#pragma once

#include "HybridCipher.hpp"

namespace margelo::nitro::crypto {

class CCMCipher : public HybridCipher {
 public:
  CCMCipher() : HybridObject(TAG) {}
  // Destructor defaulted: HybridCipher's unique_ptr ctx frees itself.
  ~CCMCipher() override = default;

  void init(const std::shared_ptr<ArrayBuffer> cipher_key, const std::shared_ptr<ArrayBuffer> iv) override;
  std::shared_ptr<ArrayBuffer> update(const std::shared_ptr<ArrayBuffer>& data) override;
  std::shared_ptr<ArrayBuffer> final() override;
  bool setAAD(const std::shared_ptr<ArrayBuffer>& data, std::optional<double> plaintextLength) override;

 private:
  // CCM mode supports messages up to 2^(8L) - 1 bytes where L is the length of nonce
  // With a 12-byte nonce (L=3), max size is 2^24 - 1 bytes
  static constexpr int kMaxMessageSize = (1 << 24) - 1;
};

} // namespace margelo::nitro::crypto