// Copyright (c) 2026 Juhapekka Piiroinen <jp@1337.fi>
// All Rights Reserved.
// AmoosedWeb project: https://amoosed.com
#pragma once
#include "AmoosedWeb/Reader.hpp"

namespace amoosed {
// OpenSSL implementation of the crypto host boundary for non-Windows builds.
// It does not perform network or filesystem I/O.
class OpenSslCryptoHost final : public CryptoHost {
 public:
  std::unique_ptr<Hasher> new_sha256() override;
  bool random_bytes(std::uint8_t* output, std::size_t length) override;
  bool aes256_ctr(const std::array<std::uint8_t, 32>& key,
                  const std::array<std::uint8_t, 16>& counter,
                  const std::vector<std::uint8_t>& input,
                  std::vector<std::uint8_t>& output) override;
  bool aes256_gcm_open(const std::array<std::uint8_t, 32>& key,
                       const std::array<std::uint8_t, 12>& nonce,
                       const std::vector<std::uint8_t>& aad,
                       const std::vector<std::uint8_t>& ciphertext_and_tag,
                       std::vector<std::uint8_t>& output) override;
  GcmOpenResult aes256_gcm_open_result(const std::array<std::uint8_t, 32>& key,
                       const std::array<std::uint8_t, 12>& nonce,
                       const std::vector<std::uint8_t>& aad,
                       const std::vector<std::uint8_t>& ciphertext_and_tag,
                       std::vector<std::uint8_t>& output) override;
  bool aes256_gcm_seal(const std::array<std::uint8_t, 32>& key,
                       const std::array<std::uint8_t, 12>& nonce,
                       const std::vector<std::uint8_t>& aad,
                       const std::vector<std::uint8_t>& plaintext,
                       std::vector<std::uint8_t>& ciphertext_and_tag) override;
};
}