# Copyright 2013 Donald Stufft and individual contributors
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

from __future__ import absolute_import, division, print_function

import binascii
import json
import os
import sys
import unicodedata as ud

from hypothesis import given, settings
from hypothesis.strategies import integers, text

import pytest

from six import unichr

import nacl.bindings
import nacl.encoding
import nacl.exceptions as exc
import nacl.pwhash

_all_unicode = u''.join(unichr(i) for i in range(sys.maxunicode))
PASSWD_CHARS = u''.join(c for c in _all_unicode
                        if (ud.category(c).startswith('L') or
                            ud.category(c).startswith('N') or
                            ud.category(c) == 'Zs'
                            )
                        )
# Select Letters, number representations and spacing characters


def argon2i_modular_crypt_ref():
    DATA = "modular_crypt_argon2i_hashes.json"
    path = os.path.join(os.path.dirname(__file__), "data", DATA)
    jvectors = json.load(open(path))
    vectors = [(x["pwhash"], x["passwd"])
               for x in jvectors if x["mode"] == "crypt"]
    return vectors


def argon2i_raw_ref():
    DATA = "raw_argon2i_hashes.json"
    path = os.path.join(os.path.dirname(__file__), "data", DATA)
    jvectors = json.load(open(path))
    vectors = [(x["dgst_len"], x["passwd"], x["salt"], x["iters"],
                x["maxmem"], x["pwhash"])
               for x in jvectors if x["mode"] == "raw"]
    return vectors


def argon2id_modular_crypt_ref():
    DATA = "modular_crypt_argon2id_hashes.json"
    path = os.path.join(os.path.dirname(__file__), "data", DATA)
    jvectors = json.load(open(path))
    vectors = [(x["pwhash"], x["passwd"])
               for x in jvectors if (x["mode"] == "crypt" and
                                     x["construct"] == "argon2id")
               ]
    return vectors


def argon2id_raw_ref():
    DATA = "raw_argon2id_hashes.json"
    path = os.path.join(os.path.dirname(__file__), "data", DATA)
    jvectors = json.load(open(path))
    vectors = [(x["dgst_len"], x["passwd"], x["salt"], x["iters"],
                x["maxmem"], x["pwhash"])
               for x in jvectors if (x["mode"] == "raw" and
                                     x["construct"] == "argon2id")
               ]
    return vectors


@pytest.mark.skipif(not nacl.pwhash.scrypt.AVAILABLE,
                    reason="Requires full build of libsodium")
@pytest.mark.parametrize(
    ("size", "password", "salt", "opslimit", "memlimit", "expected"),
    [
        (
            32,
            b"The quick brown fox jumps over the lazy dog.",
            b"ef537f25c895bfa782526529a9b63d97",
            20000,
            (2 ** 20) * 100,
            (b"\x10e>\xc8A8\x11\xde\x07\xf1\x0f\x98"
             b"EG\xe6}V]\xd4yN\xae\xd3P\x87yP\x1b\xc7+n*")
        ),
    ],
)
def test_kdf_scryptsalsa208sha256(size, password, salt,
                                  opslimit, memlimit, expected):
    res = nacl.pwhash.kdf_scryptsalsa208sha256(size, password, salt,
                                               opslimit, memlimit)
    assert res == expected


@pytest.mark.skipif(not nacl.pwhash.scrypt.AVAILABLE,
                    reason="Requires full build of libsodium")
@pytest.mark.parametrize(("password", ), [
    (
        b"The quick brown fox jumps over the lazy dog.",
    ),
])
def test_scryptsalsa208sha256_random(password):
    h1 = nacl.pwhash.scryptsalsa208sha256_str(password)
    h2 = nacl.pwhash.scryptsalsa208sha256_str(password)
    assert h1 != h2


@pytest.mark.skipif(not nacl.pwhash.scrypt.AVAILABLE,
                    reason="Requires full build of libsodium")
@pytest.mark.parametrize(("password", ), [
    (
        b"The quick brown fox jumps over the lazy dog.",
    ),
])
def test_scryptsalsa208sha256_verify(password):
    assert nacl.pwhash.verify_scryptsalsa208sha256(
        nacl.pwhash.scryptsalsa208sha256_str(password),
        password
    )


@pytest.mark.skipif(not nacl.pwhash.scrypt.AVAILABLE,
                    reason="Requires full build of libsodium")
@pytest.mark.parametrize(("password", ), [
    (
        b"The quick brown fox jumps over the lazy dog.",
    ),
])
def test_scryptsalsa208sha256_verify_incorrect(password):
    with pytest.raises(exc.InvalidkeyError):
        nacl.pwhash.verify_scryptsalsa208sha256(
            nacl.pwhash.scryptsalsa208sha256_str(password),
            password.replace(b'dog', b'cat')
        )


@pytest.mark.skipif(not nacl.pwhash.scrypt.AVAILABLE,
                    reason="Requires full build of libsodium")
@pytest.mark.parametrize(
    ("size", "password", "salt", "opslimit", "memlimit"),
    [
        (
            32,
            b"The quick brown fox jumps over the lazy dog.",
            b"ef537f25c895bfa782526529a9",
            20000,
            (2 ** 20) * 100
        ),
    ],
)
def test_wrong_salt_length(size, password, salt,
                           opslimit, memlimit):
    with pytest.raises(exc.ValueError):
        nacl.pwhash.kdf_scryptsalsa208sha256(size, password, salt,
                                             opslimit, memlimit)


@pytest.mark.skipif(not nacl.pwhash.scrypt.AVAILABLE,
                    reason="Requires full build of libsodium")
@pytest.mark.parametrize(
    ("passwd_hash", "password"),
    [
        (
            b"Too short (and wrong) hash",
            b"a password",
        ),
    ],
)
def test_wrong_hash_length(passwd_hash, password):
    with pytest.raises(exc.ValueError):
        nacl.pwhash.verify_scryptsalsa208sha256(passwd_hash,
                                                password)


@pytest.mark.skipif(not nacl.pwhash.scrypt.AVAILABLE,
                    reason="Requires full build of libsodium")
@pytest.mark.parametrize(
    ("size", "password", "salt", "opslimit", "memlimit"),
    [
        (
            32,
            b"The quick brown fox jumps over the lazy dog.",
            b"ef537f25c895bfa782526529a9b6",
            20000,
            (2 ** 20) * 100
        ),
    ],
)
def test_kdf_wrong_salt_length(size, password, salt,
                               opslimit, memlimit):
    with pytest.raises(exc.ValueError):
        nacl.pwhash.kdf_scryptsalsa208sha256(size, password, salt,
                                             opslimit, memlimit)


@pytest.mark.skipif(not nacl.pwhash.scrypt.AVAILABLE,
                    reason="Requires full build of libsodium")
@pytest.mark.parametrize(
    ("passwd_hash", "password"),
    [
        (
            b"Too short (and wrong) hash",
            b"another password",
        ),
    ],
)
def test_str_verify_wrong_hash_length(passwd_hash, password):
    with pytest.raises(exc.ValueError):
        nacl.pwhash.verify_scryptsalsa208sha256(passwd_hash,
                                                password)


@pytest.mark.skipif(not nacl.pwhash.scrypt.AVAILABLE,
                    reason="Requires full build of libsodium")
@pytest.mark.parametrize(
    ("size", "password", "salt", "opslimit", "memlimit", "expected"),
    [
        (
            32,
            b"The quick brown fox jumps over the lazy dog.",
            b"ef537f25c895bfa782526529a9b63d97",
            20000,
            (2 ** 20) * 100,
            (b"\x10e>\xc8A8\x11\xde\x07\xf1\x0f\x98"
             b"EG\xe6}V]\xd4yN\xae\xd3P\x87yP\x1b\xc7+n*")
        ),
    ],
)
def test_scrypt_kdf(size, password, salt,
                    opslimit, memlimit, expected):
    res = nacl.pwhash.scrypt.kdf(size, password, salt,
                                 opslimit, memlimit)
    assert res == expected


@pytest.mark.skipif(not nacl.pwhash.scrypt.AVAILABLE,
                    reason="Requires full build of libsodium")
@pytest.mark.parametrize(("password", ), [
    (
        b"The quick brown fox jumps over the lazy dog.",
    ),
])
def test_scrypt_random(password):
    h1 = nacl.pwhash.scrypt.str(password)
    h2 = nacl.pwhash.scrypt.str(password)
    assert h1 != h2


@pytest.mark.skipif(not nacl.pwhash.scrypt.AVAILABLE,
                    reason="Requires full build of libsodium")
@pytest.mark.parametrize(("password", ), [
    (
        b"The quick brown fox jumps over the lazy dog.",
    ),
])
def test_scrypt_verify(password):
    assert nacl.pwhash.scrypt.verify(
        nacl.pwhash.scrypt.str(password),
        password
    )


@pytest.mark.skipif(not nacl.pwhash.scrypt.AVAILABLE,
                    reason="Requires full build of libsodium")
@pytest.mark.parametrize(("password", ), [
    (
        b"The quick brown fox jumps over the lazy dog.",
    ),
])
def test_scrypt_verify_incorrect(password):
    with pytest.raises(exc.InvalidkeyError):
        nacl.pwhash.scrypt.verify(
            nacl.pwhash.scrypt.str(password),
            password.replace(b'dog', b'cat')
        )


@pytest.mark.skipif(not nacl.pwhash.scrypt.AVAILABLE,
                    reason="Requires full build of libsodium")
@pytest.mark.parametrize(
    ("size", "password", "salt", "opslimit", "memlimit"),
    [
        (
            32,
            b"The quick brown fox jumps over the lazy dog.",
            b"ef537f25c895bfa782526529a9",
            20000,
            (2 ** 20) * 100
        ),
    ],
)
def test_wrong_scrypt_salt_length(size, password, salt,
                                  opslimit, memlimit):
    with pytest.raises(exc.ValueError):
        nacl.pwhash.scrypt.kdf(size, password, salt,
                               opslimit, memlimit)


@pytest.mark.skipif(not nacl.pwhash.scrypt.AVAILABLE,
                    reason="Requires full build of libsodium")
@pytest.mark.parametrize(
    ("passwd_hash", "password"),
    [
        (
            b"Too short (and wrong) hash",
            b"a password",
        ),
    ],
)
def test_wrong_scrypt_hash_length(passwd_hash, password):
    with pytest.raises(exc.ValueError):
        nacl.pwhash.scrypt.verify(passwd_hash,
                                  password)


@pytest.mark.skipif(not nacl.pwhash.scrypt.AVAILABLE,
                    reason="Requires full build of libsodium")
@pytest.mark.parametrize(
    ("size", "password", "salt", "opslimit", "memlimit"),
    [
        (
            32,
            b"The quick brown fox jumps over the lazy dog.",
            b"ef537f25c895bfa782526529a9b6",
            20000,
            (2 ** 20) * 100
        ),
    ],
)
def test_scrypt_kdf_wrong_salt_length(size, password, salt,
                                      opslimit, memlimit):
    with pytest.raises(exc.ValueError):
        nacl.pwhash.scrypt.kdf(size, password, salt,
                               opslimit, memlimit)


@pytest.mark.parametrize(
    ("opslimit", "memlimit", "n", "r", "p"),
    [
        (
            32768,
            2 * (2 ** 20),
            10,
            8,
            1
        ),
        (
            32768,
            8 * (2 ** 10),
            3,
            8,
            128
        ),
        (
            65536,
            (2 ** 20) * 2,
            11,
            8,
            1
        ),
        (
            262144,
            (2 ** 20) * 2,
            11,
            8,
            4
        ),
        (
            2 * (2 ** 20),
            2 * (2 ** 20),
            11,
            8,
            32
        ),
    ],
)
def test_variable_limits(opslimit, memlimit, n, r, p):
    rn, rr, rp = nacl.bindings.nacl_bindings_pick_scrypt_params(opslimit,
                                                                memlimit)
    assert rn == n
    assert rr == r
    assert rp == p


@pytest.mark.skipif(not nacl.pwhash.scrypt.AVAILABLE,
                    reason="Requires full build of libsodium")
@pytest.mark.parametrize(
    ("passwd_hash", "password"),
    [
        (
            b"Too short (and wrong) hash",
            b"another password",
        ),
    ],
)
def test_scrypt_str_verify_wrong_hash_length(passwd_hash, password):
    with pytest.raises(exc.ValueError):
        nacl.pwhash.scrypt.verify(passwd_hash,
                                  password)


@pytest.mark.parametrize(("password_hash", "password"),
                         argon2i_modular_crypt_ref() +
                         argon2id_modular_crypt_ref()
                         )
def test_str_verify_argon2_ref(password_hash, password):
    pw_hash = password_hash.encode('ascii')
    pw = password.encode('ascii')
    res = nacl.pwhash.argon2id.verify(pw_hash, pw)
    assert res is True


@pytest.mark.parametrize(("password_hash", "password"),
                         argon2i_modular_crypt_ref() +
                         argon2id_modular_crypt_ref()
                         )
def test_str_verify_argon2_ref_fail(password_hash, password):
    pw_hash = password_hash.encode('ascii')
    pw = ('a' + password).encode('ascii')
    with pytest.raises(exc.InvalidkeyError):
        nacl.pwhash.argon2id.verify(pw_hash, pw)


@given(text(alphabet=PASSWD_CHARS, min_size=5, max_size=20),
       integers(min_value=4,
                max_value=6),
       integers(min_value=1024 * 1024,
                max_value=16 * 1024 * 1024)
       )
@settings(deadline=None, max_examples=20)
def test_argon2i_str_and_verify(password, ops, mem):
    _psw = password.encode('utf-8')
    pw_hash = nacl.pwhash.argon2i.str(_psw, opslimit=ops, memlimit=mem)
    res = nacl.pwhash.argon2i.verify(pw_hash, _psw)
    assert res is True


@given(text(alphabet=PASSWD_CHARS, min_size=5, max_size=20),
       integers(min_value=1,
                max_value=4),
       integers(min_value=1024 * 1024,
                max_value=16 * 1024 * 1024)
       )
@settings(deadline=None, max_examples=20)
def test_argon2id_str_and_verify(password, ops, mem):
    _psw = password.encode('utf-8')
    pw_hash = nacl.pwhash.argon2id.str(_psw, opslimit=ops, memlimit=mem)
    res = nacl.pwhash.argon2id.verify(pw_hash, _psw)
    assert res is True


@given(text(alphabet=PASSWD_CHARS, min_size=5, max_size=20),
       integers(min_value=4,
                max_value=6),
       integers(min_value=1024 * 1024,
                max_value=16 * 1024 * 1024)
       )
@settings(deadline=None, max_examples=20)
def test_argon2i_str_and_verify_fail(password, ops, mem):
    _psw = password.encode('utf-8')
    pw_hash = nacl.pwhash.argon2i.str(_psw, opslimit=ops, memlimit=mem)
    with pytest.raises(exc.InvalidkeyError):
        nacl.pwhash.argon2i.verify(pw_hash, b'A' + _psw)


@given(text(alphabet=PASSWD_CHARS, min_size=5, max_size=20))
@settings(deadline=None, max_examples=5)
def test_pwhash_str_and_verify(password):
    _psw = password.encode('utf-8')

    a2i_hash = nacl.pwhash.argon2i.str(
        _psw,
        opslimit=nacl.pwhash.argon2i.OPSLIMIT_INTERACTIVE,
        memlimit=nacl.pwhash.argon2i.MEMLIMIT_INTERACTIVE
    )
    a2i_res = nacl.pwhash.verify(a2i_hash, _psw)
    assert a2i_res is True

    a2id_hash = nacl.pwhash.argon2id.str(
        _psw,
        opslimit=nacl.pwhash.argon2id.OPSLIMIT_INTERACTIVE,
        memlimit=nacl.pwhash.argon2id.MEMLIMIT_INTERACTIVE
    )
    a2id_res = nacl.pwhash.verify(a2id_hash, _psw)
    assert a2id_res is True


@pytest.mark.skipif(not nacl.pwhash.scrypt.AVAILABLE,
                    reason="Requires full build of libsodium")
@given(text(alphabet=PASSWD_CHARS, min_size=5, max_size=20))
@settings(deadline=None, max_examples=5)
def test_pwhash_scrypt_str_and_verify(password):
    _psw = password.encode('utf-8')

    scrypt_hash = nacl.pwhash.scrypt.str(
        _psw,
        opslimit=nacl.pwhash.scrypt.OPSLIMIT_INTERACTIVE,
        memlimit=nacl.pwhash.scrypt.MEMLIMIT_INTERACTIVE
    )
    scrypt_res = nacl.pwhash.verify(scrypt_hash, _psw)
    assert scrypt_res is True


def test_invalid_modular_scrypt_prefix():
    psw = b'always invalid password'
    invalid_modular_hash = b'$invalid_prefix$'
    with pytest.raises(exc.InvalidkeyError):
        nacl.pwhash.verify(invalid_modular_hash, psw)


def test_crypt_prefix_error():
    psw = b'always invalid password'
    invalid_modular_hash = b'$invalid_prefix$'
    with pytest.raises(exc.CryptPrefixError):
        nacl.pwhash.verify(invalid_modular_hash, psw)


@pytest.mark.parametrize(("dk_size", "password", "salt",
                          "iters", "mem_kb", "pwhash"),
                         argon2i_raw_ref())
def test_argon2i_kdf(dk_size, password, salt, iters, mem_kb, pwhash):
    dk = nacl.pwhash.argon2i.kdf(dk_size, password.encode('utf-8'),
                                 salt.encode('utf-8'), iters, 1024 * mem_kb)
    ref = binascii.unhexlify(pwhash)
    assert dk == ref


@pytest.mark.parametrize(("dk_size", "password", "salt",
                          "iters", "mem_kb", "pwhash"),
                         argon2id_raw_ref())
def test_argon2_kdf_alg_argon2id(dk_size, password, salt, iters, mem_kb,
                                 pwhash):
    dk = nacl.pwhash.argon2id.kdf(dk_size, password.encode('utf-8'),
                                  salt.encode('utf-8'), iters, 1024 * mem_kb)
    ref = binascii.unhexlify(pwhash)
    assert dk == ref


raising_argon2_parameters = [
    #  wrong salt length:
    (20, "aPassword", 3 * "salt", 3, 256),
    #  too short output:
    (15, "aPassword", 4 * "salt", 4, 256),
    #  too long output:
    (0xFFFFFFFF + 1, "aPassword", 4 * "salt", 4, 256),
    #  too high interation count:
    (20, "aPassword", 4 * "salt", 0xFFFFFFFF + 1, 256),
    #  too low memory usage:
    (20, "aPassword", 4 * "salt", 4, 2),
    #  too high memory usage:
    (20, "aPassword", 4 * "salt", 4, 0xFFFFFFFF + 1),
]


@pytest.mark.parametrize(
    ("dk_size", "password", "salt", "iters", "mem_kb"),
    raising_argon2_parameters +
    [
        #  too low iteration count:
        (20, "aPassword", 4 * "salt", 1, 256),
    ]
)
def test_argon2i_kdf_invalid_parms(dk_size, password, salt, iters, mem_kb):
    with pytest.raises(exc.ValueError):
        nacl.pwhash.argon2i.kdf(dk_size, password.encode('utf-8'),
                                salt.encode('utf-8'), iters, 1024 * mem_kb)


@pytest.mark.parametrize(
    ("dk_size", "password", "salt", "iters", "mem_kb"),
    raising_argon2_parameters +
    [
        #  too low iteration count:
        (20, "aPassword", 4 * "salt", 0, 256),
    ]
)
def test_argon2id_kdf_invalid_parms(dk_size, password, salt, iters, mem_kb):
    with pytest.raises(exc.ValueError):
        nacl.pwhash.argon2id.kdf(dk_size, password.encode('utf-8'),
                                 salt.encode('utf-8'), iters, 1024 * mem_kb)


def test_check_limits_for_unknown_algorithm():
    from nacl.bindings.crypto_pwhash import _check_argon2_limits_alg
    with pytest.raises(exc.TypeError):
        _check_argon2_limits_alg(4, 1024, -1)


@pytest.mark.skipif(nacl.pwhash.scrypt.AVAILABLE,
                    reason="Requires minimal build of libsodium")
def test_scryptsalsa208sha256_unavailable():
    empty = b""

    with pytest.raises(exc.UnavailableError):
        nacl.pwhash.kdf_scryptsalsa208sha256(0, empty, empty)
    with pytest.raises(exc.UnavailableError):
        nacl.pwhash.scryptsalsa208sha256_str(empty)
    with pytest.raises(exc.UnavailableError):
        nacl.pwhash.verify_scryptsalsa208sha256(empty, empty)


@pytest.mark.skipif(nacl.pwhash.scrypt.AVAILABLE,
                    reason="Requires minimal build of libsodium")
def test_scrypt_unavailable():
    empty = b""

    with pytest.raises(exc.UnavailableError):
        nacl.pwhash.scrypt.kdf(0, empty, empty)
    with pytest.raises(exc.UnavailableError):
        nacl.pwhash.scrypt.str(empty)
    with pytest.raises(exc.UnavailableError):
        nacl.pwhash.scrypt.verify(empty, empty)