// Copyright 2020, The Android Open Source Project
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

package {
    // See: http://go/android-license-faq
    // A large-scale-change added 'default_applicable_licenses' to import
    // all of the 'license_kinds' from "system_security_license"
    // to get the below license kinds:
    //   SPDX-license-identifier-Apache-2.0
    default_applicable_licenses: ["system_security_license"],
}

rust_library {
    name: "libkeystore2_crypto_rust",
    crate_name: "keystore2_crypto",
    srcs: ["lib.rs"],
    rustlibs: [
        "libkeystore2_crypto_bindgen",
        "liblog_rust",
        "libnix",
        "libthiserror",
    ],
    shared_libs: [
        "libkeystore2_crypto",
        "libcrypto",
    ],
}

cc_library {
    name: "libkeystore2_crypto",
    srcs: [
        "crypto.cpp",
        "certificate_utils.cpp",
    ],
    export_include_dirs: ["include"],
    shared_libs: [
        "libcrypto",
        "liblog",
    ],
}

rust_bindgen {
    name: "libkeystore2_crypto_bindgen",
    wrapper_src: "crypto.hpp",
    crate_name: "keystore2_crypto_bindgen",
    source_stem: "bindings",
    host_supported: true,
    shared_libs: ["libcrypto"],
    bindgen_flags: [
        "--size_t-is-usize",
        "--allowlist-function", "randomBytes",
        "--allowlist-function", "AES_gcm_encrypt",
        "--allowlist-function", "AES_gcm_decrypt",
        "--allowlist-function", "CreateKeyId",
        "--allowlist-function", "generateKeyFromPassword",
        "--allowlist-function", "HKDFExtract",
        "--allowlist-function", "HKDFExpand",
        "--allowlist-function", "ECDHComputeKey",
        "--allowlist-function", "ECKEYGenerateKey",
        "--allowlist-function", "ECKEYMarshalPrivateKey",
        "--allowlist-function", "ECKEYParsePrivateKey",
        "--allowlist-function", "EC_KEY_get0_public_key",
        "--allowlist-function", "ECPOINTPoint2Oct",
        "--allowlist-function", "ECPOINTOct2Point",
        "--allowlist-function", "EC_KEY_free",
        "--allowlist-function", "EC_POINT_free",
        "--allowlist-function", "extractSubjectFromCertificate",
        "--allowlist-type", "EC_KEY",
        "--allowlist-type", "EC_POINT",
        "--allowlist-var", "EC_MAX_BYTES",
        "--allowlist-var", "EVP_MAX_MD_SIZE",
    ],
    cflags: ["-DBORINGSSL_NO_CXX"],
}

rust_test {
    name: "keystore2_crypto_test_rust",
    crate_name: "keystore2_crypto_test_rust",
    srcs: ["lib.rs"],
    test_suites: ["general-tests"],
    auto_gen_config: true,
    rustlibs: [
        "libkeystore2_crypto_bindgen",
        "liblog_rust",
        "libnix",
        "libthiserror",
    ],
    static_libs: [
        "libkeystore2_crypto",
    ],
    shared_libs: [
        "libc++",
        "libcrypto",
        "liblog",
    ],
}

cc_test {
    name: "keystore2_crypto_test",
    cflags: [
        "-Wall",
        "-Werror",
        "-Wextra",
    ],
    srcs: [
        "tests/certificate_utils_test.cpp",
        "tests/gtest_main.cpp",
    ],
    test_suites: ["general-tests"],
    static_libs: [
        "libkeystore2_crypto",
    ],
    shared_libs: [
        "libcrypto",
    ],
}