package com.android.org.conscrypt;

import android.compat.annotation.UnsupportedAppUsage;
import com.android.org.conscrypt.NativeRef;
import com.android.org.conscrypt.OpenSSLX509CertificateFactory;
import java.io.FileDescriptor;
import java.io.IOException;
import java.io.OutputStream;
import java.net.SocketTimeoutException;
import java.nio.Buffer;
import java.nio.ByteBuffer;
import java.security.InvalidAlgorithmParameterException;
import java.security.InvalidKeyException;
import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
import java.security.PrivateKey;
import java.security.SignatureException;
import java.security.cert.CertificateEncodingException;
import java.security.cert.CertificateException;
import java.security.cert.CertificateParsingException;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Calendar;
import java.util.HashSet;
import java.util.List;
import java.util.Set;
import javax.crypto.BadPaddingException;
import javax.crypto.IllegalBlockSizeException;
import javax.crypto.ShortBufferException;
import javax.net.ssl.SSLException;
import javax.security.auth.x500.X500Principal;

/* JADX INFO: loaded from: classes.dex */
public final class NativeCrypto {
    static final String[] DEFAULT_PROTOCOLS;
    static final String[] DEFAULT_PSK_CIPHER_SUITES;
    static final String[] DEFAULT_X509_CIPHER_SUITES;
    static final int EXTENSION_TYPE_CRITICAL = 1;
    static final int EXTENSION_TYPE_NON_CRITICAL = 0;
    static final int GN_STACK_ISSUER_ALT_NAME = 2;
    static final int GN_STACK_SUBJECT_ALT_NAME = 1;
    private static final boolean HAS_AES_HARDWARE;
    static final String OBSOLETE_PROTOCOL_SSLV3 = "SSLv3";
    static final int PKCS7_CERTS = 1;
    static final int PKCS7_CRLS = 2;
    private static final Set<String> SUPPORTED_LEGACY_CIPHER_SUITES_SET;
    private static final String[] SUPPORTED_PROTOCOLS;
    private static final String SUPPORTED_PROTOCOL_TLSV1 = "TLSv1";
    private static final String SUPPORTED_PROTOCOL_TLSV1_1 = "TLSv1.1";
    private static final String SUPPORTED_PROTOCOL_TLSV1_2 = "TLSv1.2";
    static final String SUPPORTED_PROTOCOL_TLSV1_3 = "TLSv1.3";
    private static final String[] SUPPORTED_TLS_1_2_CIPHER_SUITES;
    static final Set<String> SUPPORTED_TLS_1_2_CIPHER_SUITES_SET;
    static final String[] SUPPORTED_TLS_1_3_CIPHER_SUITES;
    static final Set<String> SUPPORTED_TLS_1_3_CIPHER_SUITES_SET;
    static final String[] TLSV11_PROTOCOLS;
    static final String[] TLSV12_PROTOCOLS;
    static final String[] TLSV13_PROTOCOLS;
    static final String[] TLSV1_PROTOCOLS;
    static final String TLS_EMPTY_RENEGOTIATION_INFO_SCSV = "TLS_EMPTY_RENEGOTIATION_INFO_SCSV";
    private static final String TLS_FALLBACK_SCSV = "TLS_FALLBACK_SCSV";
    private static final UnsatisfiedLinkError loadError;

    private static class Range {
        public final String max;
        public final String min;

        public Range(String str, String str2) {
            this.min = str;
            this.max = str2;
        }
    }

    interface SSLHandshakeCallbacks {
        void clientCertificateRequested(byte[] bArr, int[] iArr, byte[][] bArr2) throws SSLException, CertificateEncodingException;

        int clientPSKKeyRequested(String str, byte[] bArr, byte[] bArr2);

        void onNewSessionEstablished(long j3);

        void onSSLStateChange(int i3, int i4);

        int selectApplicationProtocol(byte[] bArr);

        void serverCertificateRequested() throws IOException;

        int serverPSKKeyRequested(String str, String str2, byte[] bArr);

        long serverSessionRequested(byte[] bArr);

        void verifyCertificateChain(byte[][] bArr, String str) throws CertificateException;
    }

    static {
        try {
            NativeCryptoJni.init();
            clinit();
            e = null;
        } catch (UnsatisfiedLinkError e3) {
            e = e3;
        }
        loadError = e;
        String[] strArr = {"TLS_AES_128_GCM_SHA256", "TLS_AES_256_GCM_SHA384", "TLS_CHACHA20_POLY1305_SHA256"};
        SUPPORTED_TLS_1_3_CIPHER_SUITES = strArr;
        SUPPORTED_TLS_1_2_CIPHER_SUITES_SET = new HashSet();
        SUPPORTED_LEGACY_CIPHER_SUITES_SET = new HashSet();
        SUPPORTED_TLS_1_3_CIPHER_SUITES_SET = new HashSet(Arrays.asList(strArr));
        if (e == null) {
            String[] strArr2 = get_cipher_names("ALL:!DHE");
            int length = strArr2.length;
            if (length % 2 != 0) {
                throw new IllegalArgumentException("Invalid cipher list returned by get_cipher_names");
            }
            int i3 = length / 2;
            SUPPORTED_TLS_1_2_CIPHER_SUITES = new String[i3 + 2];
            for (int i4 = EXTENSION_TYPE_NON_CRITICAL; i4 < length; i4 += 2) {
                String strCipherSuiteToJava = cipherSuiteToJava(strArr2[i4]);
                SUPPORTED_TLS_1_2_CIPHER_SUITES[i4 / 2] = strCipherSuiteToJava;
                SUPPORTED_TLS_1_2_CIPHER_SUITES_SET.add(strCipherSuiteToJava);
                SUPPORTED_LEGACY_CIPHER_SUITES_SET.add(strArr2[i4 + 1]);
            }
            String[] strArr3 = SUPPORTED_TLS_1_2_CIPHER_SUITES;
            strArr3[i3] = TLS_EMPTY_RENEGOTIATION_INFO_SCSV;
            strArr3[i3 + 1] = TLS_FALLBACK_SCSV;
            HAS_AES_HARDWARE = EVP_has_aes_hardware() == 1;
        } else {
            HAS_AES_HARDWARE = false;
            SUPPORTED_TLS_1_2_CIPHER_SUITES = new String[EXTENSION_TYPE_NON_CRITICAL];
        }
        DEFAULT_X509_CIPHER_SUITES = HAS_AES_HARDWARE ? new String[]{"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256", "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384", "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", "TLS_RSA_WITH_AES_128_GCM_SHA256", "TLS_RSA_WITH_AES_256_GCM_SHA384", "TLS_RSA_WITH_AES_128_CBC_SHA", "TLS_RSA_WITH_AES_256_CBC_SHA"} : new String[]{"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256", "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384", "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", "TLS_RSA_WITH_AES_128_GCM_SHA256", "TLS_RSA_WITH_AES_256_GCM_SHA384", "TLS_RSA_WITH_AES_128_CBC_SHA", "TLS_RSA_WITH_AES_256_CBC_SHA"};
        DEFAULT_PSK_CIPHER_SUITES = new String[]{"TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256", "TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA", "TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA", "TLS_PSK_WITH_AES_128_CBC_SHA", "TLS_PSK_WITH_AES_256_CBC_SHA"};
        String[] strArr4 = {SUPPORTED_PROTOCOL_TLSV1, SUPPORTED_PROTOCOL_TLSV1_1, SUPPORTED_PROTOCOL_TLSV1_2, SUPPORTED_PROTOCOL_TLSV1_3};
        TLSV13_PROTOCOLS = strArr4;
        String[] strArr5 = {SUPPORTED_PROTOCOL_TLSV1, SUPPORTED_PROTOCOL_TLSV1_1, SUPPORTED_PROTOCOL_TLSV1_2};
        TLSV12_PROTOCOLS = strArr5;
        TLSV11_PROTOCOLS = strArr5;
        TLSV1_PROTOCOLS = strArr5;
        DEFAULT_PROTOCOLS = strArr4;
        SUPPORTED_PROTOCOLS = new String[]{SUPPORTED_PROTOCOL_TLSV1, SUPPORTED_PROTOCOL_TLSV1_1, SUPPORTED_PROTOCOL_TLSV1_2, SUPPORTED_PROTOCOL_TLSV1_3};
    }

    @UnsupportedAppUsage
    static native void ASN1_TIME_to_Calendar(long j3, Calendar calendar) throws OpenSSLX509CertificateFactory.ParsingException;

    @UnsupportedAppUsage
    static native byte[] ASN1_seq_pack_X509(long[] jArr);

    @UnsupportedAppUsage
    static native long[] ASN1_seq_unpack_X509_bio(long j3) throws OpenSSLX509CertificateFactory.ParsingException;

    @UnsupportedAppUsage
    static native void BIO_free_all(long j3);

    static native int BIO_read(long j3, byte[] bArr) throws IOException;

    static native void BIO_write(long j3, byte[] bArr, int i3, int i4) throws IndexOutOfBoundsException, IOException;

    static native void CMAC_CTX_free(long j3);

    static native long CMAC_CTX_new();

    static native byte[] CMAC_Final(NativeRef.CMAC_CTX cmac_ctx);

    static native void CMAC_Init(NativeRef.CMAC_CTX cmac_ctx, byte[] bArr);

    static native void CMAC_Update(NativeRef.CMAC_CTX cmac_ctx, byte[] bArr, int i3, int i4);

    static native void CMAC_UpdateDirect(NativeRef.CMAC_CTX cmac_ctx, long j3, int i3);

    static native int ECDH_compute_key(byte[] bArr, int i3, NativeRef.EVP_PKEY evp_pkey, NativeRef.EVP_PKEY evp_pkey2) throws IndexOutOfBoundsException, InvalidKeyException;

    static native int ECDSA_sign(byte[] bArr, byte[] bArr2, NativeRef.EVP_PKEY evp_pkey);

    static native int ECDSA_size(NativeRef.EVP_PKEY evp_pkey);

    static native int ECDSA_verify(byte[] bArr, byte[] bArr2, NativeRef.EVP_PKEY evp_pkey);

    @UnsupportedAppUsage
    static native void EC_GROUP_clear_free(long j3);

    static native byte[] EC_GROUP_get_cofactor(NativeRef.EC_GROUP ec_group);

    static native byte[][] EC_GROUP_get_curve(NativeRef.EC_GROUP ec_group);

    static native String EC_GROUP_get_curve_name(NativeRef.EC_GROUP ec_group);

    static native int EC_GROUP_get_degree(NativeRef.EC_GROUP ec_group);

    static native long EC_GROUP_get_generator(NativeRef.EC_GROUP ec_group);

    static native byte[] EC_GROUP_get_order(NativeRef.EC_GROUP ec_group);

    static native long EC_GROUP_new_arbitrary(byte[] bArr, byte[] bArr2, byte[] bArr3, byte[] bArr4, byte[] bArr5, byte[] bArr6, int i3);

    @UnsupportedAppUsage
    static native long EC_GROUP_new_by_curve_name(String str);

    static native long EC_KEY_generate_key(NativeRef.EC_GROUP ec_group);

    static native long EC_KEY_get1_group(NativeRef.EVP_PKEY evp_pkey);

    static native byte[] EC_KEY_get_private_key(NativeRef.EVP_PKEY evp_pkey);

    static native long EC_KEY_get_public_key(NativeRef.EVP_PKEY evp_pkey);

    static native byte[] EC_KEY_marshal_curve_name(NativeRef.EC_GROUP ec_group) throws IOException;

    static native long EC_KEY_parse_curve_name(byte[] bArr) throws IOException;

    @UnsupportedAppUsage
    static native void EC_POINT_clear_free(long j3);

    static native byte[][] EC_POINT_get_affine_coordinates(NativeRef.EC_GROUP ec_group, NativeRef.EC_POINT ec_point);

    static native long EC_POINT_new(NativeRef.EC_GROUP ec_group);

    static native void EC_POINT_set_affine_coordinates(NativeRef.EC_GROUP ec_group, NativeRef.EC_POINT ec_point, byte[] bArr, byte[] bArr2);

    static native int ENGINE_SSL_do_handshake(long j3, NativeSsl nativeSsl, SSLHandshakeCallbacks sSLHandshakeCallbacks) throws IOException;

    static native void ENGINE_SSL_force_read(long j3, NativeSsl nativeSsl, SSLHandshakeCallbacks sSLHandshakeCallbacks) throws IOException;

    static native int ENGINE_SSL_read_BIO_direct(long j3, NativeSsl nativeSsl, long j4, long j5, int i3, SSLHandshakeCallbacks sSLHandshakeCallbacks) throws IOException;

    static native int ENGINE_SSL_read_direct(long j3, NativeSsl nativeSsl, long j4, int i3, SSLHandshakeCallbacks sSLHandshakeCallbacks) throws IOException, CertificateException;

    static native void ENGINE_SSL_shutdown(long j3, NativeSsl nativeSsl, SSLHandshakeCallbacks sSLHandshakeCallbacks) throws IOException;

    static native int ENGINE_SSL_write_BIO_direct(long j3, NativeSsl nativeSsl, long j4, long j5, int i3, SSLHandshakeCallbacks sSLHandshakeCallbacks) throws IOException;

    static native int ENGINE_SSL_write_direct(long j3, NativeSsl nativeSsl, long j4, int i3, SSLHandshakeCallbacks sSLHandshakeCallbacks) throws IOException;

    static native int EVP_AEAD_CTX_open(long j3, byte[] bArr, int i3, byte[] bArr2, int i4, byte[] bArr3, byte[] bArr4, int i5, int i6, byte[] bArr5) throws BadPaddingException, ShortBufferException;

    static native int EVP_AEAD_CTX_open_buf(long j3, byte[] bArr, int i3, ByteBuffer byteBuffer, byte[] bArr2, ByteBuffer byteBuffer2, byte[] bArr3) throws BadPaddingException, ShortBufferException;

    static native int EVP_AEAD_CTX_seal(long j3, byte[] bArr, int i3, byte[] bArr2, int i4, byte[] bArr3, byte[] bArr4, int i5, int i6, byte[] bArr5) throws BadPaddingException, ShortBufferException;

    static native int EVP_AEAD_CTX_seal_buf(long j3, byte[] bArr, int i3, ByteBuffer byteBuffer, byte[] bArr2, ByteBuffer byteBuffer2, byte[] bArr3) throws BadPaddingException, ShortBufferException;

    static native int EVP_AEAD_max_overhead(long j3);

    static native int EVP_AEAD_nonce_length(long j3);

    static native int EVP_CIPHER_CTX_block_size(NativeRef.EVP_CIPHER_CTX evp_cipher_ctx);

    static native void EVP_CIPHER_CTX_free(long j3);

    @UnsupportedAppUsage
    static native long EVP_CIPHER_CTX_new();

    static native void EVP_CIPHER_CTX_set_key_length(NativeRef.EVP_CIPHER_CTX evp_cipher_ctx, int i3);

    static native void EVP_CIPHER_CTX_set_padding(NativeRef.EVP_CIPHER_CTX evp_cipher_ctx, boolean z2);

    @UnsupportedAppUsage
    static native int EVP_CIPHER_iv_length(long j3);

    static native int EVP_CipherFinal_ex(NativeRef.EVP_CIPHER_CTX evp_cipher_ctx, byte[] bArr, int i3) throws BadPaddingException, IllegalBlockSizeException;

    static native void EVP_CipherInit_ex(NativeRef.EVP_CIPHER_CTX evp_cipher_ctx, long j3, byte[] bArr, byte[] bArr2, boolean z2);

    static native int EVP_CipherUpdate(NativeRef.EVP_CIPHER_CTX evp_cipher_ctx, byte[] bArr, int i3, byte[] bArr2, int i4, int i5) throws IndexOutOfBoundsException;

    static native int EVP_DigestFinal_ex(NativeRef.EVP_MD_CTX evp_md_ctx, byte[] bArr, int i3);

    static native int EVP_DigestInit_ex(NativeRef.EVP_MD_CTX evp_md_ctx, long j3);

    static native byte[] EVP_DigestSignFinal(NativeRef.EVP_MD_CTX evp_md_ctx);

    static native long EVP_DigestSignInit(NativeRef.EVP_MD_CTX evp_md_ctx, long j3, NativeRef.EVP_PKEY evp_pkey);

    static native void EVP_DigestSignUpdate(NativeRef.EVP_MD_CTX evp_md_ctx, byte[] bArr, int i3, int i4);

    static native void EVP_DigestSignUpdateDirect(NativeRef.EVP_MD_CTX evp_md_ctx, long j3, int i3);

    static native void EVP_DigestUpdate(NativeRef.EVP_MD_CTX evp_md_ctx, byte[] bArr, int i3, int i4);

    static native void EVP_DigestUpdateDirect(NativeRef.EVP_MD_CTX evp_md_ctx, long j3, int i3);

    static native boolean EVP_DigestVerifyFinal(NativeRef.EVP_MD_CTX evp_md_ctx, byte[] bArr, int i3, int i4) throws IndexOutOfBoundsException;

    static native long EVP_DigestVerifyInit(NativeRef.EVP_MD_CTX evp_md_ctx, long j3, NativeRef.EVP_PKEY evp_pkey);

    static native void EVP_DigestVerifyUpdate(NativeRef.EVP_MD_CTX evp_md_ctx, byte[] bArr, int i3, int i4);

    static native void EVP_DigestVerifyUpdateDirect(NativeRef.EVP_MD_CTX evp_md_ctx, long j3, int i3);

    static native void EVP_MD_CTX_cleanup(NativeRef.EVP_MD_CTX evp_md_ctx);

    static native int EVP_MD_CTX_copy_ex(NativeRef.EVP_MD_CTX evp_md_ctx, NativeRef.EVP_MD_CTX evp_md_ctx2);

    @UnsupportedAppUsage
    static native long EVP_MD_CTX_create();

    @UnsupportedAppUsage
    static native void EVP_MD_CTX_destroy(long j3);

    @UnsupportedAppUsage
    static native int EVP_MD_size(long j3);

    static native void EVP_PKEY_CTX_free(long j3);

    static native void EVP_PKEY_CTX_set_rsa_mgf1_md(long j3, long j4) throws InvalidAlgorithmParameterException;

    static native void EVP_PKEY_CTX_set_rsa_oaep_label(long j3, byte[] bArr) throws InvalidAlgorithmParameterException;

    static native void EVP_PKEY_CTX_set_rsa_oaep_md(long j3, long j4) throws InvalidAlgorithmParameterException;

    static native void EVP_PKEY_CTX_set_rsa_padding(long j3, int i3) throws InvalidAlgorithmParameterException;

    static native void EVP_PKEY_CTX_set_rsa_pss_saltlen(long j3, int i3) throws InvalidAlgorithmParameterException;

    static native int EVP_PKEY_cmp(NativeRef.EVP_PKEY evp_pkey, NativeRef.EVP_PKEY evp_pkey2);

    static native int EVP_PKEY_decrypt(NativeRef.EVP_PKEY_CTX evp_pkey_ctx, byte[] bArr, int i3, byte[] bArr2, int i4, int i5) throws IndexOutOfBoundsException, BadPaddingException;

    static native long EVP_PKEY_decrypt_init(NativeRef.EVP_PKEY evp_pkey) throws InvalidKeyException;

    static native int EVP_PKEY_encrypt(NativeRef.EVP_PKEY_CTX evp_pkey_ctx, byte[] bArr, int i3, byte[] bArr2, int i4, int i5) throws IndexOutOfBoundsException, BadPaddingException;

    static native long EVP_PKEY_encrypt_init(NativeRef.EVP_PKEY evp_pkey) throws InvalidKeyException;

    @UnsupportedAppUsage
    static native void EVP_PKEY_free(long j3);

    static native long EVP_PKEY_new_EC_KEY(NativeRef.EC_GROUP ec_group, NativeRef.EC_POINT ec_point, byte[] bArr);

    @UnsupportedAppUsage
    static native long EVP_PKEY_new_RSA(byte[] bArr, byte[] bArr2, byte[] bArr3, byte[] bArr4, byte[] bArr5, byte[] bArr6, byte[] bArr7, byte[] bArr8);

    static native String EVP_PKEY_print_params(NativeRef.EVP_PKEY evp_pkey);

    static native String EVP_PKEY_print_public(NativeRef.EVP_PKEY evp_pkey);

    static native int EVP_PKEY_type(NativeRef.EVP_PKEY evp_pkey);

    static native long EVP_aead_aes_128_gcm();

    static native long EVP_aead_aes_128_gcm_siv();

    static native long EVP_aead_aes_256_gcm();

    static native long EVP_aead_aes_256_gcm_siv();

    static native long EVP_aead_chacha20_poly1305();

    @UnsupportedAppUsage
    static native long EVP_get_cipherbyname(String str);

    @UnsupportedAppUsage
    static native long EVP_get_digestbyname(String str);

    static native int EVP_has_aes_hardware();

    static native byte[] EVP_marshal_private_key(NativeRef.EVP_PKEY evp_pkey);

    static native byte[] EVP_marshal_public_key(NativeRef.EVP_PKEY evp_pkey);

    static native long EVP_parse_private_key(byte[] bArr) throws OpenSSLX509CertificateFactory.ParsingException;

    static native long EVP_parse_public_key(byte[] bArr) throws OpenSSLX509CertificateFactory.ParsingException;

    static native void HMAC_CTX_free(long j3);

    static native long HMAC_CTX_new();

    static native byte[] HMAC_Final(NativeRef.HMAC_CTX hmac_ctx);

    static native void HMAC_Init_ex(NativeRef.HMAC_CTX hmac_ctx, byte[] bArr, long j3);

    static native void HMAC_Update(NativeRef.HMAC_CTX hmac_ctx, byte[] bArr, int i3, int i4);

    static native void HMAC_UpdateDirect(NativeRef.HMAC_CTX hmac_ctx, long j3, int i3);

    @UnsupportedAppUsage
    static native long[] PEM_read_bio_PKCS7(long j3, int i3);

    static native long PEM_read_bio_PUBKEY(long j3);

    static native long PEM_read_bio_PrivateKey(long j3);

    @UnsupportedAppUsage
    static native long PEM_read_bio_X509(long j3);

    @UnsupportedAppUsage
    static native long PEM_read_bio_X509_CRL(long j3);

    @UnsupportedAppUsage
    static native void RAND_bytes(byte[] bArr);

    @UnsupportedAppUsage
    static native long RSA_generate_key_ex(int i3, byte[] bArr);

    static native int RSA_private_decrypt(int i3, byte[] bArr, byte[] bArr2, NativeRef.EVP_PKEY evp_pkey, int i4) throws BadPaddingException, SignatureException;

    static native int RSA_private_encrypt(int i3, byte[] bArr, byte[] bArr2, NativeRef.EVP_PKEY evp_pkey, int i4);

    static native int RSA_public_decrypt(int i3, byte[] bArr, byte[] bArr2, NativeRef.EVP_PKEY evp_pkey, int i4) throws BadPaddingException, SignatureException;

    static native int RSA_public_encrypt(int i3, byte[] bArr, byte[] bArr2, NativeRef.EVP_PKEY evp_pkey, int i4);

    static native int RSA_size(NativeRef.EVP_PKEY evp_pkey);

    static native long SSL_BIO_new(long j3, NativeSsl nativeSsl) throws SSLException;

    static native String SSL_CIPHER_get_kx_name(long j3);

    static native void SSL_CTX_free(long j3, AbstractSessionContext abstractSessionContext);

    @UnsupportedAppUsage
    static native long SSL_CTX_new();

    static native void SSL_CTX_set_session_id_context(long j3, AbstractSessionContext abstractSessionContext, byte[] bArr);

    static native long SSL_CTX_set_timeout(long j3, AbstractSessionContext abstractSessionContext, long j4);

    @UnsupportedAppUsage
    static native String SSL_SESSION_cipher(long j3);

    @UnsupportedAppUsage
    static native void SSL_SESSION_free(long j3);

    @UnsupportedAppUsage
    static native long SSL_SESSION_get_time(long j3);

    static native long SSL_SESSION_get_timeout(long j3);

    @UnsupportedAppUsage
    static native String SSL_SESSION_get_version(long j3);

    @UnsupportedAppUsage
    static native byte[] SSL_SESSION_session_id(long j3);

    static native boolean SSL_SESSION_should_be_single_use(long j3);

    static native void SSL_SESSION_up_ref(long j3);

    static native void SSL_accept_renegotiations(long j3, NativeSsl nativeSsl) throws SSLException;

    static native void SSL_clear_error();

    static native long SSL_clear_mode(long j3, NativeSsl nativeSsl, long j4);

    static native long SSL_clear_options(long j3, NativeSsl nativeSsl, long j4);

    static native void SSL_do_handshake(long j3, NativeSsl nativeSsl, FileDescriptor fileDescriptor, SSLHandshakeCallbacks sSLHandshakeCallbacks, int i3) throws SSLException, SocketTimeoutException, CertificateException;

    static native void SSL_enable_ocsp_stapling(long j3, NativeSsl nativeSsl);

    static native void SSL_enable_signed_cert_timestamps(long j3, NativeSsl nativeSsl);

    static native void SSL_enable_tls_channel_id(long j3, NativeSsl nativeSsl) throws SSLException;

    static native byte[] SSL_export_keying_material(long j3, NativeSsl nativeSsl, byte[] bArr, byte[] bArr2, int i3) throws SSLException;

    static native void SSL_free(long j3, NativeSsl nativeSsl);

    static native byte[][] SSL_get0_peer_certificates(long j3, NativeSsl nativeSsl);

    static native long SSL_get1_session(long j3, NativeSsl nativeSsl);

    static native long[] SSL_get_ciphers(long j3, NativeSsl nativeSsl);

    public static native String SSL_get_current_cipher(long j3, NativeSsl nativeSsl);

    static native int SSL_get_error(long j3, NativeSsl nativeSsl, int i3);

    static native long SSL_get_mode(long j3, NativeSsl nativeSsl);

    static native byte[] SSL_get_ocsp_response(long j3, NativeSsl nativeSsl);

    static native long SSL_get_options(long j3, NativeSsl nativeSsl);

    static native String SSL_get_servername(long j3, NativeSsl nativeSsl);

    static native int SSL_get_shutdown(long j3, NativeSsl nativeSsl);

    static native int SSL_get_signature_algorithm_key_type(int i3);

    static native byte[] SSL_get_signed_cert_timestamp_list(long j3, NativeSsl nativeSsl);

    static native long SSL_get_time(long j3, NativeSsl nativeSsl);

    static native long SSL_get_timeout(long j3, NativeSsl nativeSsl);

    static native byte[] SSL_get_tls_channel_id(long j3, NativeSsl nativeSsl) throws SSLException;

    static native byte[] SSL_get_tls_unique(long j3, NativeSsl nativeSsl);

    public static native String SSL_get_version(long j3, NativeSsl nativeSsl);

    static native void SSL_interrupt(long j3, NativeSsl nativeSsl);

    static native int SSL_max_seal_overhead(long j3, NativeSsl nativeSsl);

    static native long SSL_new(long j3, AbstractSessionContext abstractSessionContext) throws SSLException;

    static native int SSL_pending_readable_bytes(long j3, NativeSsl nativeSsl);

    static native int SSL_pending_written_bytes_in_BIO(long j3);

    static native int SSL_read(long j3, NativeSsl nativeSsl, FileDescriptor fileDescriptor, SSLHandshakeCallbacks sSLHandshakeCallbacks, byte[] bArr, int i3, int i4, int i5) throws IOException;

    static native byte[] SSL_session_id(long j3, NativeSsl nativeSsl);

    static native boolean SSL_session_reused(long j3, NativeSsl nativeSsl);

    static native void SSL_set1_tls_channel_id(long j3, NativeSsl nativeSsl, NativeRef.EVP_PKEY evp_pkey);

    static native void SSL_set_accept_state(long j3, NativeSsl nativeSsl);

    static native void SSL_set_cipher_lists(long j3, NativeSsl nativeSsl, String[] strArr);

    static native void SSL_set_client_CA_list(long j3, NativeSsl nativeSsl, byte[][] bArr) throws SSLException;

    static native void SSL_set_connect_state(long j3, NativeSsl nativeSsl);

    static native long SSL_set_mode(long j3, NativeSsl nativeSsl, long j4);

    static native void SSL_set_ocsp_response(long j3, NativeSsl nativeSsl, byte[] bArr);

    static native long SSL_set_options(long j3, NativeSsl nativeSsl, long j4);

    static native int SSL_set_protocol_versions(long j3, NativeSsl nativeSsl, int i3, int i4);

    static native void SSL_set_session(long j3, NativeSsl nativeSsl, long j4) throws SSLException;

    static native void SSL_set_session_creation_enabled(long j3, NativeSsl nativeSsl, boolean z2) throws SSLException;

    static native void SSL_set_signed_cert_timestamp_list(long j3, NativeSsl nativeSsl, byte[] bArr);

    static native long SSL_set_timeout(long j3, NativeSsl nativeSsl, long j4);

    static native void SSL_set_tlsext_host_name(long j3, NativeSsl nativeSsl, String str) throws SSLException;

    static native void SSL_set_verify(long j3, NativeSsl nativeSsl, int i3);

    static native void SSL_shutdown(long j3, NativeSsl nativeSsl, FileDescriptor fileDescriptor, SSLHandshakeCallbacks sSLHandshakeCallbacks) throws IOException;

    static native void SSL_use_psk_identity_hint(long j3, NativeSsl nativeSsl, String str) throws SSLException;

    static native void SSL_write(long j3, NativeSsl nativeSsl, FileDescriptor fileDescriptor, SSLHandshakeCallbacks sSLHandshakeCallbacks, byte[] bArr, int i3, int i4, int i5) throws IOException;

    static native boolean X25519(byte[] bArr, byte[] bArr2, byte[] bArr3) throws InvalidKeyException;

    static native void X25519_keypair(byte[] bArr, byte[] bArr2);

    static native void X509_CRL_free(long j3, OpenSSLX509CRL openSSLX509CRL);

    static native long X509_CRL_get0_by_cert(long j3, OpenSSLX509CRL openSSLX509CRL, long j4, OpenSSLX509Certificate openSSLX509Certificate);

    static native long X509_CRL_get0_by_serial(long j3, OpenSSLX509CRL openSSLX509CRL, byte[] bArr);

    static native long[] X509_CRL_get_REVOKED(long j3, OpenSSLX509CRL openSSLX509CRL);

    static native long X509_CRL_get_ext(long j3, OpenSSLX509CRL openSSLX509CRL, String str);

    static native byte[] X509_CRL_get_ext_oid(long j3, OpenSSLX509CRL openSSLX509CRL, String str);

    static native byte[] X509_CRL_get_issuer_name(long j3, OpenSSLX509CRL openSSLX509CRL);

    static native long X509_CRL_get_lastUpdate(long j3, OpenSSLX509CRL openSSLX509CRL);

    static native long X509_CRL_get_nextUpdate(long j3, OpenSSLX509CRL openSSLX509CRL);

    static native long X509_CRL_get_version(long j3, OpenSSLX509CRL openSSLX509CRL);

    static native void X509_CRL_print(long j3, long j4, OpenSSLX509CRL openSSLX509CRL);

    static native void X509_CRL_verify(long j3, OpenSSLX509CRL openSSLX509CRL, NativeRef.EVP_PKEY evp_pkey) throws BadPaddingException, IllegalBlockSizeException, SignatureException, NoSuchAlgorithmException, InvalidKeyException;

    static int X509_NAME_hash(X500Principal x500Principal) {
        return X509_NAME_hash(x500Principal, "SHA1");
    }

    public static int X509_NAME_hash_old(X500Principal x500Principal) {
        return X509_NAME_hash(x500Principal, "MD5");
    }

    @UnsupportedAppUsage
    static native long X509_REVOKED_dup(long j3);

    @UnsupportedAppUsage
    static native long X509_REVOKED_get_ext(long j3, String str);

    @UnsupportedAppUsage
    static native byte[] X509_REVOKED_get_ext_oid(long j3, String str);

    @UnsupportedAppUsage
    static native byte[] X509_REVOKED_get_serialNumber(long j3);

    @UnsupportedAppUsage
    static native void X509_REVOKED_print(long j3, long j4);

    static native int X509_check_issued(long j3, OpenSSLX509Certificate openSSLX509Certificate, long j4, OpenSSLX509Certificate openSSLX509Certificate2);

    static native int X509_cmp(long j3, OpenSSLX509Certificate openSSLX509Certificate, long j4, OpenSSLX509Certificate openSSLX509Certificate2);

    static native void X509_free(long j3, OpenSSLX509Certificate openSSLX509Certificate);

    static native byte[] X509_get_ext_oid(long j3, OpenSSLX509Certificate openSSLX509Certificate, String str);

    static native byte[] X509_get_issuer_name(long j3, OpenSSLX509Certificate openSSLX509Certificate);

    static native long X509_get_notAfter(long j3, OpenSSLX509Certificate openSSLX509Certificate);

    static native long X509_get_notBefore(long j3, OpenSSLX509Certificate openSSLX509Certificate);

    static native long X509_get_pubkey(long j3, OpenSSLX509Certificate openSSLX509Certificate) throws NoSuchAlgorithmException, InvalidKeyException;

    static native byte[] X509_get_serialNumber(long j3, OpenSSLX509Certificate openSSLX509Certificate);

    static native byte[] X509_get_subject_name(long j3, OpenSSLX509Certificate openSSLX509Certificate);

    static native long X509_get_version(long j3, OpenSSLX509Certificate openSSLX509Certificate);

    static native void X509_print_ex(long j3, long j4, OpenSSLX509Certificate openSSLX509Certificate, long j5, long j6);

    @UnsupportedAppUsage
    static native int X509_supported_extension(long j3);

    static native void X509_verify(long j3, OpenSSLX509Certificate openSSLX509Certificate, NativeRef.EVP_PKEY evp_pkey) throws BadPaddingException;

    static native void asn1_read_free(long j3);

    static native long asn1_read_init(byte[] bArr) throws IOException;

    static native boolean asn1_read_is_empty(long j3);

    static native boolean asn1_read_next_tag_is(long j3, int i3) throws IOException;

    static native void asn1_read_null(long j3) throws IOException;

    static native byte[] asn1_read_octetstring(long j3) throws IOException;

    static native String asn1_read_oid(long j3) throws IOException;

    static native long asn1_read_sequence(long j3) throws IOException;

    static native long asn1_read_tagged(long j3) throws IOException;

    static native long asn1_read_uint64(long j3) throws IOException;

    static native void asn1_write_cleanup(long j3);

    static native byte[] asn1_write_finish(long j3) throws IOException;

    static native void asn1_write_flush(long j3) throws IOException;

    static native void asn1_write_free(long j3);

    static native long asn1_write_init() throws IOException;

    static native void asn1_write_null(long j3) throws IOException;

    static native void asn1_write_octetstring(long j3, byte[] bArr) throws IOException;

    static native void asn1_write_oid(long j3, String str) throws IOException;

    static native long asn1_write_sequence(long j3) throws IOException;

    static native long asn1_write_tag(long j3, int i3) throws IOException;

    static native void asn1_write_uint64(long j3, long j4) throws IOException;

    static native void chacha20_encrypt_decrypt(byte[] bArr, int i3, byte[] bArr2, int i4, int i5, byte[] bArr3, byte[] bArr4, int i6);

    static void checkAvailability() {
        UnsatisfiedLinkError unsatisfiedLinkError = loadError;
        if (unsatisfiedLinkError != null) {
            throw unsatisfiedLinkError;
        }
    }

    static String[] checkEnabledCipherSuites(String[] strArr) {
        if (strArr == null) {
            throw new IllegalArgumentException("cipherSuites == null");
        }
        for (int i3 = EXTENSION_TYPE_NON_CRITICAL; i3 < strArr.length; i3++) {
            if (strArr[i3] == null) {
                throw new IllegalArgumentException("cipherSuites[" + i3 + "] == null");
            }
            if (!strArr[i3].equals(TLS_EMPTY_RENEGOTIATION_INFO_SCSV) && !strArr[i3].equals(TLS_FALLBACK_SCSV) && !SUPPORTED_TLS_1_2_CIPHER_SUITES_SET.contains(strArr[i3]) && !SUPPORTED_LEGACY_CIPHER_SUITES_SET.contains(strArr[i3])) {
                throw new IllegalArgumentException("cipherSuite " + strArr[i3] + " is not supported.");
            }
        }
        return strArr;
    }

    static String[] checkEnabledProtocols(String[] strArr) {
        if (strArr == null) {
            throw new IllegalArgumentException("protocols == null");
        }
        int length = strArr.length;
        for (int i3 = EXTENSION_TYPE_NON_CRITICAL; i3 < length; i3++) {
            String str = strArr[i3];
            if (str == null) {
                throw new IllegalArgumentException("protocols contains null");
            }
            if (!str.equals(SUPPORTED_PROTOCOL_TLSV1) && !str.equals(SUPPORTED_PROTOCOL_TLSV1_1) && !str.equals(SUPPORTED_PROTOCOL_TLSV1_2) && !str.equals(SUPPORTED_PROTOCOL_TLSV1_3) && !str.equals(OBSOLETE_PROTOCOL_SSLV3)) {
                throw new IllegalArgumentException("protocol " + str + " is not supported");
            }
        }
        return strArr;
    }

    static String cipherSuiteFromJava(String str) {
        return "SSL_RSA_WITH_3DES_EDE_CBC_SHA".equals(str) ? "TLS_RSA_WITH_3DES_EDE_CBC_SHA" : str;
    }

    static String cipherSuiteToJava(String str) {
        return "TLS_RSA_WITH_3DES_EDE_CBC_SHA".equals(str) ? "SSL_RSA_WITH_3DES_EDE_CBC_SHA" : str;
    }

    private static native void clinit();

    @UnsupportedAppUsage
    static native long create_BIO_InputStream(OpenSSLBIOInputStream openSSLBIOInputStream, boolean z2);

    @UnsupportedAppUsage
    static native long create_BIO_OutputStream(OutputStream outputStream);

    @UnsupportedAppUsage
    static native long[] d2i_PKCS7_bio(long j3, int i3) throws OpenSSLX509CertificateFactory.ParsingException;

    @UnsupportedAppUsage
    static native long d2i_SSL_SESSION(byte[] bArr) throws IOException;

    @UnsupportedAppUsage
    static native long d2i_X509(byte[] bArr) throws OpenSSLX509CertificateFactory.ParsingException;

    @UnsupportedAppUsage
    static native long d2i_X509_CRL_bio(long j3);

    @UnsupportedAppUsage
    static native long d2i_X509_bio(long j3);

    static native byte[] getApplicationProtocol(long j3, NativeSsl nativeSsl);

    static native long getDirectBufferAddress(Buffer buffer);

    static native long getECPrivateKeyWrapper(PrivateKey privateKey, NativeRef.EC_GROUP ec_group);

    private static int getProtocolConstant(String str) {
        if (str.equals(SUPPORTED_PROTOCOL_TLSV1)) {
            return 769;
        }
        if (str.equals(SUPPORTED_PROTOCOL_TLSV1_1)) {
            return 770;
        }
        if (str.equals(SUPPORTED_PROTOCOL_TLSV1_2)) {
            return 771;
        }
        if (str.equals(SUPPORTED_PROTOCOL_TLSV1_3)) {
            return 772;
        }
        throw new AssertionError("Unknown protocol encountered: " + str);
    }

    private static Range getProtocolRange(String[] strArr) {
        List listAsList = Arrays.asList(strArr);
        String str = null;
        int i3 = EXTENSION_TYPE_NON_CRITICAL;
        String str2 = null;
        while (true) {
            String[] strArr2 = SUPPORTED_PROTOCOLS;
            if (i3 >= strArr2.length) {
                break;
            }
            String str3 = strArr2[i3];
            if (listAsList.contains(str3)) {
                if (str == null) {
                    str = str3;
                }
                str2 = str3;
            } else if (str != null) {
                break;
            }
            i3++;
        }
        if (str == null || str2 == null) {
            throw new IllegalArgumentException("No protocols enabled.");
        }
        return new Range(str, str2);
    }

    static native long getRSAPrivateKeyWrapper(PrivateKey privateKey, byte[] bArr);

    static String[] getSupportedCipherSuites() {
        return SSLUtils.concat(SUPPORTED_TLS_1_3_CIPHER_SUITES, (String[]) SUPPORTED_TLS_1_2_CIPHER_SUITES.clone());
    }

    static String[] getSupportedProtocols() {
        return (String[]) SUPPORTED_PROTOCOLS.clone();
    }

    static native int get_EVP_CIPHER_CTX_buf_len(NativeRef.EVP_CIPHER_CTX evp_cipher_ctx);

    static native boolean get_EVP_CIPHER_CTX_final_used(NativeRef.EVP_CIPHER_CTX evp_cipher_ctx);

    static native byte[][] get_RSA_private_params(NativeRef.EVP_PKEY evp_pkey);

    static native byte[][] get_RSA_public_params(NativeRef.EVP_PKEY evp_pkey);

    static native byte[] get_X509_CRL_crl_enc(long j3, OpenSSLX509CRL openSSLX509CRL);

    static native String[] get_X509_CRL_ext_oids(long j3, OpenSSLX509CRL openSSLX509CRL, int i3);

    static native String get_X509_CRL_sig_alg_oid(long j3, OpenSSLX509CRL openSSLX509CRL);

    static native byte[] get_X509_CRL_sig_alg_parameter(long j3, OpenSSLX509CRL openSSLX509CRL);

    static native byte[] get_X509_CRL_signature(long j3, OpenSSLX509CRL openSSLX509CRL);

    static native Object[][] get_X509_GENERAL_NAME_stack(long j3, OpenSSLX509Certificate openSSLX509Certificate, int i3) throws CertificateParsingException;

    @UnsupportedAppUsage
    static native String[] get_X509_REVOKED_ext_oids(long j3, int i3);

    @UnsupportedAppUsage
    static native long get_X509_REVOKED_revocationDate(long j3);

    static native int get_X509_ex_flags(long j3, OpenSSLX509Certificate openSSLX509Certificate);

    static native boolean[] get_X509_ex_kusage(long j3, OpenSSLX509Certificate openSSLX509Certificate);

    static native int get_X509_ex_pathlen(long j3, OpenSSLX509Certificate openSSLX509Certificate);

    static native String[] get_X509_ex_xkusage(long j3, OpenSSLX509Certificate openSSLX509Certificate);

    static native String[] get_X509_ext_oids(long j3, OpenSSLX509Certificate openSSLX509Certificate, int i3);

    static native boolean[] get_X509_issuerUID(long j3, OpenSSLX509Certificate openSSLX509Certificate);

    static native String get_X509_pubkey_oid(long j3, OpenSSLX509Certificate openSSLX509Certificate);

    static native String get_X509_sig_alg_oid(long j3, OpenSSLX509Certificate openSSLX509Certificate);

    static native byte[] get_X509_sig_alg_parameter(long j3, OpenSSLX509Certificate openSSLX509Certificate);

    static native byte[] get_X509_signature(long j3, OpenSSLX509Certificate openSSLX509Certificate);

    static native boolean[] get_X509_subjectUID(long j3, OpenSSLX509Certificate openSSLX509Certificate);

    static native byte[] get_X509_tbs_cert(long j3, OpenSSLX509Certificate openSSLX509Certificate);

    static native byte[] get_X509_tbs_cert_without_ext(long j3, OpenSSLX509Certificate openSSLX509Certificate, String str);

    static native String[] get_cipher_names(String str);

    public static native byte[] get_ocsp_single_extension(byte[] bArr, String str, long j3, OpenSSLX509Certificate openSSLX509Certificate, long j4, OpenSSLX509Certificate openSSLX509Certificate2);

    @UnsupportedAppUsage
    static native byte[] i2d_PKCS7(long[] jArr);

    @UnsupportedAppUsage
    static native byte[] i2d_SSL_SESSION(long j3);

    static native byte[] i2d_X509(long j3, OpenSSLX509Certificate openSSLX509Certificate);

    static native byte[] i2d_X509_CRL(long j3, OpenSSLX509CRL openSSLX509CRL);

    static native byte[] i2d_X509_PUBKEY(long j3, OpenSSLX509Certificate openSSLX509Certificate);

    @UnsupportedAppUsage
    static native byte[] i2d_X509_REVOKED(long j3);

    static native void setApplicationProtocols(long j3, NativeSsl nativeSsl, boolean z2, byte[] bArr) throws IOException;

    static void setEnabledCipherSuites(long j3, NativeSsl nativeSsl, String[] strArr, String[] strArr2) {
        checkEnabledCipherSuites(strArr);
        String str = getProtocolRange(strArr2).max;
        ArrayList arrayList = new ArrayList();
        for (int i3 = EXTENSION_TYPE_NON_CRITICAL; i3 < strArr.length; i3++) {
            String str2 = strArr[i3];
            if (!str2.equals(TLS_EMPTY_RENEGOTIATION_INFO_SCSV)) {
                if (str2.equals(TLS_FALLBACK_SCSV) && (str.equals(SUPPORTED_PROTOCOL_TLSV1) || str.equals(SUPPORTED_PROTOCOL_TLSV1_1))) {
                    SSL_set_mode(j3, nativeSsl, 1024L);
                } else {
                    arrayList.add(cipherSuiteFromJava(str2));
                }
            }
        }
        SSL_set_cipher_lists(j3, nativeSsl, (String[]) arrayList.toArray(new String[arrayList.size()]));
    }

    static void setEnabledProtocols(long j3, NativeSsl nativeSsl, String[] strArr) {
        checkEnabledProtocols(strArr);
        Range protocolRange = getProtocolRange(strArr);
        SSL_set_protocol_versions(j3, nativeSsl, getProtocolConstant(protocolRange.min), getProtocolConstant(protocolRange.max));
    }

    static native void setHasApplicationProtocolSelector(long j3, NativeSsl nativeSsl, boolean z2) throws IOException;

    static native void setLocalCertsAndPrivateKey(long j3, NativeSsl nativeSsl, byte[][] bArr, NativeRef.EVP_PKEY evp_pkey) throws SSLException;

    static native void set_SSL_psk_client_callback_enabled(long j3, NativeSsl nativeSsl, boolean z2);

    static native void set_SSL_psk_server_callback_enabled(long j3, NativeSsl nativeSsl, boolean z2);

    static native boolean usesBoringSSL_FIPS_mode();

    private static int X509_NAME_hash(X500Principal x500Principal, String str) {
        try {
            byte[] bArrDigest = MessageDigest.getInstance(str).digest(x500Principal.getEncoded());
            return ((bArrDigest[3] & 255) << 24) | ((bArrDigest[1] & 255) << 8) | ((bArrDigest[EXTENSION_TYPE_NON_CRITICAL] & 255) << EXTENSION_TYPE_NON_CRITICAL) | ((bArrDigest[2] & 255) << 16);
        } catch (NoSuchAlgorithmException e3) {
            throw new AssertionError(e3);
        }
    }
}