExceptionOccurred(env)) {
        return BAD_FUNC_ARG;
    }

    input = getByteArray(env, input_buffer);
    ret = (!input)
        ? BAD_FUNC_ARG
        : wc_DhKeyDecode(input, (word32*) &tmpInOutIdx, key, (word32)inSz);

    (*env)->SetLongArrayRegion(env, inOutIdx, 0, 1, &tmpInOutIdx);

    LogStr("DhKeyDecode(input, &inOutIdx, key=%p, inSz) = %d\n", key, ret);
    LogStr("input[%u]: [%p]\n", (word32)inSz, input);
    LogHex(input, 0, inSz);

    releaseByteArray(env, input_buffer, input, 1);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1DhSetKey__Lcom_wolfssl_wolfcrypt_Dh_2Ljava_nio_ByteBuffer_2JLjava_nio_ByteBuffer_2J(
    JNIEnv* env, jclass class, jobject key_object, jobject p_buffer, jlong pSz,
    jobject g_buffer, jlong gSz)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_DH)

    DhKey* key = NULL;
    byte* p = NULL;
    byte* g = NULL;

    key = (DhKey*) getNativeStruct(env, key_object);
    if ((!key) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    p = getDirectBufferAddress(env, p_buffer);
    g = getDirectBufferAddress(env, g_buffer);

    if (!p || !g)
        return BAD_FUNC_ARG;

    ret = wc_DhSetKey(key, p, (word32)pSz, g, (word32)gSz);

    LogStr("DhSetKey(key=%p, p, pSz, g, gSz) = %d\n", key, ret);
    LogStr("p[%u]: [%p]\n", (word32)pSz, p);
    LogHex(p, 0, pSz);
    LogStr("g[%u]: [%p]\n", (word32)gSz, g);
    LogHex(g, 0, gSz);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1DhSetKey__Lcom_wolfssl_wolfcrypt_Dh_2_3BJ_3BJ(
    JNIEnv* env, jclass class, jobject key_object, jbyteArray p_buffer, jlong pSz,
    jbyteArray g_buffer, jlong gSz)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_DH)

    DhKey* key = NULL;
    byte* p = NULL;
    byte* g = NULL;

    key = (DhKey*) getNativeStruct(env, key_object);
    if ((!key) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    p = getByteArray(env, p_buffer);
    g = getByteArray(env, g_buffer);

    ret = (!p || !g)
        ? BAD_FUNC_ARG
        : wc_DhSetKey(key, p, (word32)pSz, g, (word32)gSz);

    LogStr("DhSetKey(key=%p, p, pSz, g, gSz) = %d\n", key, ret);
    LogStr("p[%u]: [%p]\n", (word32)pSz, p);
    LogHex(p, 0, pSz);
    LogStr("g[%u]: [%p]\n", (word32)gSz, g);
    LogHex(g, 0, gSz);

    releaseByteArray(env, p_buffer, p, 1);
    releaseByteArray(env, g_buffer, g, 1);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1DhParamsLoad__Ljava_nio_ByteBuffer_2JLjava_nio_ByteBuffer_2_3JLjava_nio_ByteBuffer_2_3J(
    JNIEnv* env, jclass class, jobject input_buffer, jlong inSz,
    jobject p_buffer, jlongArray pInOutSz, jobject g_buffer,
    jlongArray gInOutSz)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_DH)

    byte* input = getDirectBufferAddress(env, input_buffer);
    byte* p = getDirectBufferAddress(env, p_buffer);
    byte* g = getDirectBufferAddress(env, g_buffer);
    jlong tmpPInOutSz, tmpGInOutSz;

    if (!input || !p || !g)
        return BAD_FUNC_ARG;

    (*env)->GetLongArrayRegion(env, pInOutSz, 0, 1, &tmpPInOutSz);
    if ((*env)->ExceptionOccurred(env)) {
        return BAD_FUNC_ARG;
    }

    (*env)->GetLongArrayRegion(env, gInOutSz, 0, 1, &tmpGInOutSz);
    if ((*env)->ExceptionOccurred(env)) {
        return BAD_FUNC_ARG;
    }

    ret = wc_DhParamsLoad(input, (word32)inSz, p, (word32*) &tmpPInOutSz,
                                            g, (word32*) &tmpGInOutSz);

    (*env)->SetLongArrayRegion(env, pInOutSz, 0, 1, &tmpPInOutSz);
    if ((*env)->ExceptionOccurred(env)) {
        return BAD_FUNC_ARG;
    }

    (*env)->SetLongArrayRegion(env, gInOutSz, 0, 1, &tmpGInOutSz);

    LogStr("DhParamsLoad(input, inSz, p, &pInOutSz, g, &gInOutSz) = %d\n", ret);
    LogStr("input[%u]: [%p]\n", (word32)inSz, input);
    LogHex(input, 0, inSz);
    LogStr("p[%u]: [%p]\n", (word32)tmpPInOutSz, p);
    LogHex(p, 0, tmpPInOutSz);
    LogStr("g[%u]: [%p]\n", (word32)tmpGInOutSz, g);
    LogHex(g, 0, tmpGInOutSz);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1DhParamsLoad___3BJ_3B_3J_3B_3J(
    JNIEnv* env, jclass class, jbyteArray input_buffer, jlong inSz,
    jbyteArray p_buffer, jlongArray pInOutSz, jbyteArray g_buffer,
    jlongArray gInOutSz)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && !defined(NO_DH)

    byte* input = NULL;
    byte* p = NULL;
    byte* g = NULL;
    jlong tmpPInOutSz, tmpGInOutSz;

    (*env)->GetLongArrayRegion(env, pInOutSz, 0, 1, &tmpPInOutSz);
    if ((*env)->ExceptionOccurred(env)) {
        return BAD_FUNC_ARG;
    }

    (*env)->GetLongArrayRegion(env, gInOutSz, 0, 1, &tmpGInOutSz);
    if ((*env)->ExceptionOccurred(env)) {
        return BAD_FUNC_ARG;
    }

    input = getByteArray(env, input_buffer);
    p = getByteArray(env, p_buffer);
    g = getByteArray(env, g_buffer);

    ret = (!input || !p || !g)
        ? BAD_FUNC_ARG
        : wc_DhParamsLoad(input, (word32)inSz, p, (word32*) &tmpPInOutSz,
                                               g, (word32*) &tmpGInOutSz);

    (*env)->SetLongArrayRegion(env, pInOutSz, 0, 1, &tmpPInOutSz);
    if ((*env)->ExceptionOccurred(env)) {
        releaseByteArray(env, input_buffer, input, 1);
        releaseByteArray(env, p_buffer, p, 1);
        releaseByteArray(env, g_buffer, g, 1);
        return BAD_FUNC_ARG;
    }

    (*env)->SetLongArrayRegion(env, gInOutSz, 0, 1, &tmpGInOutSz);

    LogStr("DhParamsLoad(input, inSz, p, &pInOutSz, g, &gInOutSz) = %d\n", ret);
    LogStr("input[%u]: [%p]\n", (word32)inSz, input);
    LogHex(input, 0, inSz);
    LogStr("p[%u]: [%p]\n", (word32)tmpPInOutSz, p);
    LogHex(p, 0, tmpPInOutSz);
    LogStr("g[%u]: [%p]\n", (word32)tmpGInOutSz, g);
    LogHex(g, 0, tmpGInOutSz);

    releaseByteArray(env, input_buffer, input, 1);
    releaseByteArray(env, p_buffer, p, 1);
    releaseByteArray(env, g_buffer, g, 1);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1ecc_1init
  (JNIEnv* env, jclass class, jobject key_object)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && defined(HAVE_ECC)

    ecc_key* key = (ecc_key*) getNativeStruct(env, key_object);
    if ((!key) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    ret = wc_ecc_init(key);

    LogStr("ecc_init(key=%p) = %d\n", key, ret);

#endif

    return ret;

}

JNIEXPORT void JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1ecc_1free(
    JNIEnv *env, jclass class, jobject key_object)
{
#if defined(HAVE_FIPS) && defined(HAVE_ECC)

    ecc_key* key = (ecc_key*) getNativeStruct(env, key_object);
    if ((!key) || ((*env)->ExceptionOccurred(env))) {
        return;
    }

    wc_ecc_free(key);

    LogStr("ecc_free(key=%p)\n", key);

#endif
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1ecc_1make_1key(
    JNIEnv* env, jclass class, jobject rng_object, jint keysize,
    jobject key_object)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && defined(HAVE_ECC)

    ecc_key* key = NULL;
    RNG* rng = NULL;

    key = (ecc_key*) getNativeStruct(env, key_object);
    if ((!key) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    rng = (RNG*) getNativeStruct(env, rng_object);
    if ((!rng) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    ret = wc_ecc_make_key(rng, keysize, key);

    LogStr("ecc_make_key(rng=%p, keysize=%d, key=%p) = %d\n", rng, keysize, key,
        ret);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1ecc_1shared_1secret__Lcom_wolfssl_wolfcrypt_Ecc_2Lcom_wolfssl_wolfcrypt_Ecc_2Ljava_nio_ByteBuffer_2_3J(
    JNIEnv* env, jclass class, jobject priv_object, jobject pub_object,
    jobject out_buffer, jlongArray outlen)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && defined(HAVE_ECC)

    ecc_key* priv = NULL;
    ecc_key* pub  = NULL;
    byte* out = NULL;
    jlong tmpOutLen;

    priv = (ecc_key*) getNativeStruct(env, priv_object);
    if ((!priv) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    pub = (ecc_key*) getNativeStruct(env, pub_object);
    if ((!pub) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    out = getDirectBufferAddress(env, out_buffer);
    if (!out)
        return BAD_FUNC_ARG;

    (*env)->GetLongArrayRegion(env, outlen, 0, 1, &tmpOutLen);
    if ((*env)->ExceptionOccurred(env)) {
        return BAD_FUNC_ARG;
    }

    ret = wc_ecc_shared_secret(priv, pub, out, (word32*) &tmpOutLen);

    (*env)->SetLongArrayRegion(env, outlen, 0, 1, &tmpOutLen);

    LogStr("ecc_shared_secret(priv=%p, pub=%p, out, outLen) = %d\n", priv, pub,
        ret);
    LogStr("out[%u]: [%p]\n", (word32)tmpOutLen, out);
    LogHex(out, 0, tmpOutLen);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1ecc_1shared_1secret__Lcom_wolfssl_wolfcrypt_Ecc_2Lcom_wolfssl_wolfcrypt_Ecc_2_3B_3J(
    JNIEnv* env, jclass class, jobject priv_object, jobject pub_object,
    jbyteArray out_buffer, jlongArray outlen)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && defined(HAVE_ECC)

    ecc_key* priv = NULL;
    ecc_key* pub  = NULL;
    byte* out = NULL;
    jlong tmpOutLen;

    priv = (ecc_key*) getNativeStruct(env, priv_object);
    if ((!priv) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    pub = (ecc_key*) getNativeStruct(env, pub_object);
    if ((!pub) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    LogStr("wc_ecc_shared_secret(priv=%p, pub=%p, out, outLen) = %d\n", priv,
        pub, ret);

    out = getByteArray(env, out_buffer);
    if (!out)
        ret = BAD_FUNC_ARG;
    else {
        (*env)->GetLongArrayRegion(env, outlen, 0, 1, &tmpOutLen);
        if ((*env)->ExceptionOccurred(env)) {
            releaseByteArray(env, out_buffer, out, 1);
            return BAD_FUNC_ARG;
        }

        ret = wc_ecc_shared_secret(priv, pub, out, (word32*) &tmpOutLen);

        (*env)->SetLongArrayRegion(env, outlen, 0, 1, &tmpOutLen);

        LogStr("out[%u]: [%p]\n", (word32)tmpOutLen, out);
        LogHex(out, 0, tmpOutLen);
    }

    releaseByteArray(env, out_buffer, out, ret);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1ecc_1import_1x963__Ljava_nio_ByteBuffer_2JLcom_wolfssl_wolfcrypt_Ecc_2(
    JNIEnv* env, jclass class, jobject in_buffer, jlong inLen,
    jobject key_object)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && defined(HAVE_ECC)

    ecc_key* key = NULL;
    byte* in = NULL;

    key = (ecc_key*) getNativeStruct(env, key_object);
    if ((!key) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    in = getDirectBufferAddress(env, in_buffer);
    if (!in)
        return BAD_FUNC_ARG;

    ret = wc_ecc_import_x963(in, (word32)inLen, key);

    LogStr("wc_ecc_import_x963(in, inLen, key=%p) = %d\n", key, ret);
    LogStr("in[%u]: [%p]\n", (word32)inLen, in);
    LogHex(in, 0, inLen);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1ecc_1import_1x963___3BJLcom_wolfssl_wolfcrypt_Ecc_2(
    JNIEnv* env, jclass class, jbyteArray in_buffer, jlong inLen,
    jobject key_object)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && defined(HAVE_ECC)

    ecc_key* key = NULL;
    byte* in = NULL;

    key = (ecc_key*) getNativeStruct(env, key_object);
    if ((!key) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    in = getByteArray(env, in_buffer);

    ret = (!in) ? BAD_FUNC_ARG
                : wc_ecc_import_x963(in, (word32)inLen, key);

    LogStr("wc_ecc_import_x963(in, inLen, key=%p) = %d\n", key, ret);
    LogStr("in[%u]: [%p]\n", (word32)inLen, in);
    LogHex(in, 0, inLen);

    releaseByteArray(env, in_buffer, in, 1);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1ecc_1export_1x963__Lcom_wolfssl_wolfcrypt_Ecc_2Ljava_nio_ByteBuffer_2_3J(
    JNIEnv* env, jclass class, jobject key_object, jobject out_buffer,
    jlongArray outLen)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && defined(HAVE_ECC)

    ecc_key* key = NULL;
    byte* out = NULL;
    jlong tmpOutLen;

    key = (ecc_key*) getNativeStruct(env, key_object);
    if ((!key) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    out = getDirectBufferAddress(env, out_buffer);
    if (!out)
        return BAD_FUNC_ARG;

    (*env)->GetLongArrayRegion(env, outLen, 0, 1, &tmpOutLen);
    if ((*env)->ExceptionOccurred(env)) {
        return BAD_FUNC_ARG;
    }

    ret = wc_ecc_export_x963(key, out, (word32*) &tmpOutLen);

    (*env)->SetLongArrayRegion(env, outLen, 0, 1, &tmpOutLen);

    LogStr("wc_ecc_export_x963(key=%p, out, outLen) = %d\n", key, ret);
    LogStr("out[%u]: [%p]\n", (word32)tmpOutLen, out);
    LogHex(out, 0, tmpOutLen);

#endif

    return ret;
}

JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_Fips_wc_1ecc_1export_1x963__Lcom_wolfssl_wolfcrypt_Ecc_2_3B_3J(
    JNIEnv* env, jclass class, jobject key_object, jbyteArray out_buffer,
    jlongArray outLen)
{
    jint ret = NOT_COMPILED_IN;

#if defined(HAVE_FIPS) && defined(HAVE_ECC)

    ecc_key* key = NULL;
    byte* out = NULL;
    jlong tmpOutLen;

    key = (ecc_key*) getNativeStruct(env, key_object);
    if ((!key) || ((*env)->ExceptionOccurred(env))) {
        return BAD_FUNC_ARG;
    }

    out = getByteArray(env, out_buffer);

    LogStr("wc_ecc_export_x963(key=%p, out, outLen) = %d\n", key, ret);

    if (!out) {
        ret = BAD_FUNC_ARG;
    } else {
        (*env)->GetLongArrayRegion(env, outLen, 0, 1, &tmpOutLen);
        if ((*env)->ExceptionOccurred(env)) {
            releaseByteArray(env, out_buffer, out, 1);
            return BAD_FUNC_ARG;
        }

        ret = wc_ecc_export_x963(key, out, (word32*) &tmpOutLen);

        (*env)->SetLongArrayRegion(env, outLen, 0, 1, &tmpOutLen);

        LogStr("out[%u]: [%p]\n", (word32)tmpOutLen, out);
        LogHex(out, 0, tmpOutLen);
    }


    releaseByteArray(env, out_buffer, out, ret);

#endif

    return ret;
}