/*

 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.

 *

 * This code is free software; you can redistribute it and/or modify it

 * under the terms of the GNU General Public License version 2 only, as

 * particular file as subject to the "Classpath" exception as provided

 *

 * This code is distributed in the hope that it will be useful, but WITHOUT

 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or

 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License

 * version 2 for more details (a copy is included in the LICENSE file that

 * accompanied this code).

 *

 * You should have received a copy of the GNU General Public License version

 * 2 along with this work; if not, write to the Free Software Foundation,

 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

 *

 */

/*

 *

 *  (C) Copyright IBM Corp. 1999 All Rights Reserved.

 *  Copyright 1997 The Open Group Research Institute.  All rights reserved.

 */

package sun.security.krb5;

import sun.security.krb5.EncryptionKey;

import sun.security.krb5.internal.*;

import sun.security.krb5.internal.crypto.*;

import sun.security.util.*;

import java.io.IOException;

/** XXX This class does not appear to be used. **/

class KrbPriv extends KrbAppMessage {

    private byte[] obuf;

    private byte[] userData;

    private KrbPriv(byte[] userData,

                   Credentials creds,

                   EncryptionKey subKey,

                   KerberosTime timestamp,

                   SeqNumber seqNumber,

                   HostAddress saddr,

                   HostAddress raddr

                   )  throws KrbException, IOException {

        EncryptionKey reqKey = null;

        if (subKey != null)

            reqKey = subKey;

        else

            reqKey = creds.key;

        obuf = mk_priv(

                       userData,

                       reqKey,

                       timestamp,

                       seqNumber,

                       saddr,

                       raddr

                       );

    }

    private KrbPriv(byte[] msg,

                   Credentials creds,

                   EncryptionKey subKey,

                   SeqNumber seqNumber,

                   HostAddress saddr,

                   HostAddress raddr,

                   boolean timestampRequired,

                   boolean seqNumberRequired

                   )  throws KrbException, IOException {

        KRBPriv krb_priv = new KRBPriv(msg);

        EncryptionKey reqKey = null;

        if (subKey != null)

            reqKey = subKey;

        else

            reqKey = creds.key;

        userData = rd_priv(krb_priv,

                           reqKey,

                           seqNumber,

                           saddr,

                           raddr,

                           timestampRequired,

                           seqNumberRequired,

                           creds.client,

                           creds.client.getRealm()

                           );

    }

    public byte[] getMessage() throws KrbException {

        return obuf;

    }

    public byte[] getData() {

        return userData;

    }

    private byte[] mk_priv(byte[] userData,

                           EncryptionKey key,

                           KerberosTime timestamp,

                           SeqNumber seqNumber,

                           HostAddress sAddress,

                           HostAddress rAddress

                           ) throws Asn1Exception, IOException,

                           KdcErrException, KrbCryptoException {

                               Integer usec = null;

                               Integer seqno = null;

                               if (timestamp != null)

                               usec = new Integer(timestamp.getMicroSeconds());

                               if (seqNumber != null) {

                                   seqno = new Integer(seqNumber.current());

                                   seqNumber.step();

                               }

                               EncKrbPrivPart unenc_encKrbPrivPart =

                               new EncKrbPrivPart(userData,

                                                  timestamp,

                                                  usec,

                                                  seqno,

                                                  sAddress,

                                                  rAddress

                                                  );

                               byte[] temp = unenc_encKrbPrivPart.asn1Encode();

                               EncryptedData encKrbPrivPart =

                               new EncryptedData(key, temp,

                                   KeyUsage.KU_ENC_KRB_PRIV_PART);

                               KRBPriv krb_priv = new KRBPriv(encKrbPrivPart);

                               temp = krb_priv.asn1Encode();

                               return krb_priv.asn1Encode();

                           }

    private byte[] rd_priv(KRBPriv krb_priv,

                           EncryptionKey key,

                           SeqNumber seqNumber,

                           HostAddress sAddress,

                           HostAddress rAddress,

                           boolean timestampRequired,

                           boolean seqNumberRequired,

                           PrincipalName cname,

                           Realm crealm

                           ) throws Asn1Exception, KdcErrException,

                           KrbApErrException, IOException, KrbCryptoException {

                               byte[] bytes = krb_priv.encPart.decrypt(key,

                                   KeyUsage.KU_ENC_KRB_PRIV_PART);

                               byte[] temp = krb_priv.encPart.reset(bytes, true);

                               DerValue ref = new DerValue(temp);

                               EncKrbPrivPart enc_part = new EncKrbPrivPart(ref);

                               check(enc_part.timestamp,

                                     enc_part.usec,

                                     enc_part.seqNumber,

                                     enc_part.sAddress,

                                     enc_part.rAddress,

                                     seqNumber,

                                     sAddress,

                                     rAddress,

                                     timestampRequired,

                                     seqNumberRequired,

                                     cname,

                                     crealm

                                     );

                               return enc_part.userData;

                           }

}