#pragma once
/**
	@file
	@brief BLS threshold signature on BN curve
	@author MITSUNARI Shigeo(@herumi)
	@license modified new BSD license
	http://opensource.org/licenses/BSD-3-Clause
*/
#include <vector>
#include <string>
#include <iosfwd>

namespace bls {

namespace impl {

struct SecretKey;
struct PublicKey;
struct Sign;

} // bls::impl

/*
	BLS signature
	e : G2 x G1 -> Fp12
	Q in G2 ; fixed global parameter
	H : {str} -> G1
	s : secret key
	sQ ; public key
	s H(m) ; signature of m
	verify ; e(sQ, H(m)) = e(Q, s H(m))
*/

/*
	initialize this library
	call this once before using the other method
*/
void init();

class SecretKey;
class PublicKey;
class Sign;

const size_t keySize = 32;

typedef std::vector<SecretKey> SecretKeyVec;
typedef std::vector<PublicKey> PublicKeyVec;
typedef std::vector<Sign> SignVec;

/*
	s ; secret key
*/
class SecretKey {
	impl::SecretKey *self_;
	int id_; // master if id_ = 0, shared if id_ > 0
	template<class G, class T>
	friend void LagrangeInterpolation(G& r, const T& vec);
	template<class T, class G>
	friend struct Wrap;
public:
	SecretKey();
	~SecretKey();
	SecretKey(const SecretKey& rhs);
	SecretKey& operator=(const SecretKey& rhs);
	bool operator==(const SecretKey& rhs) const;
	bool operator!=(const SecretKey& rhs) const { return !(*this == rhs); }
	int getId() const { return id_; }
	friend std::ostream& operator<<(std::ostream& os, const SecretKey& sec);
	friend std::istream& operator>>(std::istream& is, SecretKey& sec);
	/*
		make a secret key for id = 0
		set p[keySize] if p != 0
	*/
	void init(const uint64_t *p = 0);
	void getPublicKey(PublicKey& pub) const;
	void sign(Sign& sign, const std::string& m) const;
	/*
		make Pop(Proof of Possesion)
		pop = prv.sign(pub)
	*/
	void getPop(Sign& pop, const PublicKey& pub) const;
	/*
		make [s_0, ..., s_{k-1}] to prepare k-out-of-n secret sharing
	*/
	void getMasterSecretKey(SecretKeyVec& msk, int k) const;
	/*
		set a secret key for id > 0 from msk
	*/
	void set(const SecretKeyVec& msk, int id);
	/*
		recover secretKey from k secVec
	*/
	void recover(const SecretKeyVec& secVec);
	/*
		add secret key only if id_ == 0
	*/
	void add(const SecretKey& rhs);
};

/*
	sQ ; public key
*/
class PublicKey {
	impl::PublicKey *self_;
	int id_;
	friend class SecretKey;
	friend class Sign;
	template<class G, class T>
	friend void LagrangeInterpolation(G& r, const T& vec);
	template<class T, class G>
	friend struct Wrap;
public:
	PublicKey();
	~PublicKey();
	PublicKey(const PublicKey& rhs);
	PublicKey& operator=(const PublicKey& rhs);
	bool operator==(const PublicKey& rhs) const;
	bool operator!=(const PublicKey& rhs) const { return !(*this == rhs); }
	int getId() const { return id_; }
	friend std::ostream& operator<<(std::ostream& os, const PublicKey& pub);
	friend std::istream& operator>>(std::istream& is, PublicKey& pub);
	void getStr(std::string& str) const;
	/*
		set public for id from mpk
	*/
	void set(const PublicKeyVec& mpk, int id);
	/*
		recover publicKey from k pubVec
	*/
	void recover(const PublicKeyVec& pubVec);
	/*
		add public key only if id_ == 0
	*/
	void add(const PublicKey& rhs);
};

/*
	s H(m) ; sign
*/
class Sign {
	impl::Sign *self_;
	int id_;
	friend class PublicKey;
	friend class SecretKey;
	template<class G, class T>
	friend void LagrangeInterpolation(G& r, const T& vec);
public:
	Sign();
	~Sign();
	Sign(const Sign& rhs);
	Sign& operator=(const Sign& rhs);
	bool operator==(const Sign& rhs) const;
	bool operator!=(const Sign& rhs) const { return !(*this == rhs); }
	int getId() const { return id_; }
	friend std::ostream& operator<<(std::ostream& os, const Sign& s);
	friend std::istream& operator>>(std::istream& is, Sign& s);
	bool verify(const PublicKey& pub, const std::string& m) const;
	/*
		verify self(pop) with pub
	*/
	bool verify(const PublicKey& pub) const;
	/*
		recover sign from k signVec
	*/
	void recover(const SignVec& signVec);
	/*
		add signature key only if id_ == 0
	*/
	void add(const Sign& rhs);
};


/*
	make master public key [s_0 Q, ..., s_{k-1} Q] from msk
*/
void getMasterPublicKey(PublicKeyVec& mpk, const SecretKeyVec& msk);

/*
	make pop from msk and mpk
*/
void getPopVec(SignVec& popVec, const SecretKeyVec& msk, const PublicKeyVec& mpk);

inline Sign operator+(const Sign& a, const Sign& b) { Sign r(a); r.add(b); return r; }
inline PublicKey operator+(const PublicKey& a, const PublicKey& b) { PublicKey r(a); r.add(b); return r; }
inline SecretKey operator+(const SecretKey& a, const SecretKey& b) { SecretKey r(a); r.add(b); return r; }

} //bls