<!DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.01 Transitional//EN>
<html>
<head>
<title>Browser test</title>
<script src="src/rand.js"></script>
<script src="src/rom_curve.js"></script>
<script src="src/rom_field.js"></script>
<script src="src/uint64.js"></script>
<script src="src/aes.js"></script>
<script src="src/big.js"></script>
<script src="src/gcm.js"></script>
<script src="src/hash256.js"></script>
<script src="src/hash384.js"></script>
<script src="src/hash512.js"></script>
<script src="src/sha3.js"></script>
<script src="src/newhope.js"></script>
<script src="src/nhs.js"></script>
<script src="src/fp.js"></script>
<script src="src/fp2.js"></script>
<script src="src/fp4.js"></script>
<script src="src/fp12.js"></script>
<script src="src/ff.js"></script>
<script src="src/rsa.js"></script>
<script src="src/ecp.js"></script>
<script src="src/ecp2.js"></script>
<script src="src/ecdh.js"></script>
<script src="src/pair.js"></script>
<script src="src/mpin.js"></script>
<script src="src/ctx.js"></script>
</head>

<body>
<h1>Browser test</h1>

<script type="text/javascript">
/*
Licensed to the Apache Software Foundation (ASF) under one
or more contributor license agreements.  See the NOTICE file
distributed with this work for additional information
regarding copyright ownership.  The ASF licenses this file
to you under the Apache License, Version 2.0 (the
"License"); you may not use this file except in compliance
with the License.  You may obtain a copy of the License at

  http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing,
software distributed under the License is distributed on an
"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
KIND, either express or implied.  See the License for the
specific language governing permissions and limitations
under the License.
*/

/* Test DVS - test driver and function exerciser for Designated Verifier Signature API Functions */


var ctx = new CTX("BLS381");

var RAW = [];
var rng = new ctx.RAND();
rng.clean();
for (i = 0; i < 100; i++) {
    RAW[i] = i;
}

rng.seed(100, RAW);

var res;

var S = [];
var SST = [];
var TOKEN = [];
var SEC = [];
var xID = [];
var X = [];
var Y1 = [];
var Y2 = [];
var Z = [];
var Pa = [];
var U = [];

var sha = ctx.ECP.HASH_TYPE;

/* Trusted Authority set-up */
ctx.MPIN.RANDOM_GENERATE(rng, S);
console.log("M-Pin Master Secret s: 0x" + ctx.MPIN.bytestostring(S));

/* Create Client Identity */
var IDstr = "testuser@milagro.com";
var CLIENT_ID = ctx.MPIN.stringtobytes(IDstr);

console.log("Client ID= " + ctx.MPIN.bytestostring(CLIENT_ID));

/* Generate random public key and z */
res = ctx.MPIN.GET_DVS_KEYPAIR(rng, Z, Pa);
if (res != 0) {
    console.log("Can't generate DVS keypair, error ", res);
}

console.log("Z: 0x" + ctx.MPIN.bytestostring(Z));
console.log("Pa: 0x" + ctx.MPIN.bytestostring(Pa));

/* Append Pa to ID */
for (var i = 0; i < Pa.length; i++) {
    CLIENT_ID.push(Pa[i]);
}
console.log("ID|Pa: 0x" + ctx.MPIN.bytestostring(CLIENT_ID));
/* Hash Client ID */
var HCID = ctx.MPIN.HASH_ID(sha, CLIENT_ID);

/* Client and Server are issued secrets by DTA */
ctx.MPIN.GET_SERVER_SECRET(S, SST);
console.log("Server Secret SS: 0x" + ctx.MPIN.bytestostring(SST));

ctx.MPIN.GET_CLIENT_SECRET(S, HCID, TOKEN);
console.log("Client Secret CS: 0x" + ctx.MPIN.bytestostring(TOKEN));

/* Compute client secret for key escrow less scheme z.CS */
res = ctx.MPIN.GET_G1_MULTIPLE(null, 0, Z, TOKEN, TOKEN);
if (res != 0) {
    console.log("Failed to compute z.CS, error ", res);
}
console.log("z.CS: 0x" + ctx.MPIN.bytestostring(TOKEN));

/* Client extracts PIN from secret to create Token */
var pin = 1234;
console.log("Client extracts PIN= " + pin);
res = ctx.MPIN.EXTRACT_PIN(sha, CLIENT_ID, pin, TOKEN);
if (res != 0) {
    console.log("Failed to extract PIN, Error: ", res);
}

console.log("Client Token TK: 0x" + ctx.MPIN.bytestostring(TOKEN));

var timeValue = ctx.MPIN.GET_TIME();

var message = "Message to sign";

res = ctx.MPIN.CLIENT(sha, 0, CLIENT_ID, rng, X, pin, TOKEN, SEC, U, null, null, timeValue, Y1, message);
if (res != 0) {
    console.log("Failed to extract PIN, error ", res);
}

console.log("U: 0x" + ctx.MPIN.bytestostring(U));

console.log("Y1: 0x" + ctx.MPIN.bytestostring(Y1));
console.log("V: 0x" + ctx.MPIN.bytestostring(SEC));

/* Server  */
res = ctx.MPIN.SERVER(sha, 0, xID, null, Y2, SST, U, null, SEC, null, null, CLIENT_ID, timeValue, message, Pa);
console.log("Y2: 0x" + ctx.MPIN.bytestostring(Y2));

if (res != 0) {
    console.log("FAILURE Signature Verification, error", res);
} else {
    console.log("SUCCESS Error Code ", res);
}

</script>
</body>
</html>