"""
card_test_personalize_card.py - test personalizing card

Copyright (C) 2016, 2018, 2019  g10 Code GmbH
Author: NIIBE Yutaka <gniibe@fsij.org>

This file is a part of Gnuk, a GnuPG USB Token implementation.

Gnuk is free software: you can redistribute it and/or modify it
under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.

Gnuk is distributed in the hope that it will be useful, but WITHOUT
ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public
License for more details.

You should have received a copy of the GNU General Public License
along with this program.  If not, see <http://www.gnu.org/licenses/>.
"""

from struct import pack
from re import match, DOTALL
from util import *
from pubkey_crypto import get_PK_Crypto, get_key
from card_const import *
from constants_for_test import *
import pytest

PRIVATE_DO_0101 = (0x01, 0x01)
PRIVATE_DO_0102 = (0x01, 0x02)
PRIVATE_DO_0103 = (0x01, 0x03)
PRIVATE_DO_0104 = (0x01, 0x04)


def _assert_sw(e, sw_list):
    sw = e.args[0]
    assert sw in sw_list


def _expect_security_error(callable_):
    try:
        callable_()
    except ValueError as e:
        _assert_sw(e, ["6982", "6985"])
        return
    assert False


class Test_Card_Personalize_Card_2(object):
    def test_verify_pw3_0(self, card):
        v = card.verify(3, PW3_TEST0)
        assert v

    def test_import_key_1(self, card):
        key = get_key(card)
        t = key[0].build_privkey_template(card.is_yubikey)
        r = card.cmd_put_data_odd(0x3f, 0xff, t)
        assert r

    def test_import_key_2(self, card):
        key = get_key(card)
        t = key[1].build_privkey_template(card.is_yubikey)
        r = card.cmd_put_data_odd(0x3f, 0xff, t)
        assert r

    def test_import_key_3(self, card):
        key = get_key(card)
        t = key[2].build_privkey_template(card.is_yubikey)
        r = card.cmd_put_data_odd(0x3f, 0xff, t)
        assert r

    def test_fingerprint_1_put(self, card):
        key = get_key(card)
        fpr1 = key[0].get_fpr()
        r = card.cmd_put_data(0x00, 0xc7, fpr1)
        assert r

    def test_fingerprint_2_put(self, card):
        key = get_key(card)
        fpr2 = key[1].get_fpr()
        r = card.cmd_put_data(0x00, 0xc8, fpr2)
        assert r

    def test_fingerprint_3_put(self, card):
        key = get_key(card)
        fpr3 = key[2].get_fpr()
        r = card.cmd_put_data(0x00, 0xc9, fpr3)
        assert r

    def test_timestamp_1_put(self, card):
        key = get_key(card)
        timestamp1 = key[0].get_timestamp()
        r = card.cmd_put_data(0x00, 0xce, timestamp1)
        assert r

    def test_timestamp_2_put(self, card):
        key = get_key(card)
        timestamp2 = key[1].get_timestamp()
        r = card.cmd_put_data(0x00, 0xcf, timestamp2)
        assert r

    def test_timestamp_3_put(self, card):
        key = get_key(card)
        timestamp3 = key[2].get_timestamp()
        r = card.cmd_put_data(0x00, 0xd0, timestamp3)
        assert r

    def test_ds_counter_0(self, card):
        c = get_data_object(card, 0x7a)
        assert c == b'\x93\x03\x00\x00\x00'

    def test_pw1_status(self, card):
        s = get_data_object(card, 0xc4)
        assert match(b'\x01...\x03[\x00\x03]\x03', s, DOTALL)

    def test_app_data(self, card):
        if card.is_yubikey:
            pytest.skip("Yubikey raises 6e82 error for composed data object 6E")
        else:
            app_data = get_data_object(card, 0x6e)
            hist_len = app_data[20]
            # FIXME: parse and check DO of C0, C1, C2, C3, C4, and C6
            assert app_data[0:8] == b"\x4f\x10\xd2\x76\x00\x01\x24\x01" and \
                app_data[18:18+2] == b"\x5f\x52"

    def test_public_key_1(self, card):
        key = get_key(card)
        PK_Crypto = get_PK_Crypto(card)
        pk_info = card.cmd_get_public_key(1)
        assert key[0].get_pk() == PK_Crypto.pk_from_pk_info(pk_info)

    def test_public_key_2(self, card):
        key = get_key(card)
        PK_Crypto = get_PK_Crypto(card)
        pk_info = card.cmd_get_public_key(2)
        assert key[1].get_pk() == PK_Crypto.pk_from_pk_info(pk_info)

    def test_public_key_3(self, card):
        key = get_key(card)
        PK_Crypto = get_PK_Crypto(card)
        pk_info = card.cmd_get_public_key(3)
        assert key[2].get_pk() == PK_Crypto.pk_from_pk_info(pk_info)

    def test_setup_pw1_0(self, card):
        r = card.change_passwd(1, FACTORY_PASSPHRASE_PW1, PW1_TEST0)
        assert r

    def test_verify_pw1_0(self, card):
        v = card.verify(1, PW1_TEST0)
        assert v

    def test_verify_pw1_0_2(self, card):
        v = card.verify(2, PW1_TEST0)
        assert v

    def test_setup_pw1_1(self, card):
        r = card.change_passwd(1, PW1_TEST0, PW1_TEST1)
        assert r

    def test_verify_pw1_1(self, card):
        v = card.verify(1, PW1_TEST1)
        assert v

    def test_verify_pw1_1_2(self, card):
        v = card.verify(2, PW1_TEST1)
        assert v

    def test_setup_reset_code(self, card):
        r = card.setup_reset_code(RESETCODE_TEST)
        assert r

    def test_reset_code(self, card):
        r = card.reset_passwd_by_resetcode(RESETCODE_TEST, PW1_TEST2)
        assert r

    def test_verify_pw1_2(self, card):
        v = card.verify(1, PW1_TEST2)
        assert v

    def test_verify_pw1_2_2(self, card):
        v = card.verify(2, PW1_TEST2)
        assert v

    def test_setup_pw3_1(self, card):
        r = card.change_passwd(3, PW3_TEST0, PW3_TEST1)
        assert r

    def test_verify_pw3_1(self, card):
        v = card.verify(3, PW3_TEST1)
        assert v

    def test_reset_userpass_admin(self, card):
        r = card.reset_passwd_by_admin(PW1_TEST3)
        assert r

    def test_verify_pw1_3(self, card):
        v = card.verify(1, PW1_TEST3)
        assert v

    def test_verify_pw1_3_2(self, card):
        v = card.verify(2, PW1_TEST3)
        assert v

    def test_setup_pw1_4(self, card):
        r = card.change_passwd(1, PW1_TEST3, PW1_TEST4)
        assert r

    def test_verify_pw1_4(self, card):
        v = card.verify(1, PW1_TEST4)
        assert v

    def test_verify_pw1_4_2(self, card):
        v = card.verify(2, PW1_TEST4)
        assert v

    def test_setup_pw3_2(self, card):
        r = card.change_passwd(3, PW3_TEST1, PW3_TEST0)
        assert r

    def test_verify_pw3_2(self, card):
        v = card.verify(3, PW3_TEST0)
        assert v

    def test_private_do_0101_write_ok_with_pw3(self, card):
        card.cmd_select_openpgp()
        v = card.verify(3, PW3_TEST0)
        assert v
        r = card.cmd_put_data(PRIVATE_DO_0101[0], PRIVATE_DO_0101[1], b"priv0101_pw3_ok")
        assert r

    def test_private_do_0101_write_fail_with_pw1_81(self, card):
        card.cmd_select_openpgp()
        v = card.verify(1, PW1_TEST4)
        assert v
        _expect_security_error(
            lambda: card.cmd_put_data(PRIVATE_DO_0101[0], PRIVATE_DO_0101[1], b"priv0101_pw1_81")
        )

    def test_private_do_0101_write_ok_with_pw1_82(self, card):
        card.cmd_select_openpgp()
        v = card.verify(2, PW1_TEST4)
        assert v
        r = card.cmd_put_data(PRIVATE_DO_0101[0], PRIVATE_DO_0101[1], b"priv0101_ok")
        assert r

    def test_private_do_0101_read_always(self, card):
        card.cmd_select_openpgp()
        data = get_data_object(card, 0x0101)
        assert data == b"priv0101_ok" or data == b"priv0101_pw3_ok"

    def test_private_do_0102_write_fail_with_pw1(self, card):
        card.cmd_select_openpgp()
        v = card.verify(2, PW1_TEST4)
        assert v
        _expect_security_error(
            lambda: card.cmd_put_data(PRIVATE_DO_0102[0], PRIVATE_DO_0102[1], b"priv0102_pw1")
        )

    def test_private_do_0102_write_ok_with_pw3(self, card):
        card.cmd_select_openpgp()
        v = card.verify(3, PW3_TEST0)
        assert v
        r = card.cmd_put_data(PRIVATE_DO_0102[0], PRIVATE_DO_0102[1], b"priv0102_ok")
        assert r

    def test_private_do_0102_read_always(self, card):
        card.cmd_select_openpgp()
        data = get_data_object(card, 0x0102)
        assert data == b"priv0102_ok"

    def test_private_do_0103_read_fail_without_auth(self, card):
        card.cmd_select_openpgp()
        _expect_security_error(lambda: get_data_object(card, 0x0103))

    def test_private_do_0103_read_fail_with_pw1_81(self, card):
        card.cmd_select_openpgp()
        v = card.verify(1, PW1_TEST4)
        assert v
        _expect_security_error(lambda: get_data_object(card, 0x0103))

    def test_private_do_0103_write_ok_with_pw3(self, card):
        card.cmd_select_openpgp()
        v = card.verify(3, PW3_TEST0)
        assert v
        r = card.cmd_put_data(PRIVATE_DO_0103[0], PRIVATE_DO_0103[1], b"priv0103_pw3_ok")
        assert r

    def test_private_do_0103_read_ok_with_pw3(self, card):
        card.cmd_select_openpgp()
        v = card.verify(3, PW3_TEST0)
        assert v
        data = get_data_object(card, 0x0103)
        assert data == b"priv0103_pw3_ok"

    def test_private_do_0103_write_ok_with_pw1_82(self, card):
        card.cmd_select_openpgp()
        v = card.verify(2, PW1_TEST4)
        assert v
        r = card.cmd_put_data(PRIVATE_DO_0103[0], PRIVATE_DO_0103[1], b"priv0103_ok")
        assert r

    def test_private_do_0103_read_ok_with_pw1_82(self, card):
        card.cmd_select_openpgp()
        v = card.verify(2, PW1_TEST4)
        assert v
        data = get_data_object(card, 0x0103)
        assert data == b"priv0103_ok"

    def test_private_do_0104_read_fail_without_auth(self, card):
        card.cmd_select_openpgp()
        _expect_security_error(lambda: get_data_object(card, 0x0104))

    def test_private_do_0104_read_fail_with_pw1(self, card):
        card.cmd_select_openpgp()
        v = card.verify(2, PW1_TEST4)
        assert v
        _expect_security_error(lambda: get_data_object(card, 0x0104))

    def test_private_do_0104_write_ok_with_pw3(self, card):
        card.cmd_select_openpgp()
        v = card.verify(3, PW3_TEST0)
        assert v
        r = card.cmd_put_data(PRIVATE_DO_0104[0], PRIVATE_DO_0104[1], b"priv0104_ok")
        assert r

    def test_private_do_0104_read_ok_with_pw3(self, card):
        card.cmd_select_openpgp()
        v = card.verify(3, PW3_TEST0)
        assert v
        data = get_data_object(card, 0x0104)
        assert data == b"priv0104_ok"