<?php
namespace Aws\Crypto;

use Aws\Exception\CryptoException;

abstract class MaterialsProviderV3 implements MaterialsProviderInterfaceV3
{
    private static array $supportedKeySizes = [
        256 => true
    ];

    /**
     * Returns if the requested size is supported by AES.
     *
     * @param int $keySize Size of the requested key in bits.
     *
     * @return bool
     */
    public static function isSupportedKeySize(int $keySize): bool
    {
        return isset(self::$supportedKeySizes[$keySize]);
    }

    /**
     * Returns the wrap algorithm name for this Provider.
     *
     * @return string
     */
    abstract public function getWrapAlgorithmName(): string;

    /**
     * Takes an encrypted content encryption key (CEK) and material description
     * for use decrypting the key according to the Provider's specifications.
     *
     * @param string $encryptedCek Encrypted key to be decrypted by the Provider
     *                             for use decrypting other data.
     * @param array $materialDescription Material Description for use in
     *                                    decrypting the CEK.
     * @param array $options Options for use in decrypting the CEK.
     *
     * @return string
     */
    abstract public function decryptCek(
        string $encryptedCek,
        array $materialDescription,
        array $options
    ): string;

    /**
     * @param string $keySize Length of a cipher key in bits for generating a
     *                        random content encryption key (CEK).
     * @param array $context Context map needed for key encryption
     * @param array $options Additional options to be used in CEK generation
     *
     * @return array
     */
    abstract public function generateCek(
        string $keySize,
        array $context,
        array $options
    ): array;

    /**
     * @param string $openSslName Cipher OpenSSL name to use for generating
     *                            an initialization vector.
     *
     * @return string
     */
    public function generateIv(string $openSslName): string
    {
        $iv = null;
        $cstrong = null;

        if ($openSslName === "aes-96-gcm") {
            $iv = openssl_random_pseudo_bytes(12, $cstrong);
        } else if ($openSslName === "aes-224-gcm") {
            $iv = openssl_random_pseudo_bytes(28, $cstrong);
        } else {
            $iv = openssl_random_pseudo_bytes(
                openssl_cipher_iv_length($openSslName),
                $cstrong
            );
        }
        if (!$cstrong) {
            throw new CryptoException("No strong cryptographic source available to generate a random IV.");
        }

        return $iv;
    }
}