package com.l7tech.server.security.sharedkey;

import com.l7tech.objectmodel.FindException;
import com.l7tech.security.prov.JceProvider;
import com.l7tech.security.prov.ProviderUtil;
import com.l7tech.util.ExceptionUtils;
import com.l7tech.util.HexUtils;
import com.l7tech.util.Functions.Nullary;
import java.io.IOException;
import java.security.GeneralSecurityException;
import java.security.InvalidAlgorithmParameterException;
import java.security.InvalidKeyException;
import java.security.NoSuchAlgorithmException;
import java.security.Provider;
import java.security.SecureRandom;
import java.security.spec.InvalidParameterSpecException;
import java.util.Collection;
import java.util.logging.Logger;
import java.util.regex.Matcher;
import java.util.regex.Pattern;
import javax.crypto.BadPaddingException;
import javax.crypto.Cipher;
import javax.crypto.IllegalBlockSizeException;
import javax.crypto.NoSuchPaddingException;
import javax.crypto.SecretKey;
import javax.crypto.SecretKeyFactory;
import javax.crypto.spec.PBEKeySpec;
import javax.crypto.spec.PBEParameterSpec;
import org.bouncycastle.jcajce.PKCS12Key;
import org.springframework.dao.DataAccessException;
import org.springframework.orm.hibernate5.support.HibernateDaoSupport;
import org.springframework.transaction.PlatformTransactionManager;
import org.springframework.transaction.annotation.Propagation;
import org.springframework.transaction.annotation.Transactional;
import org.springframework.transaction.support.TransactionTemplate;

@Transactional(propagation = Propagation.REQUIRED, rollbackFor = Throwable.class)
public class SharedKeyManagerImpl extends HibernateDaoSupport implements SharedKeyManager {
   private final Logger a;
   public static final String CLUSTER_WIDE_IDENTIFIER;
   public static final String CIPHER;
   private static final int b = 1024;
   private final PlatformTransactionManager c;
   private SecretKey d;
   private SecretKey e;
   private static final SecureRandom f;
   private static final String[] g;

   // $VF: Handled exception range with multiple entry points by splitting it
   // $VF: Duplicated exception handlers to handle obfuscated exceptions
   public SharedKeyManagerImpl(char[] var1, PlatformTransactionManager var2) {
      this.a = Logger.getLogger(SharedKeyManagerImpl.class.getName());
      label33:
      if (var1 != null) {
         try {
            if (var1.length == 0) {
               break label33;
            }
         } catch (GeneralSecurityException var8) {
            throw a(var8);
         }

         try {
            if (var2 == null) {
               throw new IllegalArgumentException(g[16]);
            }
         } catch (GeneralSecurityException var7) {
            throw a(var7);
         }

         try {
            String[] var4 = g;
            SecretKeyFactory var3 = SecretKeyFactory.getInstance(var4[15]);
            this.d = var3.generateSecret(new PBEKeySpec(var1));
            this.e = new PKCS12Key(var1);
         } catch (GeneralSecurityException var5) {
            throw new RuntimeException(g[7] + ExceptionUtils.getMessage(var5), var5);
         }

         this.c = var2;
         return;
      }

      try {
         throw new IllegalArgumentException(g[10]);
      } catch (GeneralSecurityException var6) {
         throw a(var6);
      }
   }

   // $VF: Handled exception range with multiple entry points by splitting it
   // $VF: Duplicated exception handlers to handle obfuscated exceptions
   SharedKeyManagerImpl(char[] var1) {
      label23: {
         this.a = Logger.getLogger(SharedKeyManagerImpl.class.getName());
         if (var1 != null) {
            try {
               if (var1.length != 0) {
                  break label23;
               }
            } catch (GeneralSecurityException var6) {
               throw a(var6);
            }
         }

         try {
            throw new IllegalArgumentException(g[22]);
         } catch (GeneralSecurityException var5) {
            throw a(var5);
         }
      }

      try {
         String[] var3 = g;
         SecretKeyFactory var2 = SecretKeyFactory.getInstance(var3[6]);
         this.d = var2.generateSecret(new PBEKeySpec(var1));
         this.e = new PKCS12Key(var1);
      } catch (GeneralSecurityException var4) {
         throw new RuntimeException(g[12] + ExceptionUtils.getMessage(var4), var4);
      }

      this.c = null;
   }

   @Override
   public byte[] getSharedKey() throws FindException {
      Collection var1 = this.selectSharedKeyRecordsByEncodingId();

      try {
         if (var1 == null || var1.size() <= 0) {
            return this.a();
         }
      } catch (Exception var6) {
         throw a(var6);
      }

      SharedKeyRecord var2 = (SharedKeyRecord)var1.toArray()[0];

      try {
         String[] var4 = g;
         this.a.fine(var4[24]);
         return this.a(var2.getB64edKey());
      } catch (Exception var5) {
         throw new FindException(g[27] + ExceptionUtils.getMessage(var5), var5);
      }
   }

   @Override
   public String getEncrytpedSharedKey(String var1) throws FindException {
      String var10000 = SharedKeyRecord.class.getName();
      String[] var4 = g;
      String var2 = var4[25] + var10000 + var4[21];
      Collection var3 = (Collection)this.getHibernateTemplate().execute(new d(this, var2, var1));

      try {
         if (var3.isEmpty()) {
            throw new FindException(var4[9] + var1 + var4[2]);
         }
      } catch (FindException var5) {
         throw a(var5);
      }

      try {
         if (var3.size() > 1) {
            throw new FindException(g[5] + var1 + g[4]);
         }
      } catch (FindException var6) {
         throw a(var6);
      }

      return ((SharedKeyRecord)var3.iterator().next()).getB64edKey();
   }

   @Override
   public void saveAndEncryptSharedKey(byte[] var1) throws FindException {
      SharedKeyRecord var2 = new SharedKeyRecord();

      try {
         String[] var7 = g;
         var2.setEncodingID(var7[23]);
         var2.setB64edKey(this.a(var1));
      } catch (Exception var6) {
         String var10002 = ExceptionUtils.getMessage(var6);
         String[] var4 = g;
         throw new FindException(var4[14] + var10002, var6);
      }

      String[] var8 = g;
      this.a.info(var8[1]);

      try {
         this.a(new a(this, var2));
      } catch (DataAccessException var5) {
         throw new FindException(g[18] + ExceptionUtils.getMessage(var5), var5);
      }
   }

   private byte[] a() throws FindException {
      String[] var2 = g;
      this.a.info(var2[0]);
      byte[] var1 = this.b();
      this.saveAndEncryptSharedKey(var1);
      this.a.info(var2[8]);
      return var1;
   }

   private <T> T a(Nullary<T> var1) {
      if (this.c != null) {
         TransactionTemplate var2 = new TransactionTemplate(this.c);
         var2.setPropagationBehavior(3);
         return (T)var2.execute(new b(this, var1));
      } else {
         return (T)var1.call();
      }
   }

   protected void saveSharedKeyRecord(SharedKeyRecord var1) throws DataAccessException {
      this.getHibernateTemplate().execute(new c(this, var1));
   }

   protected Collection<SharedKeyRecord> selectSharedKeyRecordsByEncodingId() {
      String var10000 = SharedKeyRecord.class.getName();
      String[] var2 = g;
      String var1 = var2[19] + var10000 + var2[26];
      return (Collection<SharedKeyRecord>)this.getHibernateTemplate().execute(new e(this, var1));
   }

   private String a(byte[] var1) throws NoSuchAlgorithmException, NoSuchPaddingException, InvalidKeyException, BadPaddingException, IllegalBlockSizeException, InvalidParameterSpecException, InvalidAlgorithmParameterException {
      int var4 = 0;
      Provider var5 = JceProvider.getInstance().getProviderFor(JceProvider.SERVICE_PBE_WITH_SHA1_AND_DESEDE);

      Cipher var10000;
      label22: {
         try {
            if (var5 == null) {
               var10000 = Cipher.getInstance(g[6]);
               break label22;
            }
         } catch (NoSuchAlgorithmException var12) {
            throw a(var12);
         }

         String[] var11 = g;
         var10000 = Cipher.getInstance(var11[6], var5);
      }

      Cipher var6 = var10000;
      byte[] var2;
      byte[] var3;
      if (ProviderUtil.BCFIPS_PROVIDER_NAME.equalsIgnoreCase(var6.getProvider().getName())) {
         var3 = this.b();
         var4 = 1024;
         var6.init(1, this.e, new PBEParameterSpec(var3, var4));
         var2 = var6.doFinal(var1);
      } else {
         var6.init(1, this.d);
         var2 = var6.doFinal(var1);
         PBEParameterSpec var7 = var6.getParameters().getParameterSpec(PBEParameterSpec.class);
         var3 = var7.getSalt();
         var4 = var7.getIterationCount();
      }

      String var14 = HexUtils.encodeBase64(var3, true);
      String var8 = HexUtils.encodeBase64(var2, true);
      int var9 = var4;
      String var10 = var14;
      return g[11] + var10 + "$" + var9 + "$" + var8 + "$";
   }

   private byte[] a(String var1) throws IOException, GeneralSecurityException {
      String[] var12 = g;
      Pattern var2 = Pattern.compile(var12[17]);
      Matcher var3 = var2.matcher(var1);

      try {
         if (!var3.matches()) {
            throw new IOException(var12[13] + var1);
         }
      } catch (NumberFormatException var16) {
         throw a(var16);
      }

      String var4 = var3.group(1);
      String var5 = var3.group(2);
      String var6 = var3.group(3);

      byte[] var7;
      int var8;
      byte[] var9;
      try {
         var7 = HexUtils.decodeBase64(var4);
         var8 = Integer.parseInt(var5);
         var9 = HexUtils.decodeBase64(var6);
      } catch (NumberFormatException var13) {
         var12 = g;
         throw new IOException(var12[3] + var1, var13);
      }

      Provider var10 = JceProvider.getInstance().getProviderFor(JceProvider.SERVICE_PBE_WITH_SHA1_AND_DESEDE);

      Cipher var10000;
      label44: {
         try {
            if (var10 == null) {
               var10000 = Cipher.getInstance(g[6]);
               break label44;
            }
         } catch (NumberFormatException var15) {
            throw a(var15);
         }

         var10000 = Cipher.getInstance(g[6], var10);
      }

      Cipher var11 = var10000;

      try {
         if (ProviderUtil.BCFIPS_PROVIDER_NAME.equalsIgnoreCase(var11.getProvider().getName())) {
            var11.init(2, this.e, new PBEParameterSpec(var7, var8));
            return var11.doFinal(var9);
         }
      } catch (NumberFormatException var14) {
         throw a(var14);
      }

      var11.init(2, this.d, new PBEParameterSpec(var7, var8));
      return var11.doFinal(var9);
   }

   private byte[] b() {
      byte[] var1 = new byte[64];
      f.nextBytes(var1);
      return var1;
   }

   static {
      String[] var5 = new String[28];
      int var3 = 0;
      String var2 = ".RCi\u0011o\u000e\u0016_[;\u0010dK\u000e\u001aLt\u0000+W\u0018N\u0002~\fb]\t\u0016\u0002z\u0000\u007fK\u0010JVr\u001al\u000e\tU\u0002x\u0006nO\t_\u0002t\u001an\u0012.[Tr\u001al\u000e\u000eRCi\u0011o\u000e\u0016_[5\u0002Z\u0014\u001b4TTz\u0018bJ]IJz\u0006nJ]QGbTmA\u000fWCoN+\u0002Z\u0014+0ONo\u001d{B\u0018\u001aQs\u0015yK\u0019\u001aI~\rx\u000e\u001bUWu\u0010+H\u0012H\u0002r\u0010n@\tSDr\u0011y\u000eZ\u0014-xgL\u001d\u007fF.rc*5eJ9\u007fq~\u0010n<(TCy\u0018n\u000e\tU\u0002r\u001abZ\u0014[Nr\u000en\u000e\u0019_Ai\r{Z\u0014UL;\u001fnW]\\MiThB\bIV~\u0006+]\u0015[P~\u0010+E\u0018C\u0018;\"\u0013_U;\u0007cO\u000f_F;\u001fnW]ICm\u0011o\u0002]HGo\u0001y@\u0014TE;\u001d\u007f%.RCi\u0011o\u000e\u0016_[;\u001adZ]\\Mn\u001ao\u000e\u001bUP;\u001doK\u0013NK}\u001dn\\]\u001d\u001d\u001eVWh\u0000n\\-[Qh\u0004c\\\u001cIG;\u001dx\u000e\u000f_Sn\u001dyK\u0019\u0006Yj`^E/<(TCy\u0018n\u000e\tU\u0002r\u001abZ\u0014[Nr\u000en\u000e\u0019_Ai\r{Z\u0014UL;\u001fnW]\\MiThB\bIV~\u0006+]\u0015[P~\u0010+E\u0018C\u0018;\u001b4TTz\u0018bJ]IJz\u0006nJ]QGbTmA\u000fWCoN+\">UWw\u0010+@\u0012N\u0002~\u001ah\\\u0004JV;\u001anY]IJz\u0006nJ]QGbN+\u0014-xgL\u001d\u007fF.rc*5eJ9\u007fq~\u0010n\u001e\tHCu\u0007jM\tSMu9j@\u001c]GiTb]]HGj\u0001b\\\u0018^##f\u0006K6N\u001f!\u001e\n@*/sV\u0013~?\\WJV\u0013~?\\PpYg\t2(/\n\u0018(TCy\u0018n\u000e\tU\u0002h\u0015}K]TGlT`K\u0004\u0000\u0002\u001b]\\Pt\u0019+]\u0015[P~\u0010TE\u0018CQ;\u001de\u000e\u001eVCh\u0007+\u0010XyNn\u0007\u007fK\u000fmK\u007f\u0011[l8\u001f+]MJ~\u0006n\u000e\u000eRCi\u0011oq\u0016_[hZn@\u001eUFr\u001alg9\u001a\u001f;NbJ\u0018TVr\u0012bK\u000f\u001d\u001eVWh\u0000n\\-[Qh\u0004c\\\u001cIG;\u001dx\u000e\u000f_Sn\u001dyK\u0019\u0010XyNn\u0007\u007fK\u000fmK\u007f\u0011[l8\u001f*.RCi\u0011o\u000e\u0016_[;\u0012d[\u0013^\u000e;\u0015\u007fZ\u0018WRo\u001deI]NM;\u0010nM\u000fCRoTbZ\u001b]\\Pt\u0019+]\u0015[P~\u0010TE\u0018CQ;\u001de\u000e\u001eVCh\u0007+";
      int var4 = ".RCi\u0011o\u000e\u0016_[;\u0010dK\u000e\u001aLt\u0000+W\u0018N\u0002~\fb]\t\u0016\u0002z\u0000\u007fK\u0010JVr\u001al\u000e\tU\u0002x\u0006nO\t_\u0002t\u001an\u0012.[Tr\u001al\u000e\u000eRCi\u0011o\u000e\u0016_[5\u0002Z\u0014\u001b4TTz\u0018bJ]IJz\u0006nJ]QGbTmA\u000fWCoN+\u0002Z\u0014+0ONo\u001d{B\u0018\u001aQs\u0015yK\u0019\u001aI~\rx\u000e\u001bUWu\u0010+H\u0012H\u0002r\u0010n@\tSDr\u0011y\u000eZ\u0014-xgL\u001d\u007fF.rc*5eJ9\u007fq~\u0010n<(TCy\u0018n\u000e\tU\u0002r\u001abZ\u0014[Nr\u000en\u000e\u0019_Ai\r{Z\u0014UL;\u001fnW]\\MiThB\bIV~\u0006+]\u0015[P~\u0010+E\u0018C\u0018;\"\u0013_U;\u0007cO\u000f_F;\u001fnW]ICm\u0011o\u0002]HGo\u0001y@\u0014TE;\u001d\u007f%.RCi\u0011o\u000e\u0016_[;\u001adZ]\\Mn\u001ao\u000e\u001bUP;\u001doK\u0013NK}\u001dn\\]\u001d\u001d\u001eVWh\u0000n\\-[Qh\u0004c\\\u001cIG;\u001dx\u000e\u000f_Sn\u001dyK\u0019\u0006Yj`^E/<(TCy\u0018n\u000e\tU\u0002r\u001abZ\u0014[Nr\u000en\u000e\u0019_Ai\r{Z\u0014UL;\u001fnW]\\MiThB\bIV~\u0006+]\u0015[P~\u0010+E\u0018C\u0018;\u001b4TTz\u0018bJ]IJz\u0006nJ]QGbTmA\u000fWCoN+\">UWw\u0010+@\u0012N\u0002~\u001ah\\\u0004JV;\u001anY]IJz\u0006nJ]QGbN+\u0014-xgL\u001d\u007fF.rc*5eJ9\u007fq~\u0010n\u001e\tHCu\u0007jM\tSMu9j@\u001c]GiTb]]HGj\u0001b\\\u0018^##f\u0006K6N\u001f!\u001e\n@*/sV\u0013~?\\WJV\u0013~?\\PpYg\t2(/\n\u0018(TCy\u0018n\u000e\tU\u0002h\u0015}K]TGlT`K\u0004\u0000\u0002\u001b]\\Pt\u0019+]\u0015[P~\u0010TE\u0018CQ;\u001de\u000e\u001eVCh\u0007+\u0010XyNn\u0007\u007fK\u000fmK\u007f\u0011[l8\u001f+]MJ~\u0006n\u000e\u000eRCi\u0011oq\u0016_[hZn@\u001eUFr\u001alg9\u001a\u001f;NbJ\u0018TVr\u0012bK\u000f\u001d\u001eVWh\u0000n\\-[Qh\u0004c\\\u001cIG;\u001dx\u000e\u000f_Sn\u001dyK\u0019\u0010XyNn\u0007\u007fK\u000fmK\u007f\u0011[l8\u001f*.RCi\u0011o\u000e\u0016_[;\u0012d[\u0013^\u000e;\u0015\u007fZ\u0018WRo\u001deI]NM;\u0010nM\u000fCRoTbZ\u001b]\\Pt\u0019+]\u0015[P~\u0010TE\u0018CQ;\u001de\u000e\u001eVCh\u0007+"
         .length();
      char var1 = '7';
      int var7 = -1;

      label24:
      while (true) {
         byte var10000 = 63;
         String var10001 = var2.substring(++var7, var7 + var1);
         byte var10002 = -1;

         while (true) {
            String var8 = a(var10000, b(var10001));
            switch (var10002) {
               case 0:
                  var5[var3++] = var8;
                  if ((var7 += var1) >= var4) {
                     g = var5;
                     String[] var9 = g;
                     CIPHER = g[6];
                     CLUSTER_WIDE_IDENTIFIER = var9[20];
                     f = new SecureRandom();
                     return;
                  }

                  var1 = var2.charAt(var7);
                  break;
               default:
                  var5[var3++] = var8;
                  if ((var7 += var1) < var4) {
                     var1 = var2.charAt(var7);
                     continue label24;
                  }

                  var2 = "%52\u0006~\u0016vv*;\u0011i\u0017\tn'#\u0010\"\u00168f->\nb\u0014\u001fAbgC6\u00168f->\nb\u0014\u001fA\u001ef-/\u000fhS8j6z\u0007i\u0010$|2.C\u007f\u001b7w'>Cg\u0016/?b";
                  var4 = "%52\u0006~\u0016vv*;\u0011i\u0017\tn'#\u0010\"\u00168f->\nb\u0014\u001fAbgC6\u00168f->\nb\u0014\u001fA\u001ef-/\u000fhS8j6z\u0007i\u0010$|2.C\u007f\u001b7w'>Cg\u0016/?b"
                     .length();
                  var1 = '+';
                  var7 = -1;
            }

            var10000 = 71;
            var10001 = var2.substring(++var7, var7 + var1);
            var10002 = 0;
         }
      }
   }

   private static Exception a(Exception var0) {
      return var0;
   }

   private static char[] b(String var0) {
      char[] var10000 = var0.toCharArray();
      if (var10000.length < 2) {
         var10000[0] = (char)(var10000[0] ^ 17);
      }

      return var10000;
   }

   private static String a(int var0, char[] var1) {
      int var10003 = var1.length;
      int var10002 = var0;
      char[] var10001 = var1;
      int var10000 = var10003;

      for (int var2 = 0; var10000 > var2; var2++) {
         var10001[var2] = (char)(var10001[var2] ^ var10002 ^ switch (var2 % 7) {
            case 0 -> 66;
            case 1 -> 5;
            case 2 -> 29;
            case 3 -> 36;
            case 4 -> 75;
            case 5 -> 52;
            default -> 17;
         });
      }

      return new String(var10001).intern();
   }
}