// Licensed to the .NET Foundation under one or more agreements.
// The .NET Foundation licenses this file to you under the MIT license.
 
using Microsoft.AspNetCore.Cryptography;
using Microsoft.AspNetCore.Cryptography.Cng;
 
namespace Microsoft.AspNetCore.DataProtection.SP800_108;
 
/// <summary>
/// Provides an implementation of the SP800-108-CTR-HMACSHA512 key derivation function.
/// This class assumes at least Windows 7 / Server 2008 R2.
/// </summary>
/// <remarks>
/// More info at http://csrc.nist.gov/publications/nistpubs/800-108/sp800-108.pdf, Sec. 5.1.
/// </remarks>
internal static unsafe class SP800_108_CTR_HMACSHA512Util
{
    // Creates a provider with an empty key.
    public static ISP800_108_CTR_HMACSHA512Provider CreateEmptyProvider()
    {
        byte dummy;
        return CreateProvider(pbKdk: &dummy, cbKdk: 0);
    }
 
    // Creates a provider from the given key.
    public static ISP800_108_CTR_HMACSHA512Provider CreateProvider(byte* pbKdk, uint cbKdk)
    {
        if (OSVersionUtil.IsWindows8OrLater())
        {
            return new Win8SP800_108_CTR_HMACSHA512Provider(pbKdk, cbKdk);
        }
        else
        {
            return new Win7SP800_108_CTR_HMACSHA512Provider(pbKdk, cbKdk);
        }
    }
 
    // Creates a provider from the given secret.
    public static ISP800_108_CTR_HMACSHA512Provider CreateProvider(Secret kdk)
    {
        var secretLengthInBytes = checked((uint)kdk.Length);
        if (secretLengthInBytes == 0)
        {
            return CreateEmptyProvider();
        }
        else
        {
            fixed (byte* pbPlaintextSecret = new byte[secretLengthInBytes])
            {
                try
                {
                    kdk.WriteSecretIntoBuffer(pbPlaintextSecret, checked((int)secretLengthInBytes));
                    return CreateProvider(pbPlaintextSecret, secretLengthInBytes);
                }
                finally
                {
                    UnsafeBufferUtil.SecureZeroMemory(pbPlaintextSecret, secretLengthInBytes);
                }
            }
        }
    }
}