using System;

namespace Renci.SshNet.Security.Cryptography.Ciphers
{
    /// <summary>
    /// Implements 3DES cipher algorithm.
    /// </summary>
    public sealed class TripleDesCipher : DesCipher
    {
        private int[] _encryptionKey1;
        private int[] _encryptionKey2;
        private int[] _encryptionKey3;
        private int[] _decryptionKey1;
        private int[] _decryptionKey2;
        private int[] _decryptionKey3;

        /// <summary>
        /// Initializes a new instance of the <see cref="TripleDesCipher"/> class.
        /// </summary>
        /// <param name="key">The key.</param>
        /// <param name="mode">The mode.</param>
        /// <param name="padding">The padding.</param>
        /// <exception cref="ArgumentNullException"><paramref name="key"/> is <c>null</c>.</exception>
        public TripleDesCipher(byte[] key, CipherMode mode, CipherPadding padding)
            : base(key, mode, padding)
        {
        }

        /// <summary>
        /// Encrypts the specified region of the input byte array and copies the encrypted data to the specified region of the output byte array.
        /// </summary>
        /// <param name="inputBuffer">The input data to encrypt.</param>
        /// <param name="inputOffset">The offset into the input byte array from which to begin using data.</param>
        /// <param name="inputCount">The number of bytes in the input byte array to use as data.</param>
        /// <param name="outputBuffer">The output to which to write encrypted data.</param>
        /// <param name="outputOffset">The offset into the output byte array from which to begin writing data.</param>
        /// <returns>
        /// The number of bytes encrypted.
        /// </returns>
        public override int EncryptBlock(byte[] inputBuffer, int inputOffset, int inputCount, byte[] outputBuffer, int outputOffset)
        {
            if ((inputOffset + BlockSize) > inputBuffer.Length)
            {
                throw new IndexOutOfRangeException("input buffer too short");
            }

            if ((outputOffset + BlockSize) > outputBuffer.Length)
            {
                throw new IndexOutOfRangeException("output buffer too short");
            }

            if (_encryptionKey1 is null || _encryptionKey2 is null || _encryptionKey3 is null)
            {
                var part1 = new byte[8];
                var part2 = new byte[8];

                Buffer.BlockCopy(Key, 0, part1, 0, 8);
                Buffer.BlockCopy(Key, 8, part2, 0, 8);

                _encryptionKey1 = GenerateWorkingKey(encrypting: true, part1);
                _encryptionKey2 = GenerateWorkingKey(encrypting: false, part2);

                if (Key.Length == 24)
                {
                    var part3 = new byte[8];
                    Buffer.BlockCopy(Key, 16, part3, 0, 8);

                    _encryptionKey3 = GenerateWorkingKey(encrypting: true, part3);
                }
                else
                {
                    _encryptionKey3 = _encryptionKey1;
                }
            }

            var temp = new byte[BlockSize];

            DesFunc(_encryptionKey1, inputBuffer, inputOffset, temp, 0);
            DesFunc(_encryptionKey2, temp, 0, temp, 0);
            DesFunc(_encryptionKey3, temp, 0, outputBuffer, outputOffset);

            return BlockSize;
        }

        /// <summary>
        /// Decrypts the specified region of the input byte array and copies the decrypted data to the specified region of the output byte array.
        /// </summary>
        /// <param name="inputBuffer">The input data to decrypt.</param>
        /// <param name="inputOffset">The offset into the input byte array from which to begin using data.</param>
        /// <param name="inputCount">The number of bytes in the input byte array to use as data.</param>
        /// <param name="outputBuffer">The output to which to write decrypted data.</param>
        /// <param name="outputOffset">The offset into the output byte array from which to begin writing data.</param>
        /// <returns>
        /// The number of bytes decrypted.
        /// </returns>
        public override int DecryptBlock(byte[] inputBuffer, int inputOffset, int inputCount, byte[] outputBuffer, int outputOffset)
        {
            if ((inputOffset + BlockSize) > inputBuffer.Length)
            {
                throw new IndexOutOfRangeException("input buffer too short");
            }

            if ((outputOffset + BlockSize) > outputBuffer.Length)
            {
                throw new IndexOutOfRangeException("output buffer too short");
            }

            if (_decryptionKey1 is null || _decryptionKey2 is null || _decryptionKey3 is null)
            {
                var part1 = new byte[8];
                var part2 = new byte[8];

                Buffer.BlockCopy(Key, 0, part1, 0, 8);
                Buffer.BlockCopy(Key, 8, part2, 0, 8);

                _decryptionKey1 = GenerateWorkingKey(encrypting: false, part1);
                _decryptionKey2 = GenerateWorkingKey(encrypting: true, part2);

                if (Key.Length == 24)
                {
                    var part3 = new byte[8];
                    Buffer.BlockCopy(Key, 16, part3, 0, 8);

                    _decryptionKey3 = GenerateWorkingKey(encrypting: false, part3);
                }
                else
                {
                    _decryptionKey3 = _decryptionKey1;
                }
            }

            var temp = new byte[BlockSize];

            DesFunc(_decryptionKey3, inputBuffer, inputOffset, temp, 0);
            DesFunc(_decryptionKey2, temp, 0, temp, 0);
            DesFunc(_decryptionKey1, temp, 0, outputBuffer, outputOffset);

            return BlockSize;
        }

        /// <summary>
        /// Validates the key.
        /// </summary>
        protected override void ValidateKey()
        {
            var keySize = Key.Length * 8;

            if (keySize is not (128 or 128 + 64))
            {
                throw new ArgumentException(string.Format("KeySize '{0}' is not valid for this algorithm.", keySize));
            }
        }
    }
}