apple-cryptokit-rs 0.2.0

use crate::authentication::hmac::HMAC;
use crate::error::{CryptoKitError, Result};

// HMAC-SHA512 Swift FFI declarations
extern "C" {
    #[link_name = "hmac_sha512"]
    fn swift_hmac_sha512(
        key: *const u8,
        key_len: i32,
        data: *const u8,
        data_len: i32,
        output: *mut u8,
    ) -> i32;
}

/// HMAC-SHA512 output size
pub const HMAC_SHA512_OUTPUT_SIZE: usize = 64;

/// HMAC-SHA512 message authentication code
pub fn hmac_sha512(key: &[u8], data: &[u8]) -> Result<[u8; HMAC_SHA512_OUTPUT_SIZE]> {
    let mut output = [0u8; HMAC_SHA512_OUTPUT_SIZE];
    hmac_sha512_to(key, data, &mut output)?;
    Ok(output)
}

/// HMAC-SHA512 message authentication code to provided buffer (zero-allocation)
///
/// # Parameters
/// - `output`: Must be at least 64 bytes
pub fn hmac_sha512_to(key: &[u8], data: &[u8], output: &mut [u8]) -> Result<()> {
    assert!(
        output.len() >= HMAC_SHA512_OUTPUT_SIZE,
        "Output buffer too small: {} < {}",
        output.len(),
        HMAC_SHA512_OUTPUT_SIZE
    );
    unsafe {
        let result = swift_hmac_sha512(
            key.as_ptr(),
            key.len() as i32,
            data.as_ptr(),
            data.len() as i32,
            output.as_mut_ptr(),
        );

        if result < 0 {
            Err(CryptoKitError::SignatureFailed)
        } else {
            Ok(())
        }
    }
}

/// HMAC-SHA512 implementation
pub struct HmacSha512;

impl HMAC for HmacSha512 {
    const OUTPUT_SIZE: usize = HMAC_SHA512_OUTPUT_SIZE;

    fn authenticate_to(key: &[u8], data: &[u8], output: &mut [u8]) -> Result<()> {
        hmac_sha512_to(key, data, output)
    }
}

impl HmacSha512 {
    /// Verify HMAC-SHA512
    pub fn verify(key: &[u8], data: &[u8], expected: &[u8]) -> Result<bool> {
        let computed = Self::authenticate(key, data)?;
        Ok(super::hmac::constant_time_eq(&computed, expected))
    }
}

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn test_hmac_sha512_basic() {
        let key = b"secret_key";
        let data = b"hello world";

        let result = hmac_sha512(key, data);
        assert!(result.is_ok());

        let hmac_result = result.unwrap();
        assert_eq!(hmac_result.len(), HMAC_SHA512_OUTPUT_SIZE);
    }

    #[test]
    fn test_hmac_sha512_trait() {
        let key = b"test_key";
        let data = b"test_message";

        let result = HmacSha512::authenticate(key, data);
        assert!(result.is_ok());

        let hmac_result = result.unwrap();
        assert_eq!(hmac_result.len(), HmacSha512::output_size());
    }

    #[test]
    fn test_hmac_sha512_verify() {
        let key = b"verify_key";
        let data = b"verify_message";

        let hmac_result = HmacSha512::authenticate(key, data).unwrap();
        let verify_result = HmacSha512::verify(key, data, &hmac_result);

        assert!(verify_result.is_ok());
        assert!(verify_result.unwrap());

        // Test wrong HMAC
        let wrong_hmac = [0u8; HMAC_SHA512_OUTPUT_SIZE];
        let verify_wrong = HmacSha512::verify(key, data, &wrong_hmac);
        assert!(verify_wrong.is_ok());
        assert!(!verify_wrong.unwrap());
    }

    #[test]
    fn test_hmac_sha512_consistency() {
        let key = b"consistency_key";
        let data = b"consistency_data";

        let result1 = hmac_sha512(key, data).unwrap();
        let result2 = hmac_sha512(key, data).unwrap();

        assert_eq!(result1, result2);
    }

    #[test]
    fn test_hmac_sha512_large_data() {
        let key = b"large_data_key";
        let data = vec![0u8; 10000]; // 10KB data

        let result = hmac_sha512(key, &data);
        assert!(result.is_ok());

        let hmac_result = result.unwrap();
        assert_eq!(hmac_result.len(), HMAC_SHA512_OUTPUT_SIZE);
    }
}