CryptoSwift/Sources/CryptoSwift/StreamDecryptor.swift

//  CryptoSwift
//
//  Copyright (C) 2014-2018 Marcin Krzyżanowski <marcin@krzyzanowskim.com>
//  This software is provided 'as-is', without any express or implied warranty.
//
//  In no event will the authors be held liable for any damages arising from the use of this software.
//
//  Permission is granted to anyone to use this software for any purpose,including commercial applications, and to alter it and redistribute it freely, subject to the following restrictions:
//
//  - The origin of this software must not be misrepresented; you must not claim that you wrote the original software. If you use this software in a product, an acknowledgment in the product documentation is required.
//  - Altered source versions must be plainly marked as such, and must not be misrepresented as being the original software.
//  - This notice may not be removed or altered from any source or binary distribution.
//

final class StreamDecryptor: Cryptor, Updatable {
    private let blockSize: Int
    private var worker: CipherModeWorker
    private let padding: Padding
    private var accumulated = Array<UInt8>()

    private var lastBlockRemainder = 0

    init(blockSize: Int, padding: Padding, _ worker: CipherModeWorker) throws {
        self.blockSize = blockSize
        self.padding = padding
        self.worker = worker
    }

    // MARK: Updatable
    public func update(withBytes bytes: ArraySlice<UInt8>, isLast: Bool) throws -> Array<UInt8> {
        // TODO: accumulate `worker.additionalBufferSize`
        // and pass it to willDecrypt(), most likely it will contains MAC
        accumulated += bytes

        // If a worker (eg CCM) can combine ciphertext + tag
        // we need to remove tag from the ciphertext.
        if !isLast && accumulated.count < worker.additionalBufferSize {
            return []
        }

        if var finalizingWorker = worker as? FinalizingDecryptModeWorker, isLast == true {
            // will truncate suffix if needed
            accumulated = Array(try finalizingWorker.willDecryptLast(bytes: accumulated.slice))
        }

        var processedBytesCount = 0
        var plaintext = Array<UInt8>(reserveCapacity: bytes.count + worker.additionalBufferSize)
        for chunk in accumulated.batched(by: blockSize) {
            plaintext += worker.decrypt(block: chunk)
            processedBytesCount += chunk.count
        }

        if var finalizingWorker = worker as? FinalizingDecryptModeWorker, isLast == true {
            plaintext = Array(try finalizingWorker.didDecryptLast(bytes: plaintext.slice))
        }

        // omit unecessary calculation if not needed
        if padding != .noPadding {
            lastBlockRemainder = plaintext.count.quotientAndRemainder(dividingBy: blockSize).remainder
        }

        if isLast {
            // CTR doesn't need padding. Really. Add padding to the last block if really want. but... don't.
            plaintext = padding.remove(from: plaintext, blockSize: blockSize - lastBlockRemainder)
        }

        accumulated.removeFirst(processedBytesCount) // super-slow

        if var finalizingWorker = worker as? FinalizingDecryptModeWorker, isLast == true {
            plaintext = Array(try finalizingWorker.finalize(decrypt: plaintext.slice))
        }

        return plaintext
    }

    public func seek(to position: Int) throws {
        guard var worker = self.worker as? SeekableModeWorker else {
            fatalError("Not supported")
        }

        try worker.seek(to: position)
        self.worker = worker
    }
}