// Copyright 2020 The Go Authors. All rights reserved.
// Use of this source code is governed by a BSD-style
// license that can be found in the LICENSE file.

// +build ignore_for_gccgo

package ed25519

import (
	"internal/cpu"
	"strconv"
)

//go:noescape
func kdsaSign(message, signature, privateKey []byte) bool

//go:noescape
func kdsaVerify(message, signature, publicKey []byte) bool

// sign does a check to see if hardware has Edwards Curve instruction available.
// If it does, use the hardware implementation. Otherwise, use the generic version.
func sign(signature, privateKey, message []byte) {
	if cpu.S390X.HasEDDSA {
		if l := len(privateKey); l != PrivateKeySize {
			panic("ed25519: bad private key length: " + strconv.Itoa(l))
		}

		ret := kdsaSign(message, signature, privateKey[:32])
		if !ret {
			panic("ed25519: kdsa sign has a failure")
		}
		return
	}
	signGeneric(signature, privateKey, message)
}

// verify does a check to see if hardware has Edwards Curve instruction available.
// If it does, use the hardware implementation for eddsa verfication. Otherwise, the generic
// version is used
func verify(publicKey PublicKey, message, sig []byte) bool {
	if cpu.S390X.HasEDDSA {
		if l := len(publicKey); l != PublicKeySize {
			panic("ed25519: bad public key length: " + strconv.Itoa(l))
		}

		if len(sig) != SignatureSize || sig[63]&224 != 0 {
			return false
		}

		return kdsaVerify(message, sig, publicKey)
	}
	return verifyGeneric(publicKey, message, sig)
}