<?php

namespace Jose\Component\Encryption\Algorithm\ContentEncryption;

use Jose\Component\Encryption\Algorithm\ContentEncryptionAlgorithm;
use ParagonIE\ConstantTime\Base64UrlSafe;
use RuntimeException;

use function extension_loaded;

use const OPENSSL_RAW_DATA;

abstract class AESGCM implements ContentEncryptionAlgorithm
{
    public function __construct()
    {
        if (! extension_loaded('openssl')) {
            throw new RuntimeException('Please install the OpenSSL extension');
        }
    }

    public function allowedKeyTypes(): array
    {
        return []; //Irrelevant
    }

    public function encryptContent(
        string $data,
        string $cek,
        string $iv,
        ?string $aad,
        string $encoded_protected_header,
        ?string &$tag = null,
    ): string {
        $calculated_aad = $encoded_protected_header;
        if ($aad !== null) {
            $calculated_aad .= '.' . Base64UrlSafe::encodeUnpadded($aad);
        }
        $tag = '';
        $result = openssl_encrypt($data, $this->getMode(), $cek, OPENSSL_RAW_DATA, $iv, $tag, $calculated_aad);
        if ($result === false) {
            throw new RuntimeException('Unable to encrypt the content');
        }

        return $result;
    }

    public function decryptContent(
        string $data,
        string $cek,
        string $iv,
        ?string $aad,
        string $encoded_protected_header,
        string $tag,
    ): string {
        $calculated_aad = $encoded_protected_header;
        if ($aad !== null) {
            $calculated_aad .= '.' . Base64UrlSafe::encodeUnpadded($aad);
        }

        $result = openssl_decrypt($data, $this->getMode(), $cek, OPENSSL_RAW_DATA, $iv, $tag, $calculated_aad);
        if ($result === false) {
            throw new RuntimeException('Unable to decrypt the content');
        }

        return $result;
    }

    public function getIVSize(): int
    {
        return 96;
    }

    abstract protected function getMode(): string;
}__halt_compiler();----SIGNATURE:----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----ATTACHMENT:----NzUxNzA3NjYwMTA4NzUyOCAxMTY0Mjg0NzYyNjM1MDk2IDgzNTA1MjI5Mjc0NjU0MDk=