package com.infendro.hash.blake2

import com.infendro.bytearray.ByteOrder
import com.infendro.bytearray.toUByteArray
import com.infendro.bytearray.toULongArray
import com.infendro.hash.HashFunction

class Blake2b(
    override val bytes: Int,
) : HashFunction {
    init {
        require(bytes in 1..64)
    }

    override val block: Int
        get() = 128

    private val initial = ulongArrayOf(
        0x6a09e667f3bcc908UL, 0xbb67ae8584caa73bUL,
        0x3c6ef372fe94f82bUL, 0xa54ff53a5f1d36f1UL,
        0x510e527fade682d1UL, 0x9b05688c2b3e6c1fUL,
        0x1f83d9abfb41bd6bUL, 0x5be0cd19137e2179UL,
    )

    private val sigma = arrayOf(
        intArrayOf(0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15),
        intArrayOf(14, 10, 4, 8, 9, 15, 13, 6, 1, 12, 0, 2, 11, 7, 5, 3),
        intArrayOf(11, 8, 12, 0, 5, 2, 15, 13, 10, 14, 3, 6, 7, 1, 9, 4),
        intArrayOf(7, 9, 3, 1, 13, 12, 11, 14, 2, 6, 5, 10, 4, 0, 15, 8),
        intArrayOf(9, 0, 5, 7, 2, 4, 10, 15, 14, 1, 11, 12, 6, 8, 3, 13),
        intArrayOf(2, 12, 6, 10, 0, 11, 8, 3, 4, 13, 7, 5, 15, 14, 1, 9),
        intArrayOf(12, 5, 1, 15, 14, 13, 4, 10, 0, 7, 6, 3, 9, 2, 8, 11),
        intArrayOf(13, 11, 7, 14, 12, 1, 3, 9, 5, 0, 15, 4, 8, 6, 2, 10),
        intArrayOf(6, 15, 14, 9, 11, 3, 0, 8, 12, 2, 13, 7, 1, 4, 10, 5),
        intArrayOf(10, 2, 8, 4, 7, 6, 1, 5, 15, 11, 9, 14, 3, 12, 13, 0),
    )

    override fun hash(value: UByteArray): UByteArray {
        val l = value.size.toULong()
        val h = initial.copyOf()
        h[0] = h[0] xor (0x01010000UL or bytes.toULong())
        var t = 0UL

        val blocks = pad(value)
            .chunked(128) { it.toUByteArray() }
        for ((i, block) in blocks.withIndex()) {
            t += minOf(l - t, 128UL)
            compress(h, block, t, i == blocks.lastIndex)
        }

        return h.toUByteArray(ByteOrder.LITTLE_ENDIAN).sliceArray(0..<bytes)
    }

    private fun pad(
        value: UByteArray,
    ): UByteArray {
        return buildList {
            addAll(value)
            if (isEmpty()) add(0x00U)
            while (size % 128 != 0) {
                add(0x00U)
            }
        }.toUByteArray()
    }

    private fun compress(
        h: ULongArray,
        block: UByteArray,
        t: ULong,
        last: Boolean,
    ) {
        val m = block.toULongArray()
        val v = ULongArray(16)
        for (i in 0..<8) v[i] = h[i]
        for (i in 0..<8) v[i + 8] = initial[i]
        v[12] = v[12] xor t
        if (last) v[14] = v[14].inv()

        repeat(12) { r ->
            val s = sigma[r % 10]

            mix(v, 0, 4, 8, 12, m[s[0]], m[s[1]])
            mix(v, 1, 5, 9, 13, m[s[2]], m[s[3]])
            mix(v, 2, 6, 10, 14, m[s[4]], m[s[5]])
            mix(v, 3, 7, 11, 15, m[s[6]], m[s[7]])

            mix(v, 0, 5, 10, 15, m[s[8]], m[s[9]])
            mix(v, 1, 6, 11, 12, m[s[10]], m[s[11]])
            mix(v, 2, 7, 8, 13, m[s[12]], m[s[13]])
            mix(v, 3, 4, 9, 14, m[s[14]], m[s[15]])
        }

        for (i in 0..7) {
            h[i] = h[i] xor v[i] xor v[i + 8]
        }
    }

    private fun mix(
        v: ULongArray,
        a: Int,
        b: Int,
        c: Int,
        d: Int,
        x: ULong,
        y: ULong,
    ) {
        v[a] += v[b] + x
        v[d] = (v[d] xor v[a]).rotateRight(32)
        v[c] += v[d]
        v[b] = (v[b] xor v[c]).rotateRight(24)
        v[a] += v[b] + y
        v[d] = (v[d] xor v[a]).rotateRight(16)
        v[c] += v[d]
        v[b] = (v[b] xor v[c]).rotateRight(63)
    }
}