/**********************************************************************
 * Copyright (c) 2020 Andrew Poelstra                                 *
 * Distributed under the MIT software license, see the accompanying   *
 * file COPYING or http://www.opensource.org/licenses/mit-license.php.*
 **********************************************************************/

#ifndef SECP256K1_MODULE_BPPP_UTIL_H
#define SECP256K1_MODULE_BPPP_UTIL_H

#include "../../field.h"
#include "../../group.h"
#include "../../hash.h"
#include "../../eckey.h"

/* Outputs a pair of points, amortizing the parity byte between them
 * Assumes both points' coordinates have been normalized.
 */
static void secp256k1_bppp_serialize_points(unsigned char *output, secp256k1_ge *lpt, secp256k1_ge *rpt) {
    unsigned char tmp[33];
    secp256k1_ge_serialize_ext(tmp, lpt);
    output[0] = (tmp[0] & 1) << 1;
    memcpy(&output[1], &tmp[1], 32);
    secp256k1_ge_serialize_ext(tmp, rpt);
    output[0] |= (tmp[0] & 1);
    memcpy(&output[33], &tmp[1], 32);
}

static int secp256k1_bppp_parse_one_of_points(secp256k1_ge *pt, const unsigned char *in65, int idx) {
    unsigned char tmp[33] = { 0 };
    if (in65[0] > 3) {
        return 0;
    }
    /* Check if the input array encodes the point at infinity */
    if ((secp256k1_memcmp_var(tmp, &in65[1 + 32*idx], 32)) != 0) {
        tmp[0] = 2 | ((in65[0] & (2 - idx)) >> (1 - idx));
        memcpy(&tmp[1], &in65[1 + 32*idx], 32);
    } else {
        /* If we're parsing the point at infinity, enforce that the sign bit is
         * 0. */
        if ((in65[0] & (2 - idx)) != 0) {
            return 0;
        }
    }
    return secp256k1_ge_parse_ext(pt, tmp);
}

/* Outputs a serialized point in compressed form. Returns 0 at point at infinity.
*/
static int secp256k1_bppp_serialize_pt(unsigned char *output, secp256k1_ge *lpt) {
    size_t size;
    return secp256k1_eckey_pubkey_serialize(lpt, output, &size, 1 /*compressed*/);
}

/* little-endian encodes a uint64 */
static void secp256k1_bppp_le64(unsigned char *output, const uint64_t n) {
    output[0] = n;
    output[1] = n >> 8;
    output[2] = n >> 16;
    output[3] = n >> 24;
    output[4] = n >> 32;
    output[5] = n >> 40;
    output[6] = n >> 48;
    output[7] = n >> 56;
}

/* Check if n is power of two*/
static int secp256k1_is_power_of_two(size_t n) {
    return n > 0 && (n & (n - 1)) == 0;
}

/* Compute the log2 of n. n must NOT be 0. If n is not a power of two, it
 * returns the largest `k` such that 2^k <= n. Assumes 0 < n < 2^64. In
 * Bulletproofs, this is bounded by len of input vectors which can be safely
 * assumed to be less than 2^64.
*/
static size_t secp256k1_bppp_log2(size_t n) {
    return 64 - 1 - secp256k1_clz64_var((uint64_t)n);
}

#endif