package org.jmrtd.protocol;

import com.airbnb.deeplinkdispatch.UrlTreeKt;
import com.google.common.primitives.UnsignedBytes;
import java.security.GeneralSecurityException;
import java.security.SecureRandom;
import java.util.Random;
import java.util.logging.Level;
import java.util.logging.Logger;
import javax.crypto.SecretKey;
import net.sf.scuba.smartcards.CardServiceException;
import org.bouncycastle.pqc.jcajce.spec.McElieceCCA2KeyGenParameterSpec;
import org.jmrtd.BACKeySpec;
import org.jmrtd.PassportService;
import org.jmrtd.Util;

/* loaded from: classes6.dex */
public class BACProtocol {
    private static final Logger LOGGER = Logger.getLogger("org.jmrtd");
    private Random random = new SecureRandom();
    private PassportService service;

    public BACProtocol(PassportService passportService) {
        this.service = passportService;
    }

    public BACResult doBAC(BACKeySpec bACKeySpec) throws CardServiceException {
        try {
            byte[] computeKeySeedForBAC = computeKeySeedForBAC(bACKeySpec);
            return new BACResult(bACKeySpec, doBACStep(Util.deriveKey(computeKeySeedForBAC, 1), Util.deriveKey(computeKeySeedForBAC, 2)));
        } catch (GeneralSecurityException e) {
            LOGGER.log(Level.WARNING, "Error during BAC", (Throwable) e);
            throw new CardServiceException(e.toString());
        } catch (CardServiceException e2) {
            LOGGER.log(Level.WARNING, "BAC failed", (Throwable) e2);
            throw e2;
        }
    }

    public BACResult doBAC(SecretKey secretKey, SecretKey secretKey2) throws CardServiceException, GeneralSecurityException {
        return new BACResult(doBACStep(secretKey, secretKey2));
    }

    private SecureMessagingWrapper doBACStep(SecretKey secretKey, SecretKey secretKey2) throws CardServiceException, GeneralSecurityException {
        byte[] sendGetChallenge = this.service.sendGetChallenge();
        byte[] bArr = new byte[8];
        this.random.nextBytes(bArr);
        byte[] bArr2 = new byte[16];
        this.random.nextBytes(bArr2);
        byte[] sendMutualAuth = this.service.sendMutualAuth(bArr, sendGetChallenge, bArr2, secretKey, secretKey2);
        byte[] bArr3 = new byte[16];
        System.arraycopy(sendMutualAuth, 16, bArr3, 0, 16);
        byte[] bArr4 = new byte[16];
        for (int i = 0; i < 16; i++) {
            bArr4[i] = (byte) ((bArr2[i] & UnsignedBytes.MAX_VALUE) ^ (bArr3[i] & UnsignedBytes.MAX_VALUE));
        }
        return new DESedeSecureMessagingWrapper(Util.deriveKey(bArr4, 1), Util.deriveKey(bArr4, 2), computeSendSequenceCounter(sendGetChallenge, bArr));
    }

    public static byte[] computeKeySeedForBAC(BACKeySpec bACKeySpec) throws GeneralSecurityException {
        String documentNumber = bACKeySpec.getDocumentNumber();
        String dateOfBirth = bACKeySpec.getDateOfBirth();
        String dateOfExpiry = bACKeySpec.getDateOfExpiry();
        if (dateOfBirth == null || dateOfBirth.length() != 6) {
            throw new IllegalArgumentException("Wrong date format used for date of birth. Expected yyMMdd, found ".concat(String.valueOf(dateOfBirth)));
        }
        if (dateOfExpiry == null || dateOfExpiry.length() != 6) {
            throw new IllegalArgumentException("Wrong date format used for date of expiry. Expected yyMMdd, found ".concat(String.valueOf(dateOfExpiry)));
        }
        if (documentNumber == null) {
            throw new IllegalArgumentException("Wrong document number. Found ".concat(String.valueOf(documentNumber)));
        }
        return computeKeySeedForBAC(fixDocumentNumber(documentNumber), dateOfBirth, dateOfExpiry);
    }

    public static long computeSendSequenceCounter(byte[] bArr, byte[] bArr2) {
        if (bArr == null || bArr.length != 8 || bArr2 == null || bArr2.length != 8) {
            throw new IllegalStateException("Wrong length input");
        }
        long j = 0;
        for (int i = 4; i < 8; i++) {
            j = (j << 8) + (bArr[i] & UnsignedBytes.MAX_VALUE);
        }
        for (int i2 = 4; i2 < 8; i2++) {
            j = (j << 8) + (bArr2[i2] & UnsignedBytes.MAX_VALUE);
        }
        return j;
    }

    private static byte[] computeKeySeedForBAC(String str, String str2, String str3) throws GeneralSecurityException {
        return Util.computeKeySeed(str, str2, str3, McElieceCCA2KeyGenParameterSpec.SHA1, true);
    }

    private static String fixDocumentNumber(String str) {
        String replace = str.replace(UrlTreeKt.configurablePathSegmentPrefixChar, ' ').trim().replace(' ', UrlTreeKt.configurablePathSegmentPrefixChar);
        while (replace.length() < 9) {
            StringBuilder sb = new StringBuilder();
            sb.append(replace);
            sb.append(UrlTreeKt.configurablePathSegmentPrefix);
            replace = sb.toString();
        }
        return replace;
    }
}