#[macro_use]
extern crate log;
#[macro_use]
extern crate pretty_assertions;
#[macro_use]
extern crate smallvec;

use std::fs::File;
use std::io::Read;
use std::path::Path;

use buffer_redux::BufReader;
use chrono::{DateTime, Utc};
use num_bigint::BigUint;
use num_traits::ToPrimitive;
use pgp::composed::signed_key::*;
use pgp::composed::Deserializable;
use pgp::crypto::ecdsa::SecretKey as ECDSASecretKey;
use pgp::crypto::{
    ecc_curve::ECCCurve, hash::HashAlgorithm, public_key::PublicKeyAlgorithm,
    sym::SymmetricKeyAlgorithm,
};
use pgp::errors::Error;
use pgp::packet::{
    KeyFlags, Signature, SignatureType, Subpacket, SubpacketData, UserAttribute, UserId,
};
use pgp::ser::Serialize;
use pgp::types::{
    CompressionAlgorithm, KeyId, KeyVersion, Mpi, PublicParams, S2kParams, SecretKeyRepr,
    SecretKeyTrait, SecretParams, SignedUser, StringToKey, Version,
};
use pgp::{armor, types::PublicKeyTrait};
use rand::thread_rng;
use rsa::{
    traits::{PrivateKeyParts, PublicKeyParts},
    RsaPrivateKey, RsaPublicKey,
};
use smallvec::SmallVec;

fn read_file<P: AsRef<Path> + ::std::fmt::Debug>(path: P) -> File {
    // Open the path in read-only mode, returns `io::Result<File>`
    match File::open(&path) {
        // The `description` method of `io::Error` returns a string that
        // describes the error
        Err(why) => panic!("couldn't open {path:?}: {why}"),
        Ok(file) => file,
    }
}

fn get_test_key(name: &str) -> File {
    read_file(Path::new("./tests/openpgp-interop/testcases/keys").join(name))
}

#[derive(Debug, Default, PartialEq, Eq, Clone)]
struct DumpResult {
    valid_count: usize,
    err_count: usize,
    unimpl_count: usize,
    total_count: usize,
}

fn test_parse_dump(i: usize, expected: DumpResult) {
    let _ = pretty_env_logger::try_init();

    let f = read_file(Path::new("./tests/tests/sks-dump/").join(format!("000{i}.pgp")));

    let mut actual = DumpResult::default();

    for (j, key) in SignedPublicKey::from_bytes_many(f).enumerate() {
        if j % 1000 == 0 {
            println!("key {}: {}", i, j);
        }
        actual.total_count += 1;
        let key = key.as_ref().expect("failed to parse key");

        // roundtrip
        {
            // serialize and check we get the same thing
            let serialized = key.to_armored_bytes(None.into()).unwrap();

            // and parse them again
            let (key2, _headers) =
                SignedPublicKey::from_string(std::str::from_utf8(&serialized[..]).unwrap())
                    .expect("failed to parse round2 - string");
            assert_eq!(key, &key2, "string");

            // and parse them again (buffered)
            let (key2, _headers) = SignedPublicKey::from_armor_single(&serialized[..])
                .expect("failed to parse round2 - bytes");
            assert_eq!(key, &key2, "bytes");
        }

        match key.verify() {
            // Skip these for now
            Err(Error::Unimplemented(err)) => {
                warn!("unimplemented: {}:{} {:?}", i, j, err);
                actual.unimpl_count += 1;
            }
            Err(err) => {
                warn!(
                    "verification failed: {}:{}: public key {}: {:?}",
                    i,
                    j,
                    hex::encode(key.key_id()),
                    err
                );
                actual.err_count += 1;
            }
            // all good
            Ok(_) => {
                actual.valid_count += 1;
            }
        }
    }

    assert_eq!(expected, actual);
}

macro_rules! parse_dumps {
    ( $( ($name:ident, $num:expr, $count:expr, $unimpl:expr, $err:expr, $total:expr), )* ) => {
        $(
            #[test]
            #[ignore]
            fn $name() {
                test_parse_dump($num, DumpResult {
                    valid_count: $count,
                    unimpl_count: $unimpl,
                    err_count: $err,
                    total_count: $total,
                });
            }
        )*
    };
}

parse_dumps!(
    (
        test_parse_dumps_0,
        0,
        17_704,
        1, // Hash::Other(4)
        3294,
        20_999
    ),
    (
        test_parse_dumps_1,
        1,
        17_542,
        // - Hash::Other(4)
        // - Elgamal verify
        8,
        3450,
        21_000
    ),
    (
        test_parse_dumps_2,
        2,
        17_583,
        // - Hash::Other(4)
        // - Hash::Other(5)
        // - Elgamal verify
        5,
        3411,
        20_999
    ),
    (
        test_parse_dumps_3,
        3,
        17_651,
        // - Hash::Other(4)
        // - Elgamal verify
        6,
        3341,
        20_998
    ),
    (
        test_parse_dumps_4,
        4,
        17_583,
        // - Elgamal verify
        2,
        3414,
        20_999
    ),
    (
        test_parse_dumps_5,
        5,
        17_609,
        // - Hash::Other(4)
        // - Elgamal verify
        8,
        3382,
        20_999
    ),
    (
        test_parse_dumps_6,
        6,
        17_676,
        // - Elgamal verify
        1,
        3323,
        21_000
    ),
    (
        test_parse_dumps_7,
        7,
        17_688,
        // - Elgamal verify
        3,
        3309,
        21_000
    ),
    (
        test_parse_dumps_8,
        8,
        17_693,
        // - Hash::Other(5)
        // - Elgamal verify
        6,
        3301,
        21_000
    ),
    (
        test_parse_dumps_9,
        9,
        17_546,
        // - Hash::Other(5)
        // - Elgamal verify
        3,
        3451,
        21_000
    ),
);

#[test]
fn test_parse_gnupg_v1() {
    let _ = pretty_env_logger::try_init();

    for i in 1..5 {
        let name = format!("gnupg-v1-00{i}.asc");
        let mut file = get_test_key(&name);
        let mut buf = vec![];
        file.read_to_end(&mut buf).unwrap();

        let input = ::std::str::from_utf8(buf.as_slice()).expect("failed to convert to string");
        let (pk, headers) = SignedPublicKey::from_string(input).expect("failed to parse key");
        match pk.verify() {
            // Skip these for now
            Err(Error::Unimplemented(err)) => {
                warn!("verification failed: {:?}", err);
            }
            Err(err) => panic!("{err:?}"),
            // all good
            Ok(_) => {}
        }

        // serialize and check we get the same thing
        let serialized = pk.to_armored_bytes(Some(&headers).into()).unwrap();

        // and parse them again
        let (pk2, headers2) =
            SignedPublicKey::from_armor_single(&serialized[..]).expect("failed to parse round2");
        assert_eq!(headers, headers2);
        assert_eq!(pk, pk2);
    }
}

#[test]
fn test_parse_openpgp_sample_rsa_private() {
    let p = Path::new("./tests/openpgp/samplekeys/rsa-primary-auth-only.sec.asc");
    let mut file = read_file(p.to_path_buf());

    let mut buf = vec![];
    file.read_to_end(&mut buf).expect("failed to read file");

    let input = ::std::str::from_utf8(buf.as_slice()).expect("failed to convert to string");
    let (key, _headers) = SignedSecretKey::from_string(input).expect("failed to parse key");
    key.verify().expect("invalid key");

    let pkey = key.primary_key;
    assert_eq!(pkey.version(), KeyVersion::V4);
    assert_eq!(pkey.algorithm(), PublicKeyAlgorithm::RSA);

    assert_eq!(
        pkey.secret_params().checksum(),
        hex::decode("2c46").expect("failed hex encoding")
    );

    pkey.unlock(
        || "".to_string(),
        |unlocked_key| {
            match unlocked_key {
                SecretKeyRepr::RSA(k) => {
                    assert_eq!(k.d().bits(), 2044);
                    assert_eq!(k.primes()[0].bits(), 1024);
                    assert_eq!(k.primes()[1].bits(), 1024);

                    // test basic encrypt decrypt
                    let plaintext = vec![2u8; 128];
                    let mut rng = thread_rng();

                    let ciphertext = {
                        // TODO: fix this in rust-rsa
                        let k: RsaPrivateKey = (*k).clone();
                        let pk: RsaPublicKey = k.into();
                        pk.encrypt(
                            &mut rng,
                            rsa::pkcs1v15::Pkcs1v15Encrypt,
                            plaintext.as_slice(),
                        )
                        .expect("failed to encrypt")
                    };

                    let k: &RsaPrivateKey = k;
                    let new_plaintext = k
                        .decrypt(rsa::pkcs1v15::Pkcs1v15Encrypt, ciphertext.as_slice())
                        .expect("failed to decrypt");
                    assert_eq!(plaintext, new_plaintext);
                }
                _ => panic!("unexpected params type {unlocked_key:?}"),
            }
            Ok(())
        },
    )
    .expect("failed to unlock");

    let pub_key = pkey.public_key();
    assert_eq!(pub_key.key_id(), pkey.key_id());
}

#[test]
fn test_parse_details() {
    let _ = pretty_env_logger::try_init();

    let file = File::open("./tests/openpgp-interop/testcases/keys/gnupg-v1-003.asc").unwrap();
    let (key, _headers) = SignedPublicKey::from_armor_single(file).expect("failed to parse key");
    key.verify().expect("invalid key");

    assert_eq!(
        hex::encode(key.primary_key.fingerprint().as_bytes()),
        "56c65c513a0d1b9cff532d784c073ae0c8445c0c"
    );

    assert_eq!(
        key.primary_key.key_id().as_ref(),
        &hex::decode("4c073ae0c8445c0c").unwrap()[..]
    );

    let primary_n = Mpi::from_raw(hex::decode("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").unwrap());

    let pk = key.primary_key;
    assert_eq!(pk.version(), KeyVersion::V4);
    assert_eq!(pk.algorithm(), PublicKeyAlgorithm::RSA);

    match pk.public_params() {
        PublicParams::RSA { n, e } => {
            assert_eq!(n, &primary_n);
            assert_eq!(
                BigUint::from_bytes_be(e.as_bytes()).to_u64().unwrap(),
                0x0001_0001
            );
        }
        _ => panic!("wrong public params: {:?}", pk.public_params()),
    }

    assert_eq!(pk.created_at().timestamp(), 14_0207_0261);
    assert_eq!(pk.expiration(), None);

    // TODO: examine subkey details
    assert_eq!(key.public_subkeys.len(), 1, "missing subkey");

    let issuer = Subpacket::regular(SubpacketData::Issuer(
        KeyId::from_slice(&[0x4C, 0x07, 0x3A, 0xE0, 0xC8, 0x44, 0x5C, 0x0C]).unwrap(),
    ));
    let key_flags: SmallVec<[u8; 1]> = KeyFlags(0x03).into();
    let p_sym_algs = smallvec![
        SymmetricKeyAlgorithm::AES256,
        SymmetricKeyAlgorithm::AES192,
        SymmetricKeyAlgorithm::AES128,
        SymmetricKeyAlgorithm::CAST5,
        SymmetricKeyAlgorithm::TripleDES,
    ];
    let p_com_algs = smallvec![
        CompressionAlgorithm::ZLIB,
        CompressionAlgorithm::BZip2,
        CompressionAlgorithm::ZIP,
    ];
    let p_hash_algs = smallvec![
        HashAlgorithm::SHA2_256,
        HashAlgorithm::SHA1,
        HashAlgorithm::SHA2_384,
        HashAlgorithm::SHA2_512,
        HashAlgorithm::SHA2_224,
    ];

    let sig1 = Signature::v4(
        Version::Old,
        SignatureType::CertPositive,
        PublicKeyAlgorithm::RSA,
        HashAlgorithm::SHA1,
        [0x7c, 0x63],
        vec![Mpi::from_raw(vec![
            0x15, 0xb5, 0x4f, 0xca, 0x11, 0x7f, 0x1b, 0x1d, 0xc0, 0x7a, 0x05, 0x97, 0x25, 0x10,
            0x4b, 0x6a, 0x76, 0x12, 0xf8, 0x89, 0x48, 0x76, 0x74, 0xeb, 0x8b, 0x22, 0xcf, 0xeb,
            0x95, 0x80, 0x70, 0x97, 0x1b, 0x92, 0x7e, 0x35, 0x8f, 0x5d, 0xc8, 0xae, 0x22, 0x0d,
            0x19, 0xdd, 0xd3, 0x38, 0x6c, 0xbb, 0x2f, 0x25, 0xa7, 0xcb, 0x8d, 0x2d, 0x11, 0x6b,
            0x05, 0xc5, 0x77, 0xce, 0xa8, 0x86, 0xa0, 0xfc, 0xb5, 0x43, 0x26, 0x70, 0xec, 0x26,
            0xdf, 0x56, 0x1c, 0xff, 0xe1, 0xe9, 0x13, 0x72, 0x18, 0xae, 0x7f, 0xf8, 0x1c, 0x0f,
            0x5f, 0x2e, 0x37, 0xb5, 0xdf, 0xd9, 0x6b, 0x17, 0x8c, 0x87, 0xc7, 0x30, 0x75, 0x7f,
            0x25, 0xb3, 0xbf, 0xfa, 0xcd, 0x93, 0xe6, 0x93, 0x31, 0xba, 0x06, 0x14, 0x91, 0xbf,
            0x8a, 0xf2, 0x15, 0x80, 0xac, 0xdd, 0xc9, 0xaf, 0x8e, 0xf7, 0xbd, 0x95, 0x77, 0x3b,
            0xb8, 0x02, 0x1a, 0x29, 0x9b, 0x96, 0x01, 0xd9, 0x28, 0x76, 0xa4, 0xb4, 0xf0, 0x2a,
            0x18, 0x1b, 0x76, 0x70, 0xa0, 0x5f, 0x39, 0x54, 0xc1, 0x9e, 0x5d, 0x77, 0x1f, 0x43,
            0x61, 0x84, 0x0e, 0xed, 0x4e, 0x86, 0x9f, 0x99, 0x57, 0xe1, 0x69, 0x27, 0xd6, 0xfc,
            0x0b, 0x46, 0x98, 0x31, 0x89, 0xe5, 0xc8, 0xc6, 0xc9, 0x89, 0x08, 0x49, 0x3a, 0xd2,
            0xff, 0x56, 0x2c, 0xe0, 0xf6, 0x7f, 0xb0, 0x72, 0x23, 0xf1, 0x52, 0x3c, 0x5f, 0x8d,
            0x81, 0xc4, 0xd0, 0xba, 0xd5, 0x6d, 0x57, 0x71, 0x46, 0xc6, 0x85, 0xe6, 0x35, 0xfa,
            0x12, 0x09, 0x8f, 0x30, 0x0d, 0x7e, 0x78, 0xc0, 0x0c, 0xc2, 0xd5, 0x20, 0x3e, 0xd0,
            0x03, 0x28, 0x01, 0x06, 0xf2, 0xef, 0x93, 0xf8, 0x09, 0x1d, 0xf8, 0x4f, 0x61, 0xe0,
            0xdc, 0x03, 0x4b, 0x70, 0xbd, 0x15, 0x6f, 0xf0, 0x72, 0xeb, 0x93, 0xb2, 0x65, 0x5a,
            0x65, 0xea, 0xf5, 0x05, 0xcb, 0x97, 0x89, 0xa3, 0xf7, 0x95, 0xdf, 0x26, 0xae, 0xae,
            0x1c, 0x71, 0xfe, 0x8c, 0x83, 0xda, 0x30, 0x69, 0xfd, 0x10, 0x28, 0x22, 0xd7, 0x9d,
            0x02, 0xe2, 0x2d, 0xb3, 0x31, 0x34, 0x9c, 0x0f, 0x4a, 0xf6, 0xff, 0x77, 0xeb, 0x64,
            0xa1, 0x6e, 0x97, 0x07, 0xbf, 0x66, 0x92, 0xec, 0xce, 0x65, 0xe3, 0x55, 0x73, 0x33,
            0x6a, 0xb9, 0xed, 0x5d, 0xdd, 0x36, 0x41, 0x2e, 0xc9, 0xea, 0x1c, 0x3f, 0x9d, 0x0c,
            0x95, 0x22, 0xa8, 0x46, 0xcd, 0x25, 0xf1, 0xd4, 0x5d, 0x70, 0x48, 0xca, 0x85, 0x53,
            0xe2, 0xcd, 0x2e, 0x45, 0x7f, 0xeb, 0x98, 0x21, 0x95, 0xfa, 0xa9, 0x8a, 0x6b, 0x3e,
            0x56, 0x82, 0x4e, 0x16, 0xf6, 0xab, 0x6e, 0xfd, 0x7c, 0x96, 0xf1, 0x15, 0xab, 0x50,
            0x80, 0x19, 0xbb, 0x46, 0x98, 0x18, 0x58, 0x4e, 0x98, 0xc5, 0x58, 0x23, 0x41, 0x89,
            0xeb, 0xb9, 0x21, 0x74, 0x56, 0xeb, 0xfe, 0x68, 0x5e, 0x79, 0xde, 0x12, 0x07, 0xfb,
            0xfa, 0x13, 0xe3, 0x44, 0x33, 0xfb, 0x22, 0xa7, 0x83, 0x37, 0xf0, 0x9f, 0xf8, 0xd7,
            0xc2, 0xab, 0x6e, 0x2b, 0x51, 0xda, 0x47, 0xe0, 0x3b, 0x3f, 0xdb, 0x2a, 0x4a, 0x22,
            0xb4, 0xfb, 0xa0, 0x32, 0xb6, 0x9d, 0x37, 0xeb, 0x82, 0x3d, 0xbb, 0x2d, 0x8f, 0x13,
            0xbf, 0x28, 0xe1, 0x0e, 0x01, 0x6f, 0x7c, 0x6e, 0x52, 0x78, 0x88, 0xb5, 0xf3, 0x28,
            0x51, 0x9c, 0x07, 0x1b, 0x29, 0x60, 0xda, 0x27, 0x56, 0xe1, 0x88, 0x97, 0x1c, 0xf3,
            0x1d, 0x64, 0x28, 0x14, 0xf6, 0xf7, 0x29, 0x53, 0x95, 0x9a, 0x1e, 0x51, 0x75, 0x03,
            0xbd, 0x1f, 0x26, 0x92, 0xda, 0x85, 0x52, 0x71, 0x15, 0x9d, 0x7e, 0xa4, 0x7e, 0xc2,
            0xd1, 0xcd, 0xb4, 0x56, 0xb3, 0x9a, 0x92, 0x0c, 0x4c, 0x0e, 0x40, 0x8d, 0xf3, 0x4d,
            0xb9, 0x49, 0x6f, 0x55, 0xc6, 0xb9, 0xf5, 0x1a,
        ])]
        .into(),
        vec![
            Subpacket::regular(SubpacketData::SignatureCreationTime(
                DateTime::parse_from_rfc3339("2014-06-06T15:57:41Z")
                    .expect("failed to parse static time")
                    .with_timezone(&Utc),
            )),
            Subpacket::regular(SubpacketData::KeyFlags(key_flags.clone())),
            Subpacket::regular(SubpacketData::PreferredSymmetricAlgorithms(
                p_sym_algs.clone(),
            )),
            Subpacket::regular(SubpacketData::PreferredHashAlgorithms(p_hash_algs.clone())),
            Subpacket::regular(SubpacketData::PreferredCompressionAlgorithms(
                p_com_algs.clone(),
            )),
            Subpacket::regular(SubpacketData::Features(smallvec![1])),
            Subpacket::regular(SubpacketData::KeyServerPreferences(smallvec![128])),
        ],
        vec![issuer.clone()],
    );

    let u1 = SignedUser::new(
        UserId::from_str(Version::Old, "john doe (test) <johndoe@example.com>"),
        vec![sig1],
    );

    let sig2 = Signature::v4(
        Version::Old,
        SignatureType::CertPositive,
        PublicKeyAlgorithm::RSA,
        HashAlgorithm::SHA1,
        [0xca, 0x6c],
        vec![Mpi::from_raw(vec![
            0x49, 0xa0, 0xb5, 0x41, 0xbd, 0x33, 0xa8, 0xda, 0xda, 0x6e, 0xb1, 0xe5, 0x28, 0x74,
            0x18, 0xee, 0x39, 0xc8, 0x8d, 0xfd, 0x39, 0xe8, 0x3b, 0x09, 0xdc, 0x9d, 0x04, 0x91,
            0x5d, 0x66, 0xb8, 0x1d, 0x04, 0x0a, 0x90, 0xe7, 0xa6, 0x84, 0x9b, 0xb1, 0x06, 0x4f,
            0x3f, 0xaa, 0xc5, 0x64, 0x53, 0xf8, 0xaf, 0xe1, 0xaa, 0x6f, 0xba, 0x9d, 0xd4, 0xa0,
            0x58, 0xc4, 0x39, 0x39, 0xee, 0xb6, 0xcd, 0x7d, 0xd4, 0x04, 0xab, 0xa2, 0x30, 0x3d,
            0xab, 0xf5, 0xb1, 0x2c, 0x28, 0xa7, 0xd7, 0xba, 0x59, 0x0c, 0xe9, 0xa2, 0xe9, 0x40,
            0x76, 0xcd, 0xce, 0xf5, 0x77, 0x7d, 0xf5, 0x0c, 0x90, 0x8b, 0x13, 0x44, 0xb4, 0xe1,
            0x1d, 0xf2, 0x41, 0x71, 0xd6, 0xb0, 0x90, 0xed, 0x97, 0x5c, 0x6b, 0x60, 0x4b, 0xb6,
            0xda, 0xb4, 0x19, 0xb5, 0x26, 0x35, 0xbe, 0xed, 0xda, 0x6e, 0x14, 0x91, 0x77, 0x76,
            0x52, 0x78, 0xbb, 0xe1, 0xfa, 0x25, 0x34, 0xcb, 0x55, 0x0a, 0x25, 0x61, 0x43, 0x3a,
            0x45, 0xae, 0x6b, 0xe9, 0x26, 0xa8, 0x56, 0x62, 0xd4, 0x27, 0x1f, 0xb7, 0x6c, 0xdc,
            0xd6, 0x3c, 0x2c, 0x52, 0x6c, 0xae, 0x84, 0x9b, 0xc1, 0x30, 0x15, 0xe8, 0xa1, 0x69,
            0x33, 0x9d, 0xe1, 0x3d, 0xba, 0x6f, 0x34, 0xa7, 0x65, 0x98, 0x86, 0x81, 0x7c, 0x08,
            0x9c, 0x6a, 0xb7, 0x39, 0x93, 0xe7, 0x93, 0x43, 0x08, 0x83, 0xea, 0x43, 0x95, 0xf2,
            0x6c, 0x16, 0x02, 0x1b, 0xb9, 0xbb, 0xe5, 0x69, 0xf1, 0x6a, 0xd0, 0xc5, 0xa6, 0x77,
            0x33, 0x42, 0xe1, 0x40, 0x01, 0x2a, 0x92, 0x9d, 0x27, 0xb3, 0x75, 0x2d, 0x67, 0xd4,
            0xec, 0x77, 0xc5, 0xaa, 0x49, 0xe3, 0x62, 0x9d, 0x92, 0xaa, 0x74, 0x38, 0xec, 0x72,
            0x3c, 0x54, 0x3d, 0xa9, 0x9e, 0x52, 0x6e, 0x58, 0xd5, 0x22, 0x3c, 0x40, 0xaf, 0xc8,
            0x25, 0xda, 0x5f, 0x6b, 0xb8, 0x63, 0x43, 0x1d, 0x2d, 0x6c, 0x14, 0x9a, 0xe4, 0x7c,
            0xce, 0xc7, 0x27, 0x1f, 0xc2, 0x77, 0xc0, 0x6e, 0x10, 0xfb, 0x79, 0x8b, 0x2e, 0x5a,
            0x25, 0x4e, 0x60, 0x41, 0xbb, 0xcf, 0x08, 0x92, 0x24, 0x98, 0x58, 0xec, 0xc5, 0xcc,
            0xd5, 0x61, 0xe0, 0x86, 0x3b, 0x9d, 0xad, 0x00, 0x58, 0x81, 0x33, 0x10, 0x17, 0x35,
            0x5c, 0x10, 0x66, 0x2b, 0x0d, 0x36, 0x18, 0x76, 0x92, 0x7b, 0xd4, 0xe9, 0x40, 0x22,
            0x92, 0x69, 0xea, 0xc3, 0x8f, 0xf2, 0x45, 0x36, 0xa3, 0xa5, 0x70, 0xcd, 0xb9, 0xc2,
            0x09, 0x02, 0x4b, 0x3f, 0xa1, 0x78, 0x54, 0xc1, 0xc3, 0xfd, 0xec, 0x97, 0x80, 0xac,
            0x4a, 0x83, 0x45, 0x35, 0x0d, 0x6d, 0x73, 0xb8, 0xe9, 0xa0, 0xf0, 0x44, 0x47, 0xa9,
            0xd2, 0xb9, 0x25, 0xd1, 0xb2, 0xda, 0xcb, 0x7a, 0x63, 0x2f, 0x46, 0xaf, 0x3e, 0x61,
            0x11, 0xfc, 0xe1, 0xfd, 0x88, 0xb4, 0xdb, 0x69, 0xd1, 0x19, 0x3f, 0x48, 0x67, 0x2a,
            0xe6, 0xf2, 0x4d, 0x1a, 0xdd, 0x8d, 0xab, 0xd1, 0x79, 0x12, 0xee, 0xb3, 0x21, 0xe8,
            0x91, 0xdb, 0x91, 0x47, 0xab, 0x0c, 0x5b, 0x68, 0x60, 0x1a, 0x05, 0x4d, 0xe0, 0xe8,
            0x66, 0x63, 0x3d, 0xe9, 0x35, 0xb0, 0x94, 0x66, 0x01, 0x5f, 0x21, 0x1a, 0x74, 0xc6,
            0x43, 0xce, 0xc1, 0xf8, 0x96, 0x51, 0x76, 0x20, 0xaa, 0x7b, 0x6e, 0xf0, 0x86, 0x47,
            0x41, 0x3c, 0x8a, 0xb1, 0x27, 0x07, 0x20, 0x34, 0xa7, 0xe7, 0x4a, 0x50, 0xed, 0x25,
            0xf2, 0xaf, 0xa6, 0x94, 0x72, 0xde, 0x0f, 0x43, 0x74, 0x22, 0x6d, 0x02, 0x7b, 0x6f,
            0x5a, 0xe8, 0x4a, 0x93, 0x98, 0xf3, 0xe2, 0xdb, 0xbc, 0x9f, 0xb1, 0x83, 0x92, 0x8b,
            0xba, 0x8b, 0xe0, 0xe4, 0x6b, 0x77, 0x0f, 0x35, 0xcb, 0x3f, 0x3e, 0xf5, 0x98, 0x37,
            0x99, 0xed, 0x79, 0xd8, 0x76, 0xdf, 0x13, 0x9e,
        ])]
        .into(),
        vec![
            Subpacket::regular(SubpacketData::SignatureCreationTime(
                DateTime::parse_from_rfc3339("2014-06-06T16:21:46Z")
                    .expect("failed to parse static time")
                    .with_timezone(&Utc),
            )),
            Subpacket::regular(SubpacketData::KeyFlags(key_flags.clone())),
            Subpacket::regular(SubpacketData::PreferredSymmetricAlgorithms(
                p_sym_algs.clone(),
            )),
            Subpacket::regular(SubpacketData::PreferredHashAlgorithms(p_hash_algs.clone())),
            Subpacket::regular(SubpacketData::PreferredCompressionAlgorithms(
                p_com_algs.clone(),
            )),
            Subpacket::regular(SubpacketData::Features(smallvec![1])),
            Subpacket::regular(SubpacketData::KeyServerPreferences(smallvec![128])),
        ],
        vec![issuer.clone()],
    );

    let u2 = SignedUser::new(
        UserId::from_str(Version::Old, "john doe <johndoe@seconddomain.com>"),
        vec![sig2],
    );

    assert_eq!(key.details.users.len(), 2);
    assert_eq!(key.details.users[0], u1);
    assert_eq!(key.details.users[1], u2);
    assert_eq!(key.details.user_attributes.len(), 1);
    let ua = &key.details.user_attributes[0];
    match ua.attr {
        UserAttribute::Image { ref data, .. } => {
            assert_eq!(data.len(), 1156);
        }
        _ => panic!("not here"),
    }

    let sig3 = Signature::v4(
        Version::Old,
        SignatureType::CertPositive,
        PublicKeyAlgorithm::RSA,
        HashAlgorithm::SHA1,
        [0x02, 0x0c],
        vec![Mpi::from_raw(vec![
            0x5b, 0x4b, 0xeb, 0xff, 0x1a, 0x89, 0xc2, 0xe1, 0x80, 0x20, 0x26, 0x3b, 0xf4, 0x4d,
            0x2d, 0x46, 0xba, 0x96, 0x78, 0xb2, 0x88, 0xf8, 0xf9, 0xd5, 0xf1, 0x5f, 0x7d, 0x45,
            0xeb, 0xbc, 0x25, 0x2e, 0x1b, 0x2f, 0x8e, 0xd4, 0xa9, 0x6e, 0x64, 0xfa, 0x97, 0x09,
            0xab, 0xd2, 0xab, 0x50, 0x04, 0x09, 0xa9, 0x33, 0x62, 0x00, 0xb8, 0x38, 0xf5, 0x53,
            0xb8, 0xe9, 0x43, 0xed, 0x59, 0x7f, 0x2f, 0xf9, 0x8f, 0xc7, 0xe1, 0xbb, 0x78, 0xdc,
            0xec, 0x12, 0x1a, 0xec, 0x17, 0x52, 0x86, 0xba, 0x2a, 0x1f, 0xd5, 0x2a, 0x99, 0x63,
            0x1c, 0x2f, 0x28, 0xa1, 0xb2, 0x9c, 0xb9, 0x76, 0x06, 0x06, 0x28, 0xc6, 0xe9, 0xbf,
            0xdb, 0x36, 0x87, 0xbe, 0x9e, 0xc7, 0x74, 0x7d, 0x4d, 0x5b, 0x10, 0x5c, 0x46, 0x65,
            0x20, 0x76, 0x0b, 0x5c, 0xc3, 0xe8, 0xe1, 0x55, 0xbb, 0xaf, 0x94, 0x6f, 0x44, 0x92,
            0xd5, 0xb5, 0x87, 0xc0, 0x42, 0x77, 0x5e, 0xc2, 0x04, 0x7e, 0x3d, 0x32, 0x60, 0x0f,
            0x26, 0x5c, 0x71, 0xd9, 0xaa, 0xa3, 0x2f, 0xe0, 0x65, 0xd3, 0xd2, 0xd0, 0x3e, 0x72,
            0xd3, 0x7c, 0xbe, 0x71, 0x94, 0xc3, 0xb5, 0x52, 0x1a, 0x9f, 0x72, 0x06, 0xb0, 0x0f,
            0xc9, 0xbb, 0x8a, 0xf3, 0xcf, 0xf6, 0x09, 0xd7, 0x63, 0x3d, 0x6b, 0x7c, 0xbc, 0x8b,
            0x05, 0x01, 0x1f, 0x22, 0x31, 0xf9, 0x8e, 0x53, 0xc8, 0xb8, 0x7b, 0x9e, 0x96, 0xc2,
            0xe5, 0x09, 0xac, 0xa5, 0xf4, 0xb8, 0xdb, 0xea, 0xdd, 0x79, 0x44, 0x17, 0x57, 0xa9,
            0x4d, 0xf5, 0xb9, 0x34, 0xcd, 0xc1, 0x3f, 0xeb, 0xe3, 0x6a, 0x80, 0x5c, 0xac, 0x83,
            0xcc, 0xf4, 0x7c, 0xbf, 0xac, 0xfd, 0x29, 0xee, 0x1f, 0x34, 0xc0, 0x4a, 0x08, 0x10,
            0x24, 0xe7, 0x04, 0x25, 0x3a, 0x7f, 0xff, 0x4b, 0x64, 0xc1, 0xf9, 0x7e, 0xc1, 0xb3,
            0xc1, 0x25, 0x0f, 0xf1, 0xb1, 0xf2, 0x66, 0x8d, 0x22, 0x8b, 0x56, 0x6f, 0x51, 0xf2,
            0xe4, 0x91, 0x5f, 0xc8, 0xc3, 0x55, 0xa2, 0xc8, 0x08, 0x1e, 0xd8, 0x4f, 0x07, 0x69,
            0x25, 0xb1, 0x96, 0xbb, 0x23, 0xe8, 0x7c, 0x5b, 0x4e, 0xe6, 0x0b, 0x32, 0x2b, 0x34,
            0xc1, 0x71, 0xee, 0x52, 0xbd, 0xf4, 0xf1, 0x67, 0x98, 0x57, 0xeb, 0x01, 0x32, 0x01,
            0x74, 0x49, 0xe5, 0xab, 0xfc, 0x79, 0xfe, 0x8a, 0x7c, 0xad, 0x95, 0xc9, 0xc2, 0x60,
            0x81, 0x2b, 0xf3, 0x45, 0x4b, 0x0b, 0xd0, 0xf4, 0xb1, 0x51, 0x75, 0x94, 0xe4, 0x6e,
            0xf0, 0x00, 0xb5, 0x51, 0xbd, 0x86, 0x74, 0xdb, 0xbe, 0xb9, 0xaa, 0x06, 0x70, 0x2a,
            0xd9, 0x6d, 0x69, 0x9f, 0xf1, 0x9a, 0x17, 0x64, 0xdd, 0x8e, 0xb4, 0xf8, 0x1a, 0x5a,
            0xbe, 0xdd, 0x0d, 0x78, 0x9d, 0x8c, 0x16, 0x7d, 0x99, 0xa6, 0xaf, 0xc5, 0x04, 0x3e,
            0xd7, 0x35, 0xe8, 0x1a, 0xc2, 0x6a, 0xce, 0x51, 0x38, 0x9a, 0x4c, 0x9c, 0x8b, 0xc3,
            0xaa, 0x48, 0x94, 0xda, 0x03, 0xae, 0xca, 0x93, 0x94, 0x70, 0x1a, 0x76, 0x02, 0x0d,
            0x21, 0x42, 0xe5, 0x7b, 0x9b, 0x4e, 0x59, 0x06, 0xd8, 0x72, 0xeb, 0xfe, 0x8d, 0x30,
            0xfc, 0x77, 0x67, 0x0c, 0x01, 0x46, 0xcf, 0x24, 0x19, 0x9c, 0x63, 0xe3, 0x8f, 0x35,
            0xc9, 0x53, 0x0c, 0x70, 0x55, 0x03, 0x3d, 0x67, 0x32, 0xfb, 0x86, 0xd0, 0x8b, 0x61,
            0x7f, 0x6f, 0xd4, 0xbc, 0xfd, 0xd6, 0x08, 0x4b, 0xee, 0xa1, 0x0c, 0x6c, 0x84, 0x3b,
            0xe1, 0xa8, 0x24, 0x87, 0x17, 0xa8, 0x67, 0xba, 0x03, 0xe7, 0xf7, 0xbb, 0xb4, 0x3d,
            0xbb, 0xa0, 0x5e, 0x76, 0xd6, 0x01, 0xe1, 0xa4, 0x9a, 0x14, 0x43, 0xcd, 0x99, 0xa0,
            0x2e, 0xa2, 0xda, 0x81, 0xe2, 0x9c, 0xab, 0x22, 0x41, 0x02, 0xcc, 0x2f, 0xca, 0xc5,
            0xf7, 0x26, 0x65, 0x7d, 0x0b, 0xcc, 0xab, 0x26,
        ])]
        .into(),
        vec![
            Subpacket::regular(SubpacketData::SignatureCreationTime(
                DateTime::parse_from_rfc3339("2014-06-06T16:05:43Z")
                    .expect("failed to parse static time")
                    .with_timezone(&Utc),
            )),
            Subpacket::regular(SubpacketData::KeyFlags(key_flags)),
            Subpacket::regular(SubpacketData::PreferredSymmetricAlgorithms(p_sym_algs)),
            Subpacket::regular(SubpacketData::PreferredHashAlgorithms(p_hash_algs)),
            Subpacket::regular(SubpacketData::PreferredCompressionAlgorithms(p_com_algs)),
            Subpacket::regular(SubpacketData::Features(smallvec![1])),
            Subpacket::regular(SubpacketData::KeyServerPreferences(smallvec![128])),
        ],
        vec![issuer],
    );

    assert_eq!(ua.signatures, vec![sig3]);
}

#[test]
fn encrypted_private_key() {
    let p = Path::new("./tests/openpgp-interop/testcases/messages/gnupg-v1-001-decrypt.asc");
    let mut file = read_file(p.to_path_buf());

    let mut buf = vec![];
    file.read_to_end(&mut buf).unwrap();

    let input = ::std::str::from_utf8(buf.as_slice()).expect("failed to convert to string");
    let (key, _headers) = SignedSecretKey::from_string(input).expect("failed to parse key");
    key.verify().expect("invalid key");

    let pub_key = key.public_key();
    assert_eq!(pub_key.key_id(), key.key_id());

    let pp = key.primary_key.secret_params().clone();

    match pp {
        SecretParams::Plain(_) => panic!("should be encrypted"),
        SecretParams::Encrypted(pp) => {
            let S2kParams::Cfb { sym_alg, s2k, iv } = pp.string_to_key_params() else {
                panic!("unexpected s2k param: {:?}", pp);
            };
            assert_eq!(
                iv,
                &hex::decode("2271f718af70d3bd9d60c2aed9469b67").unwrap()[..]
            );

            match s2k {
                StringToKey::IteratedAndSalted {
                    hash_alg,
                    salt,
                    count,
                } => {
                    assert_eq!(*hash_alg, HashAlgorithm::SHA2_256);
                    assert_eq!(salt, &hex::decode("CB18E77884F2F055").unwrap()[..]);
                    assert_eq!(*count, 96u8); // This is an encoded iteration count
                }
                s => panic!("unexpected s2k type {:?}", s),
            }

            assert_eq!(sym_alg, &SymmetricKeyAlgorithm::AES128);
        }
    }

    key.unlock(
        || "test".to_string(),
        |k| {
            info!("{:?}", k);
            match k {
                SecretKeyRepr::RSA(k) => {
                    assert_eq!(k.e().to_bytes_be(), hex::decode("010001").unwrap().to_vec());
                    assert_eq!(k.n().to_bytes_be(), hex::decode("9AF89C08A8EA84B5363268BAC8A06821194163CBCEEED2D921F5F3BDD192528911C7B1E515DCE8865409E161DBBBD8A4688C56C1E7DFCF639D9623E3175B1BCA86B1D12AE4E4FBF9A5B7D5493F468DA744F4ACFC4D13AD2D83398FFC20D7DF02DF82F3BC05F92EDC41B3C478638A053726586AAAC57E2B66C04F9775716A0C71").unwrap().to_vec());
                    assert_eq!(k.d().to_bytes_be(), hex::decode("33DE47E3421E1442CE9BFA9FA1ACC68D657594604FA7719CC91817F78D604B0DA38CD206D9D571621C589E3DF19CA2BB0C5F045EAC2C25AEB2BCE0D00E2E29538F8239F8A499EAF872497809E524A9EDA88E7ECEE78DF722E33DD62C9E204FE0F90DCF6F4247D1F7C8CE3BB3F0A4BAB23CFD95D41BC8A39C22C99D5BC38BC51D").unwrap().to_vec());
                    assert_eq!(k.primes()[0].to_bytes_be(), hex::decode("C62B8CD033331BFF171188C483B5B87E41A84415A004A83A4109014A671A5A3DA0A467CDB786F0BB75354245DA0DFFF53B6E25A44E28CBFF8CC1AC58A968AF57").unwrap().to_vec());
                    assert_eq!(k.primes()[1].to_bytes_be(), hex::decode("C831D89F49E642383C115413B2CB5F6EC09012B50C1E8596877E8F7B88C82C8F14FC354C21B6032BEF78B3C5EC92E434BEB2436B12C7C9FEDEFD866678DBED77").unwrap().to_vec());
                }
                _ => panic!("wrong key format"),
            }
            Ok(())
        },
    ).unwrap();
}

fn get_test_fingerprint(filename: &str) -> (serde_json::Value, SignedPublicKey) {
    let mut asc = read_file(
        Path::new(&format!(
            "./tests/openpgp-interop/testcases/keys/{filename}.asc"
        ))
        .to_path_buf(),
    );
    let json_file = read_file(
        Path::new(&format!(
            "./tests/openpgp-interop/testcases/keys/{filename}.json"
        ))
        .to_path_buf(),
    );

    let mut asc_string = String::new();
    asc.read_to_string(&mut asc_string).unwrap();
    let (key, _headers) = SignedPublicKey::from_string(&asc_string).unwrap();

    let json: serde_json::Value = serde_json::from_reader(json_file).unwrap();

    (json, key)
}

#[test]
fn test_fingerprint_rsa() {
    let (json, key) = get_test_fingerprint("gnupg-v1-003");
    assert_eq!(
        json["expected_fingerprint"],
        hex::encode(key.fingerprint().as_bytes())
    );

    key.verify().expect("invalid key");
}

#[test]
fn test_fingerprint_dsa() {
    let (json, key) = get_test_fingerprint("gnupg-v1-001");

    assert_eq!(
        json["expected_fingerprint"],
        hex::encode(key.fingerprint().as_bytes())
    );
}

#[test]
fn test_fingerprint_ecdsa() {
    let (json, key) = get_test_fingerprint("e2e-001");
    assert_eq!(
        json["expected_fingerprint"],
        hex::encode(key.fingerprint().as_bytes())
    );

    // TODO: signature mismatch
    // key.verify().expect("invalid key");
}

#[test]
fn test_fingerprint_ecdh() {
    let (json, key) = get_test_fingerprint("gnupg-v1-001");
    key.verify().expect("invalid key");

    assert_eq!(
        json["expected_subkeys"].as_array().unwrap()[0]
            .as_object()
            .unwrap()["expected_fingerprint"],
        hex::encode(key.public_subkeys[0].key.fingerprint().as_bytes())
    );
}

#[test]
fn test_fingerprint_elgamel() {
    let (json, key) = get_test_fingerprint("gnupg-v1-001");

    assert_eq!(
        json["expected_subkeys"].as_array().unwrap()[0]
            .as_object()
            .unwrap()["expected_fingerprint"],
        hex::encode(key.public_subkeys[0].key.fingerprint().as_bytes())
    );
}

fn test_parse_openpgp_key(key: &str, verify: bool, match_raw: bool, pw: &'static str) {
    let _ = pretty_env_logger::try_init();

    let f = read_file(Path::new("./tests/openpgp/").join(key));
    let (pk, headers) = from_armor_many(f).unwrap();
    let pk: Vec<PublicOrSecret> = pk.collect::<Result<_, _>>().unwrap();
    assert!(!pk.is_empty(), "no keys found");

    if match_raw {
        let mut f = read_file(Path::new("./tests/openpgp/").join(key));
        let mut orig = String::new();
        f.read_to_string(&mut orig).unwrap();

        // strip any additional metadata
        if let Some(pos) = orig.find("----") {
            orig = orig[pos..].into();
        }

        {
            let mut dearmor = armor::Dearmor::new(BufReader::new(orig.as_bytes()));
            let mut orig = Vec::new();
            dearmor.read_to_end(&mut orig).unwrap();

            let ser = pk.to_bytes().unwrap();
            assert_eq!(hex::encode(orig), hex::encode(ser));
        }

        let mut ser = Vec::new();
        let typ = match pk[0] {
            PublicOrSecret::Public(_) => armor::BlockType::PublicKey,
            PublicOrSecret::Secret(_) => armor::BlockType::PrivateKey,
        };
        armor::write(&pk, typ, &mut ser, Some(&headers), true).unwrap();
        let ser_str = std::str::from_utf8(&ser).unwrap();

        // normalize line endings
        let orig = orig.replace("\r\n", "\n").replace('\r', "\n");
        let ser_str = ser_str
            .to_string()
            .replace("\r\n", "\n")
            .replace('\r', "\n");

        assert_eq!(orig, ser_str);
    }

    for parsed in pk {
        // serialize and check we get the same thing
        let serialized = parsed.to_armored_bytes(Some(&headers).into()).unwrap();

        // println!("{}", ::std::str::from_utf8(&serialized).unwrap());

        // and parse them again
        let (iter2, headers2) = from_armor_many(&serialized[..]).expect("failed to parse round2");

        assert_eq!(headers, headers2);
        assert_eq!(iter2.count(), 1);

        if verify {
            parsed.verify().expect("invalid key");

            match parsed {
                PublicOrSecret::Secret(sec) => {
                    sec.unlock(|| pw.to_string(), |_| Ok(())).unwrap();
                }
                PublicOrSecret::Public(_) => {
                    // Nothing todo
                }
            }
        }

        // assert_eq!(&parsed, parsed2[0].as_ref().unwrap());
    }
}

fn test_parse_openpgp_key_bin(key: &str, verify: bool) {
    let f = read_file(Path::new("./tests/openpgp/").join(key));
    let pk = from_bytes_many(f);
    for key in pk {
        let parsed = key.expect("failed to parse key");
        if verify {
            parsed.verify().expect("invalid key");
        }

        // serialize and check we get the same thing
        let serialized = parsed.to_armored_bytes(None.into()).unwrap();

        // and parse them again
        let parsed2 = from_armor_many(&serialized[..])
            .expect("failed to parse round2")
            .0
            .collect::<Vec<_>>();
        assert_eq!(parsed2.len(), 1);
        assert_eq!(&parsed, parsed2[0].as_ref().unwrap());
    }
}

macro_rules! openpgp_key_bin {
    ($name:ident, $path:expr, $verify:expr) => {
        #[test]
        fn $name() {
            test_parse_openpgp_key_bin($path, $verify);
        }
    };
}

macro_rules! openpgp_key {
    ($name:ident, $path:expr, $verify:expr, $match_raw:expr) => {
        #[test]
        fn $name() {
            test_parse_openpgp_key($path, $verify, $match_raw, "");
        }
    };
    ($name:ident, $path:expr, $verify:expr, $match_raw:expr, $pw:expr) => {
        #[test]
        fn $name() {
            test_parse_openpgp_key($path, $verify, $match_raw, $pw);
        }
    };
}

openpgp_key!(
    key_openpgp_samplekeys_e6,
    "samplekeys/E657FB607BB4F21C90BB6651BC067AF28BC90111.asc",
    true,
    true
);
openpgp_key!(
    key_openpgp_samplekeys_authenticate_only_pub,
    "samplekeys/authenticate-only.pub.asc",
    true,
    true
);
openpgp_key!(
    key_openpgp_samplekeys_authenticate_only_sec,
    "samplekeys/authenticate-only.sec.asc",
    false, // secret unlocking doesn't work
    true,
    ""
);
openpgp_key!(
    key_openpgp_samplekeys_dda252ebb8ebe1af_1,
    "samplekeys/dda252ebb8ebe1af-1.asc",
    true,
    true
);
openpgp_key!(
    key_openpgp_samplekeys_dda252ebb8ebe1af_2,
    "samplekeys/dda252ebb8ebe1af-2.asc",
    true,
    true
);
openpgp_key!(
    key_openpgp_samplekeys_e2e_p256_1_clr,
    "samplekeys/e2e-p256-1-clr.asc",
    false, // signature mismatch
    false  // packet lengths are not minimally encoded
);
openpgp_key!(
    key_openpgp_samplekeys_e2e_p256_1_prt,
    "samplekeys/e2e-p256-1-prt.asc",
    false, // signature mismatch
    false, // packet lengths are not minimally encoded
    "a"
);
openpgp_key!(
    key_openpgp_samplekeys_ecc_sample_1_pub,
    "samplekeys/ecc-sample-1-pub.asc",
    true,
    true
);
openpgp_key!(
    key_openpgp_samplekeys_ecc_sample_1_sec,
    "samplekeys/ecc-sample-1-sec.asc",
    true,
    true,
    "ecc"
);
openpgp_key!(
    key_openpgp_samplekeys_ecc_sample_2_pub,
    "samplekeys/ecc-sample-2-pub.asc",
    true,
    false // packet lengths are not minimally encoded
);
openpgp_key!(
    key_openpgp_samplekeys_ecc_sample_2_sec,
    "samplekeys/ecc-sample-2-sec.asc",
    true,
    false, // unsigned subkey & userid
    "ecc"
);
openpgp_key!(
    key_openpgp_samplekeys_ecc_sample_3_pub,
    "samplekeys/ecc-sample-3-pub.asc",
    false, // ECDSA P521 is not yet supported
    false  // packet lengths are not minimally encoded
);
openpgp_key!(
    key_openpgp_samplekeys_ecc_sample_3_sec,
    "samplekeys/ecc-sample-3-sec.asc",
    false, // ECDSA P521 is not supported yet
    false, // unsigned subkey & userid
    "ecc"
);
openpgp_key!(
    key_openpgp_samplekeys_ecc_sample_4_pub,
    "samplekeys/ecc-sample-4-pub.asc",
    true,
    false
);
openpgp_key!(
    key_openpgp_samplekeys_ecc_sample_4_sec,
    "samplekeys/ecc-sample-4-sec.asc",
    true,
    false,
    "ecc"
);
openpgp_key!(
    key_openpgp_samplekeys_ed25519_cv25519_sample_1,
    "samplekeys/ed25519-cv25519-sample-1.asc",
    true,
    true
);
openpgp_key!(
    key_openpgp_samplekeys_eddsa_sample_1_pub,
    "samplekeys/eddsa-sample-1-pub.asc",
    true,
    true
);
openpgp_key!(
    key_openpgp_samplekeys_eddsa_sample_1_sec,
    "samplekeys/eddsa-sample-1-sec.asc",
    true,
    true,
    "abc"
);
openpgp_key!(
    key_openpgp_samplekeys_issue2346,
    "samplekeys/issue2346.gpg",
    true,
    true
);
openpgp_key_bin!(
    key_openpgp_samplekeys_no_creation_time,
    "samplekeys/no-creation-time.gpg",
    false
);
openpgp_key!(
    key_openpgp_samplekeys_rsa_primary_auth_only_pub,
    "samplekeys/rsa-primary-auth-only.pub.asc",
    true,
    true
);
openpgp_key!(
    key_openpgp_samplekeys_rsa_primary_auth_only_sec,
    "samplekeys/rsa-primary-auth-only.sec.asc",
    true,
    true
);
openpgp_key!(
    key_openpgp_samplekeys_rsa_rsa_sample_1,
    "samplekeys/rsa-rsa-sample-1.asc",
    true,
    true,
    "ecc"
);
openpgp_key!(
    key_openpgp_samplekeys_silent_running,
    "samplekeys/silent-running.asc",
    true,
    true
);
openpgp_key!(
    key_openpgp_samplekeys_leading_marker,
    "samplekeys/alice-marker.sec.asc",
    true,
    false // marker packet gets dropped during parsing
);

// PKCS#1
// openpgp_key!(key_openpgp_samplekeys_ssh_dsa, "samplekeys/ssh-dsa.key", true);

// PKCS#1
// openpgp_key!(key_openpgp_samplekeys_ssh_ecdsa, "samplekeys/ssh-ecdsa.key", true);

// OpenSSH
// openpgp_key!(
//     key_openpgp_samplekeys_ssh_ed25519,
//     "samplekeys/ssh-ed25519.key",
//     true
// );

// PKCS#1
// openpgp_key!(key_openpgp_samplekeys_ssh_rsa, "samplekeys/ssh-rsa.key", true);

openpgp_key!(
    key_openpgp_samplekeys_whats_new_in_2_1,
    "samplekeys/whats-new-in-2.1.asc",
    false, // Key ID mismatch
    true
);

#[test]
fn private_ecc1_verify() {
    let f = read_file("./tests/openpgp/samplekeys/ecc-sample-1-sec.asc");
    let (sk, _headers) = SignedSecretKey::from_armor_single(f).expect("failed to parse key");
    sk.verify().expect("invalid key");
    assert_eq!(sk.secret_subkeys.len(), 1);
    assert_eq!(hex::encode(sk.key_id()).to_uppercase(), "0BA52DF0BAA59D9C",);
    sk.unlock(
        || "ecc".to_string(),
        |k| {
            match k {
                SecretKeyRepr::ECDSA(ref inner_key) => {
                    assert!(matches!(inner_key, ECDSASecretKey::P256(_)));
                }
                _ => panic!("invalid key"),
            }
            Ok(())
        },
    )
    .unwrap();

    let pub_key = sk.public_key();
    assert_eq!(pub_key.key_id(), sk.key_id());
}

#[test]
fn private_ecc2_verify() {
    let f = read_file("./tests/openpgp/samplekeys/ecc-sample-2-sec.asc");
    let (sk, _headers) = SignedSecretKey::from_armor_single(f).expect("failed to parse key");
    sk.verify().expect("invalid key");
    assert_eq!(sk.secret_subkeys.len(), 0);
    assert_eq!(hex::encode(sk.key_id()).to_uppercase(), "098033880F54719F",);
    sk.unlock(
        || "ecc".to_string(),
        |k| {
            match k {
                SecretKeyRepr::ECDSA(ref inner_key) => {
                    assert!(matches!(inner_key, ECDSASecretKey::P384(_)));
                }
                _ => panic!("invalid key"),
            }
            Ok(())
        },
    )
    .unwrap();

    /*
     * No user IDs, getting public key fails
    let pub_key = sk.public_key();
    assert_eq!(pub_key.key_id(), sk.key_id());
    */
}

#[test]
fn private_ecc3_verify() {
    let f = read_file("./tests/openpgp/samplekeys/ecc-sample-4-sec.asc");
    let (sk, _headers) = SignedSecretKey::from_armor_single(f).expect("failed to parse key");
    sk.verify().expect("invalid key");
    assert_eq!(sk.secret_subkeys.len(), 1);
    assert_eq!(hex::encode(sk.key_id()).to_uppercase(), "E15A9BB15A23A43F",);
    sk.unlock(
        || "ecc".to_string(),
        |k| {
            match k {
                SecretKeyRepr::ECDSA(ref inner_key) => {
                    assert!(matches!(inner_key, ECDSASecretKey::Secp256k1(_)));
                }
                _ => panic!("invalid key"),
            }
            Ok(())
        },
    )
    .unwrap();

    let pub_key = sk.public_key();
    assert_eq!(pub_key.key_id(), sk.key_id());
}

#[test]
fn private_x25519_verify() {
    let f = read_file("./tests/openpgpjs/x25519.sec.asc");
    let (sk, _headers) = SignedSecretKey::from_armor_single(f).expect("failed to parse key");
    sk.verify().expect("invalid key");
    assert_eq!(sk.secret_subkeys.len(), 1);
    assert_eq!(hex::encode(sk.key_id()).to_uppercase(), "F25E5F24BB372CFA",);
    sk.unlock(
        || "moon".to_string(),
        |k| {
            match k {
                SecretKeyRepr::EdDSA(ref inner_key) => {
                    assert_eq!(inner_key.oid, ECCCurve::Ed25519.oid());
                }
                _ => panic!("invalid key"),
            }
            Ok(())
        },
    )
    .unwrap();

    let pub_key = sk.public_key();
    assert_eq!(pub_key.key_id(), sk.key_id());
}

#[test]
fn pub_x25519_little_verify() {
    let f = read_file("./tests/openpgpjs/x25519-little.pub.asc");
    let (pk, _headers) = SignedPublicKey::from_armor_single(f).expect("failed to parse key");
    pk.verify().expect("invalid key");
    assert_eq!(pk.public_subkeys.len(), 1);
    assert_eq!(hex::encode(pk.key_id()).to_uppercase(), "C062C165CA61C215",);

    assert_eq!(
        hex::encode(pk.public_subkeys[0].key_id()).to_uppercase(),
        "A586D1DD06BD97BC",
    );
    assert_eq!(pk.details.users.len(), 1);
    assert_eq!(pk.details.users[0].id.id(), "Hi <hi@hel.lo>");
}

macro_rules! autocrypt_key {
    ($name:ident, $path:expr, $unlock:expr,) => {
        #[test]
        fn $name() {
            test_parse_autocrypt_key($path, $unlock);
        }
    };
}

fn test_parse_autocrypt_key(key: &str, unlock: bool) {
    let _ = pretty_env_logger::try_init();

    let f = read_file(Path::new("./tests/autocrypt/").join(key));
    let (pk, _headers) = from_armor_many(f).unwrap();
    for key in pk {
        let parsed = key.expect("failed to parse key");
        parsed.verify().expect("invalid key");

        if unlock {
            let sk = parsed.clone().into_secret();
            sk.unlock(|| "".to_string(), |_| Ok(()))
                .expect("failed to unlock key");

            let pub_key = sk.public_key();
            assert_eq!(pub_key.key_id(), sk.key_id());
        }

        // serialize and check we get the same thing
        let serialized = parsed.to_armored_bytes(None.into()).unwrap();

        println!("{}", ::std::str::from_utf8(&serialized).unwrap());

        // and parse them again
        let parsed2 = from_armor_many(&serialized[..])
            .expect("failed to parse round2")
            .0
            .collect::<Vec<_>>();

        assert_eq!(parsed2.len(), 1);
        assert_eq!(&parsed, parsed2[0].as_ref().unwrap());
    }
}

autocrypt_key!(
    key_autocrypt_alice_pub,
    "alice@autocrypt.example.pub.asc",
    false,
);
autocrypt_key!(
    key_autocrypt_alice_sec,
    "alice@autocrypt.example.sec.asc",
    true,
);

autocrypt_key!(
    key_autocrypt_bob_pub,
    "bob@autocrypt.example.pub.asc",
    false,
);
autocrypt_key!(key_autocrypt_bob_sec, "bob@autocrypt.example.sec.asc", true,);
autocrypt_key!(
    key_autocrypt_carol_pub,
    "carol@autocrypt.example.pub.asc",
    false,
);
autocrypt_key!(
    key_autocrypt_carol_sec,
    "carol@autocrypt.example.sec.asc",
    true,
);

#[test]
fn test_invalid() {
    let v = (0..64).collect::<Vec<u8>>();
    let k = SignedSecretKey::from_bytes(&v[..]);

    assert!(k.is_err());
}

#[test]
fn test_handle_incomplete_packets_end() {
    let _ = pretty_env_logger::try_init();
    let p = Path::new("./tests/openpgp-interop/testcases/messages/gnupg-v1-001-decrypt.asc");
    let mut file = read_file(p.to_path_buf());

    let mut buf = vec![];
    file.read_to_end(&mut buf).unwrap();

    let input = ::std::str::from_utf8(buf.as_slice()).expect("failed to convert to string");
    let (key, _headers) = SignedSecretKey::from_string(input).expect("failed to parse key");
    key.verify().expect("invalid key");

    // add overflow of "b60ed7"
    let raw = hex::decode(hex::encode(key.to_bytes().unwrap()) + "b60ed7").unwrap();
    let key = SignedSecretKey::from_bytes(&raw[..]).expect("failed");
    key.verify().expect("invalid key");
}

#[test]
fn test_keyid_formatters() {
    let keyid = KeyId::from_slice(&[0x4C, 0x07, 0x3A, 0xE0, 0xC8, 0x44, 0x5C, 0x0C]).unwrap();
    assert_eq!("4C073AE0C8445C0C", format!("{keyid:X}"));
    assert_eq!("4c073ae0c8445c0c", format!("{keyid:x}"));
}

#[test]
fn test_encrypted_key() {
    let p = Path::new("./tests/key-with-password-123.asc");
    let mut file = read_file(p.to_path_buf());

    let mut buf = vec![];
    file.read_to_end(&mut buf).unwrap();

    let input = ::std::str::from_utf8(buf.as_slice()).expect("failed to convert to string");
    let (key, _headers) = SignedSecretKey::from_string(input).expect("failed to parse key");
    key.verify().expect("invalid key");
    let unsigned_pubkey = key.public_key();

    // Incorrect password results in InvalidInput error.
    assert!(matches!(
        unsigned_pubkey
            .clone()
            .sign(&mut thread_rng(), &key, || "".into())
            .err()
            .unwrap(),
        pgp::errors::Error::InvalidInput
    ));

    let _signed_key = unsigned_pubkey
        .sign(&mut thread_rng(), &key, || "123".into())
        .unwrap();
}