Momentum-Apps/services/crypto/crypto_facade.h

#pragma once

#include "../../types/plugin_state.h"
#include "common_types.h"

/**
 * @brief Checks whether key slot can be used for encryption purposes
 * @param key_slot key slot index
 * @return \c true if key slot can be used for encryption; \c false otherwise
 */
bool totp_crypto_check_key_slot(uint8_t key_slot);

/**
 * @brief Encrypts plain data using built-in certificate and given initialization vector (IV)
 * @param plain_data plain data to be encrypted
 * @param plain_data_length plain data length
 * @param iv initialization vector (IV) to be used to encrypt plain data
 * @param crypto_version version of crypto algorithms to use
 * @param key_slot key slot to be used
 * @param[out] encrypted_data_length encrypted data length
 * @return Encrypted data
 */
uint8_t* totp_crypto_encrypt(
    const uint8_t* plain_data,
    const size_t plain_data_length,
    const uint8_t* iv,
    uint8_t crypto_version,
    uint8_t key_slot,
    size_t* encrypted_data_length);

/**
 * @brief Decrypts encrypted data using built-in certificate and given initialization vector (IV)
 * @param encrypted_data encrypted data to be decrypted
 * @param encrypted_data_length encrypted data length
 * @param iv initialization vector (IV) to be used to encrypt plain data
 * @param crypto_version version of crypto algorithms to use
 * @param key_slot key slot to be used
 * @param[out] decrypted_data_length decrypted data length
 * @return Decrypted data
 */
uint8_t* totp_crypto_decrypt(
    const uint8_t* encrypted_data,
    const size_t encrypted_data_length,
    const uint8_t* iv,
    uint8_t crypto_version,
    uint8_t key_slot,
    size_t* decrypted_data_length);

/**
 * @brief Seed initialization vector (IV) using user's PIN
 * @param plugin_state application state
 * @param key_slot key slot to be used
 * @param pin user's PIN
 * @param pin_length user's PIN length
 * @return Results of seeding IV
 */
CryptoSeedIVResult
    totp_crypto_seed_iv(PluginState* plugin_state, const uint8_t* pin, uint8_t pin_length);

/**
 * @brief Verifies whether cryptographic information (certificate + IV) is valid and can be used for encryption and decryption
 * @param plugin_state application state
 * @return \c true if cryptographic information is valid; \c false otherwise
 */
bool totp_crypto_verify_key(const PluginState* plugin_state);