# test_chacha20poly1305.py
#
# Copyright (C) 2006-2026 wolfSSL Inc.
#
# This file is part of wolfSSL.
#
# wolfSSL is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 3 of the License, or
# (at your option) any later version.
#
# wolfSSL is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1335, USA

# pylint: disable=redefined-outer-name

from wolfcrypt._ffi import lib as _lib

if _lib.CHACHA20_POLY1305_ENABLED:
    import pytest
    from wolfcrypt.utils import t2b
    from wolfcrypt.exceptions import WolfCryptError
    from binascii import unhexlify as h2b
    from wolfcrypt.ciphers import ChaCha20Poly1305   # ty: ignore[possibly-missing-import]

    def test_encrypt_decrypt():
        key = h2b("808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9f")
        iv = h2b("070000004041424344454647")
        aad = h2b("50515253c0c1c2c3c4c5c6c7")
        plaintext = h2b("4c616469657320616e642047656e746c656d656e206f662074686520636c617373206f66202739393a204966204920636f756c64206f6666657220796f75206f6e6c79206f6e652074697020666f7220746865206675747572652c2073756e73637265656e20776f756c642062652069742e")
        expected_ciphertext = h2b("d31a8d34648e60db7b86afbc53ef7ec2a4aded51296e08fea9e2b5a736ee62d63dbea45e8ca9671282fafb69da92728b1a71de0a9e060b2905d6a5b67ecd3b3692ddbd7f2d778b8c9803aee328091b58fab324e4fad675945585808b4831d7bc3ff4def08e4b7a9de576d26586cec64b6116")
        expected_authTag = h2b("1ae10b594f09e26a7e902ecbd0600691")

        chacha = ChaCha20Poly1305(key)
        ciphertext, authTag = chacha.encrypt(aad, iv, plaintext)
        assert ciphertext == expected_ciphertext
        assert authTag == expected_authTag

        decrypted = chacha.decrypt(aad, iv, authTag, ciphertext)
        assert decrypted == t2b("Ladies and Gentlemen of the class of '99: If I could offer you only one tip for the future, sunscreen would be it.")

    def test_invalid_key_size():
        with pytest.raises(ValueError):
            ChaCha20Poly1305(b"tooshort")

    def test_encrypt_invalid_iv_length():
        key = h2b("808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9f")
        chacha = ChaCha20Poly1305(key)
        with pytest.raises(ValueError):
            chacha.encrypt(b"aad", b"short", b"plaintext")

    def test_decrypt_invalid_iv_length():
        key = h2b("808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9f")
        chacha = ChaCha20Poly1305(key)
        with pytest.raises(ValueError):
            chacha.decrypt(b"aad", b"short", b"\x00" * 16, b"ciphertext")

    def test_decrypt_invalid_tag_length():
        key = h2b("808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9f")
        chacha = ChaCha20Poly1305(key)
        with pytest.raises(ValueError):
            chacha.decrypt(b"aad", b"\x00" * 12, b"short", b"ciphertext")

    def test_decrypt_bad_tag():
        key = h2b("808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9f")
        iv = h2b("070000004041424344454647")
        aad = h2b("50515253c0c1c2c3c4c5c6c7")
        plaintext = b"hello world"

        chacha = ChaCha20Poly1305(key)
        ciphertext, authTag = chacha.encrypt(aad, iv, plaintext)

        bad_tag = b"\x00" * 16
        with pytest.raises(WolfCryptError):
            chacha.decrypt(aad, iv, bad_tag, ciphertext)