/*

 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.

 *

 * This code is free software; you can redistribute it and/or modify it

 * under the terms of the GNU General Public License version 2 only, as

 * published by the Free Software Foundation.  Oracle designates this

 * particular file as subject to the "Classpath" exception as provided

 * by Oracle in the LICENSE file that accompanied this code.

 *

 * This code is distributed in the hope that it will be useful, but WITHOUT

 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or

 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License

 * version 2 for more details (a copy is included in the LICENSE file that

 * accompanied this code).

 *

 * You should have received a copy of the GNU General Public License version

 * 2 along with this work; if not, write to the Free Software Foundation,

 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

 *

 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA

 * or visit www.oracle.com if you need additional information or have any

 * questions.

 */

package javax.crypto;

import java.util.StringTokenizer;

import java.util.NoSuchElementException;

import java.security.AlgorithmParameters;

import java.security.Provider;

import java.security.Key;

import java.security.SecureRandom;

import java.security.NoSuchAlgorithmException;

import java.security.NoSuchProviderException;

import java.security.InvalidKeyException;

import java.security.InvalidAlgorithmParameterException;

import java.security.ProviderException;

import java.security.spec.AlgorithmParameterSpec;

import java.nio.ByteBuffer;

/**

 * This class defines the <i>Service Provider Interface</i> (<b>SPI</b>)

 * for the <code>Cipher</code> class.

 * All the abstract methods in this class must be implemented by each

 * cryptographic service provider who wishes to supply the implementation

 * of a particular cipher algorithm.

 *

 * <p>In order to create an instance of <code>Cipher</code>, which

 * encapsulates an instance of this <code>CipherSpi</code> class, an

 * application calls one of the

 * {@link Cipher#getInstance(java.lang.String) getInstance}

 * factory methods of the

 * {@link Cipher Cipher} engine class and specifies the requested

 * <i>transformation</i>.

 * Optionally, the application may also specify the name of a provider.

 *

 * <p>A <i>transformation</i> is a string that describes the operation (or

 * set of operations) to be performed on the given input, to produce some

 * output. A transformation always includes the name of a cryptographic

 * algorithm (e.g., <i>DES</i>), and may be followed by a feedback mode and

 * padding scheme.

 *

 * <p> A transformation is of the form:<p>

 *

 * <ul>

 * <li>"<i>algorithm/mode/padding</i>" or

 * <p>

 * <li>"<i>algorithm</i>"

 * </ul>

 *

 * <P> (in the latter case,

 * provider-specific default values for the mode and padding scheme are used).

 * For example, the following is a valid transformation:<p>

 *

 * <pre>

 *     Cipher c = Cipher.getInstance("<i>DES/CBC/PKCS5Padding</i>");

 * </pre>

 *

 * <p>A provider may supply a separate class for each combination

 * of <i>algorithm/mode/padding</i>, or may decide to provide more generic

 * classes representing sub-transformations corresponding to

 * <i>algorithm</i> or <i>algorithm/mode</i> or <i>algorithm//padding</i>

 * (note the double slashes),

 * in which case the requested mode and/or padding are set automatically by

 * the <code>getInstance</code> methods of <code>Cipher</code>, which invoke

 * the {@link #engineSetMode(java.lang.String) engineSetMode} and

 * {@link #engineSetPadding(java.lang.String) engineSetPadding}

 * methods of the provider's subclass of <code>CipherSpi</code>.

 *

 * <p>A <code>Cipher</code> property in a provider master class may have one of

 * the following formats:

 *

 * <ul>

 *

 * <li>

 * <pre>

 *     // provider's subclass of "CipherSpi" implements "algName" with

 *     // pluggable mode and padding

 *     <code>Cipher.</code><i>algName</i>

 * </pre>

 *

 * <li>

 * <pre>

 *     // provider's subclass of "CipherSpi" implements "algName" in the

 *     // specified "mode", with pluggable padding

 *     <code>Cipher.</code><i>algName/mode</i>

 * </pre>

 *

 * <li>

 * <pre>

 *     // provider's subclass of "CipherSpi" implements "algName" with the

 *     // specified "padding", with pluggable mode

 *     <code>Cipher.</code><i>algName//padding</i>

 * </pre>

 *

 * <li>

 * <pre>

 *     // provider's subclass of "CipherSpi" implements "algName" with the

 *     // specified "mode" and "padding"

 *     <code>Cipher.</code><i>algName/mode/padding</i>

 * </pre>

 *

 * </ul>

 *

 * <p>For example, a provider may supply a subclass of <code>CipherSpi</code>

 * that implements <i>DES/ECB/PKCS5Padding</i>, one that implements

 * <i>DES/CBC/PKCS5Padding</i>, one that implements

 * <i>DES/CFB/PKCS5Padding</i>, and yet another one that implements

 * <i>DES/OFB/PKCS5Padding</i>. That provider would have the following

 * <code>Cipher</code> properties in its master class:<p>

 *

 * <ul>

 *

 * <li>

 * <pre>

 *     <code>Cipher.</code><i>DES/ECB/PKCS5Padding</i>

 * </pre>

 *

 * <li>

 * <pre>

 *     <code>Cipher.</code><i>DES/CBC/PKCS5Padding</i>

 * </pre>

 *

 * <li>

 * <pre>

 *     <code>Cipher.</code><i>DES/CFB/PKCS5Padding</i>

 * </pre>

 *

 * <li>

 * <pre>

 *     <code>Cipher.</code><i>DES/OFB/PKCS5Padding</i>

 * </pre>

 *

 * </ul>

 *

 * <p>Another provider may implement a class for each of the above modes

 * (i.e., one class for <i>ECB</i>, one for <i>CBC</i>, one for <i>CFB</i>,

 * and one for <i>OFB</i>), one class for <i>PKCS5Padding</i>,

 * and a generic <i>DES</i> class that subclasses from <code>CipherSpi</code>.

 * That provider would have the following

 * <code>Cipher</code> properties in its master class:<p>

 *

 * <ul>

 *

 * <li>

 * <pre>

 *     <code>Cipher.</code><i>DES</i>

 * </pre>

 *

 * </ul>

 *

 * <p>The <code>getInstance</code> factory method of the <code>Cipher</code>

 * engine class follows these rules in order to instantiate a provider's

 * implementation of <code>CipherSpi</code> for a

 * transformation of the form "<i>algorithm</i>":

 *

 * <ol>

 * <li>

 * Check if the provider has registered a subclass of <code>CipherSpi</code>

 * for the specified "<i>algorithm</i>".

 * <p>If the answer is YES, instantiate this

 * class, for whose mode and padding scheme default values (as supplied by

 * the provider) are used.

 * <p>If the answer is NO, throw a <code>NoSuchAlgorithmException</code>

 * exception.

 * </ol>

 *

 * <p>The <code>getInstance</code> factory method of the <code>Cipher</code>

 * engine class follows these rules in order to instantiate a provider's

 * implementation of <code>CipherSpi</code> for a

 * transformation of the form "<i>algorithm/mode/padding</i>":

 *

 * <ol>

 * <li>

 * Check if the provider has registered a subclass of <code>CipherSpi</code>

 * for the specified "<i>algorithm/mode/padding</i>" transformation.

 * <p>If the answer is YES, instantiate it.

 * <p>If the answer is NO, go to the next step.<p>

 * <li>

 * Check if the provider has registered a subclass of <code>CipherSpi</code>

 * for the sub-transformation "<i>algorithm/mode</i>".

 * <p>If the answer is YES, instantiate it, and call

 * <code>engineSetPadding(<i>padding</i>)</code> on the new instance.

 * <p>If the answer is NO, go to the next step.<p>

 * <li>

 * Check if the provider has registered a subclass of <code>CipherSpi</code>

 * for the sub-transformation "<i>algorithm//padding</i>" (note the double

 * slashes).

 * <p>If the answer is YES, instantiate it, and call

 * <code>engineSetMode(<i>mode</i>)</code> on the new instance.

 * <p>If the answer is NO, go to the next step.<p>

 * <li>

 * Check if the provider has registered a subclass of <code>CipherSpi</code>

 * for the sub-transformation "<i>algorithm</i>".

 * <p>If the answer is YES, instantiate it, and call

 * <code>engineSetMode(<i>mode</i>)</code> and

 * <code>engineSetPadding(<i>padding</i>)</code> on the new instance.

 * <p>If the answer is NO, throw a <code>NoSuchAlgorithmException</code>

 * exception.

 * </ol>

 *

 * @author Jan Luehe

 * @see KeyGenerator

 * @see SecretKey

 * @since 1.4

 */

public abstract class CipherSpi {

    /**

     * Sets the mode of this cipher.

     *

     * @param mode the cipher mode

     *

     * @exception NoSuchAlgorithmException if the requested cipher mode does

     * not exist

     */

    protected abstract void engineSetMode(String mode)

        throws NoSuchAlgorithmException;

    /**

     * Sets the padding mechanism of this cipher.

     *

     * @param padding the padding mechanism

     *

     * @exception NoSuchPaddingException if the requested padding mechanism

     * does not exist

     */

    protected abstract void engineSetPadding(String padding)

        throws NoSuchPaddingException;

    /**

     * Returns the block size (in bytes).

     *

     * @return the block size (in bytes), or 0 if the underlying algorithm is

     * not a block cipher

     */

    protected abstract int engineGetBlockSize();

    /**

     * Returns the length in bytes that an output buffer would

     * need to be in order to hold the result of the next <code>update</code>

     * or <code>doFinal</code> operation, given the input length

     * <code>inputLen</code> (in bytes).

     *

     * <p>This call takes into account any unprocessed (buffered) data from a

     *

     * <p>The actual output length of the next <code>update</code> or

     * <code>doFinal</code> call may be smaller than the length returned by

     * this method.

     *

     * @param inputLen the input length (in bytes)

     *

     * @return the required output buffer size (in bytes)

     */

    protected abstract int engineGetOutputSize(int inputLen);

    /**

     * Returns the initialization vector (IV) in a new buffer.

     *

     * <p> This is useful in the context of password-based encryption or

     * decryption, where the IV is derived from a user-provided passphrase.

     *

     * @return the initialization vector in a new buffer, or null if the

     * underlying algorithm does not use an IV, or if the IV has not yet

     * been set.

     */

    protected abstract byte[] engineGetIV();

    /**

     * Returns the parameters used with this cipher.

     *

     * <p>The returned parameters may be the same that were used to initialize

     * this cipher, or may contain a combination of default and random

     * parameter values used by the underlying cipher implementation if this

     * cipher requires algorithm parameters but was not initialized with any.

     *

     * @return the parameters used with this cipher, or null if this cipher

     * does not use any parameters.

     */

    protected abstract AlgorithmParameters engineGetParameters();

    /**

     * Initializes this cipher with a key and a source

     * of randomness.

     *

     * <p>The cipher is initialized for one of the following four operations:

     * encryption, decryption, key wrapping or key unwrapping, depending on

     * the value of <code>opmode</code>.

     *

     * <p>If this cipher requires any algorithm parameters that cannot be

     * derived from the given <code>key</code>, the underlying cipher

     * implementation is supposed to generate the required parameters itself

     * (using provider-specific default or random values) if it is being

     * initialized for encryption or key wrapping, and raise an

     * <code>InvalidKeyException</code> if it is being

     * initialized for decryption or key unwrapping.

     * The generated parameters can be retrieved using

     * {@link #engineGetParameters() engineGetParameters} or

     * {@link #engineGetIV() engineGetIV} (if the parameter is an IV).

     *

     * <p>If this cipher (including its underlying feedback or padding scheme)

     * requires any random bytes (e.g., for parameter generation), it will get

     * them from <code>random</code>.

     *

     * <p>Note that when a Cipher object is initialized, it loses all

     * previously-acquired state. In other words, initializing a Cipher is

     * equivalent to creating a new instance of that Cipher and initializing

     * it.

     *

     * @param opmode the operation mode of this cipher (this is one of

     * the following:

     * <code>ENCRYPT_MODE</code>, <code>DECRYPT_MODE</code>,

     * <code>WRAP_MODE</code> or <code>UNWRAP_MODE</code>)

     * @param key the encryption key

     * @param random the source of randomness

     *

     * @exception InvalidKeyException if the given key is inappropriate for

     * determined from the given key.

     */

    protected abstract void engineInit(int opmode, Key key,

                                       SecureRandom random)

        throws InvalidKeyException;

    /**

     * Initializes this cipher with a key, a set of

     * algorithm parameters, and a source of randomness.

     *

     * <p>The cipher is initialized for one of the following four operations:

     * encryption, decryption, key wrapping or key unwrapping, depending on

     * the value of <code>opmode</code>.

     *

     * <p>If this cipher requires any algorithm parameters and

     * <code>params</code> is null, the underlying cipher implementation is

     * supposed to generate the required parameters itself (using

     * provider-specific default or random values) if it is being

     * initialized for encryption or key wrapping, and raise an

     * <code>InvalidAlgorithmParameterException</code> if it is being

     * initialized for decryption or key unwrapping.

     * The generated parameters can be retrieved using

     * {@link #engineGetParameters() engineGetParameters} or

     * {@link #engineGetIV() engineGetIV} (if the parameter is an IV).

     *

     * <p>If this cipher (including its underlying feedback or padding scheme)

     * requires any random bytes (e.g., for parameter generation), it will get

     * them from <code>random</code>.

     *

     * <p>Note that when a Cipher object is initialized, it loses all

     * previously-acquired state. In other words, initializing a Cipher is

     * equivalent to creating a new instance of that Cipher and initializing

     * it.

     *

     * @param opmode the operation mode of this cipher (this is one of

     * the following:

     * <code>ENCRYPT_MODE</code>, <code>DECRYPT_MODE</code>,

     * <code>WRAP_MODE</code> or <code>UNWRAP_MODE</code>)

     * @param key the encryption key

     * @param params the algorithm parameters

     * @param random the source of randomness

     *

     * @exception InvalidKeyException if the given key is inappropriate for

     * initializing this cipher

     * @exception InvalidAlgorithmParameterException if the given algorithm

     * parameters are inappropriate for this cipher,

     * algorithm parameters and <code>params</code> is null.

     */

    protected abstract void engineInit(int opmode, Key key,

                                       AlgorithmParameterSpec params,

                                       SecureRandom random)

        throws InvalidKeyException, InvalidAlgorithmParameterException;

    /**

     * Initializes this cipher with a key, a set of

     * algorithm parameters, and a source of randomness.

     *

     * <p>The cipher is initialized for one of the following four operations:

     * encryption, decryption, key wrapping or key unwrapping, depending on

     * the value of <code>opmode</code>.

     *

     * <p>If this cipher requires any algorithm parameters and

     * <code>params</code> is null, the underlying cipher implementation is

     * supposed to generate the required parameters itself (using

     * provider-specific default or random values) if it is being

     * initialized for encryption or key wrapping, and raise an

     * <code>InvalidAlgorithmParameterException</code> if it is being

     * initialized for decryption or key unwrapping.

     * The generated parameters can be retrieved using

     * {@link #engineGetParameters() engineGetParameters} or

     * {@link #engineGetIV() engineGetIV} (if the parameter is an IV).

     *

     * <p>If this cipher (including its underlying feedback or padding scheme)

     * requires any random bytes (e.g., for parameter generation), it will get

     * them from <code>random</code>.

     *

     * <p>Note that when a Cipher object is initialized, it loses all

     * previously-acquired state. In other words, initializing a Cipher is

     * equivalent to creating a new instance of that Cipher and initializing

     * it.

     *

     * @param opmode the operation mode of this cipher (this is one of

     * the following:

     * <code>ENCRYPT_MODE</code>, <code>DECRYPT_MODE</code>,

     * <code>WRAP_MODE</code> or <code>UNWRAP_MODE</code>)

     * @param key the encryption key

     * @param params the algorithm parameters

     * @param random the source of randomness

     *

     * @exception InvalidKeyException if the given key is inappropriate for

     * initializing this cipher

     * @exception InvalidAlgorithmParameterException if the given algorithm

     * parameters are inappropriate for this cipher,

     * algorithm parameters and <code>params</code> is null.

     */

    protected abstract void engineInit(int opmode, Key key,

                                       AlgorithmParameters params,

                                       SecureRandom random)

        throws InvalidKeyException, InvalidAlgorithmParameterException;

    /**

     * Continues a multiple-part encryption or decryption operation

     * (depending on how this cipher was initialized), processing another data

     * part.

     *

     * <p>The first <code>inputLen</code> bytes in the <code>input</code>

     * buffer, starting at <code>inputOffset</code> inclusive, are processed,

     * and the result is stored in a new buffer.

     *

     * @param input the input buffer

     * @param inputOffset the offset in <code>input</code> where the input

     * starts

     * @param inputLen the input length

     *

     * @return the new buffer with the result, or null if the underlying

     * cipher is a block cipher and the input data is too short to result in a

     * new block.

     */

    protected abstract byte[] engineUpdate(byte[] input, int inputOffset,

                                           int inputLen);

    /**

     * Continues a multiple-part encryption or decryption operation

     * (depending on how this cipher was initialized), processing another data

     * part.

     *

     * <p>The first <code>inputLen</code> bytes in the <code>input</code>

     * buffer, starting at <code>inputOffset</code> inclusive, are processed,

     * and the result is stored in the <code>output</code> buffer, starting at

     * <code>outputOffset</code> inclusive.

     *

     * <p>If the <code>output</code> buffer is too small to hold the result,

     * a <code>ShortBufferException</code> is thrown.

     *

     * @param input the input buffer

     * @param inputOffset the offset in <code>input</code> where the input

     * starts

     * @param inputLen the input length

     * @param output the buffer for the result

     * @param outputOffset the offset in <code>output</code> where the result

     * is stored

     *

     * @return the number of bytes stored in <code>output</code>

     *

     * @exception ShortBufferException if the given output buffer is too small

     * to hold the result

     */

    protected abstract int engineUpdate(byte[] input, int inputOffset,

                                        int inputLen, byte[] output,

                                        int outputOffset)

        throws ShortBufferException;

    /**

     * Continues a multiple-part encryption or decryption operation

     * (depending on how this cipher was initialized), processing another data

     * part.

     *

     * <p>All <code>input.remaining()</code> bytes starting at

     * <code>input.position()</code> are processed. The result is stored

     * in the output buffer.

     * Upon return, the input buffer's position will be equal

     * to its limit; its limit will not have changed. The output buffer's

     * position will have advanced by n, where n is the value returned

     * by this method; the output buffer's limit will not have changed.

     *