package com.google.android.gms.internal.p002firebaseauthapi;

import android.os.Build;
import java.nio.ByteBuffer;
import java.security.GeneralSecurityException;
import java.security.spec.AlgorithmParameterSpec;
import javax.crypto.Cipher;
import javax.crypto.SecretKey;
import javax.crypto.spec.GCMParameterSpec;
import javax.crypto.spec.IvParameterSpec;
import javax.crypto.spec.SecretKeySpec;

/* loaded from: classes2.dex */
public final class zzdl {
    private static final ThreadLocal zza = new zzdk();
    private final SecretKey zzb;
    private final boolean zzc;

    public zzdl(byte[] bArr, boolean z) throws GeneralSecurityException {
        if (!zzdv.zza(2)) {
            throw new GeneralSecurityException("Can not use AES-GCM in FIPS-mode, as BoringCrypto module is not available.");
        }
        zzqs.zzb(bArr.length);
        this.zzb = new SecretKeySpec(bArr, "AES");
        this.zzc = z;
    }

    public final byte[] zza(byte[] bArr, byte[] bArr2, byte[] bArr3) throws GeneralSecurityException {
        AlgorithmParameterSpec gCMParameterSpec;
        if (bArr.length != 12) {
            throw new GeneralSecurityException("iv is wrong size");
        }
        boolean z = this.zzc;
        int i = true != z ? 16 : 28;
        int length = bArr2.length;
        if (length < i) {
            throw new GeneralSecurityException("ciphertext too short");
        }
        if (!z || ByteBuffer.wrap(bArr).equals(ByteBuffer.wrap(bArr2, 0, 12))) {
            if (!zzqr.zza() || Integer.valueOf(Build.VERSION.SDK_INT).intValue() > 19) {
                gCMParameterSpec = new GCMParameterSpec(128, bArr, 0, 12);
            } else {
                gCMParameterSpec = new IvParameterSpec(bArr, 0, 12);
            }
            ThreadLocal threadLocal = zza;
            ((Cipher) threadLocal.get()).init(2, this.zzb, gCMParameterSpec);
            boolean z2 = this.zzc;
            int i2 = true != z2 ? 0 : 12;
            if (z2) {
                length -= 12;
            }
            return ((Cipher) threadLocal.get()).doFinal(bArr2, i2, length);
        }
        throw new GeneralSecurityException("iv does not match prepended iv");
    }
}