"""
Type annotations for awscrt.crypto module.

Copyright 2024 Vlad Emelianov
"""

from enum import IntEnum
from typing import Any, NamedTuple

from awscrt import NativeResource

class Hash:
    def __init__(self, native_handle: Any) -> None: ...
    @staticmethod
    def sha1_new() -> Hash: ...
    @staticmethod
    def sha256_new() -> Hash: ...
    @staticmethod
    def md5_new() -> Hash: ...
    def update(self, to_hash: Any) -> None: ...
    def digest(self, truncate_to: int = ...) -> str: ...

class HMAC:
    def __init__(self, native_handle: Any) -> None: ...
    @staticmethod
    def sha256_hmac_new(secret_key: str) -> HMAC: ...
    def update(self, to_hmac: Any) -> None: ...
    def digest(self, truncate_to: int = ...) -> str: ...

class RSAEncryptionAlgorithm(IntEnum):
    PKCS1_5 = 0
    OAEP_SHA256 = 1
    OAEP_SHA512 = 2

class RSASignatureAlgorithm(IntEnum):
    PKCS1_5_SHA256 = 0
    PKCS1_5_SHA1 = 1
    PSS_SHA256 = 2

class RSA(NativeResource):
    def __init__(self, binding: Any) -> None: ...
    @staticmethod
    def new_private_key_from_pem_data(
        pem_data: str | bytes | bytearray | memoryview,
    ) -> RSA: ...
    @staticmethod
    def new_public_key_from_pem_data(
        pem_data: str | bytes | bytearray | memoryview,
    ) -> RSA: ...
    @staticmethod
    def new_private_key_from_der_data(
        der_data: str | bytes | bytearray | memoryview,
    ) -> RSA: ...
    @staticmethod
    def new_public_key_from_der_data(der_data: bytes | bytearray | memoryview) -> RSA: ...
    def encrypt(
        self,
        encryption_algorithm: RSAEncryptionAlgorithm,
        plaintext: bytes | bytearray | memoryview,
    ) -> bytes: ...
    def decrypt(
        self,
        encryption_algorithm: RSAEncryptionAlgorithm,
        ciphertext: bytes | bytearray | memoryview,
    ) -> bytes: ...
    def sign(
        self,
        signature_algorithm: RSASignatureAlgorithm,
        digest: bytes | bytearray | memoryview,
    ) -> bytes: ...
    def verify(
        self,
        signature_algorithm: RSASignatureAlgorithm,
        digest: bytes | bytearray | memoryview,
        signature: bytes | bytearray | memoryview,
    ) -> bool: ...

class ED25519ExportFormat(IntEnum):
    RAW = 0
    OPENSSH_B64 = 1

class ED25519(NativeResource):
    def __init__(self, binding: Any) -> None: ...
    @staticmethod
    def new_generate() -> ED25519: ...
    def export_public_key(self, export_format: ED25519ExportFormat) -> bytes: ...
    def export_private_key(self, export_format: ED25519ExportFormat) -> bytes: ...

class ECType(IntEnum):
    P_256 = 0
    P_384 = 1

class ECExportFormat(IntEnum):
    SEC1 = 0
    PKCS8 = 1
    SPKI = 2

class ECRawSignature(NamedTuple):
    r: bytes
    s: bytes

class ECPublicCoords(NamedTuple):
    x: bytes
    y: bytes

class EC(NativeResource):
    def __init__(self, binding: Any) -> None: ...
    @staticmethod
    def new_generate(type: ECType) -> EC: ...
    @staticmethod
    def new_key_from_der_data(der_data: bytes | bytearray | memoryview) -> EC: ...
    @staticmethod
    def decode_der_signature(signature: bytes) -> ECRawSignature: ...
    @staticmethod
    def decode_der_signature_to_padded_pair(signature: bytes, pad_to: int) -> bytes: ...
    @staticmethod
    def encode_raw_signature(signature: ECRawSignature) -> bytes: ...
    def export_key(self, export_format: ECExportFormat) -> bytes: ...
    def get_public_coords(self) -> ECPublicCoords: ...
    def sign(self, digest: bytes | bytearray | memoryview) -> bytes: ...
    def verify(
        self, digest: bytes | bytearray | memoryview, signature: bytes | bytearray | memoryview
    ) -> bool: ...