jpsec

type AuthenticationParams struct {
	// Algorithm specifies the MAC/hash algorithm.
	Algorithm uint8

	// HashValue contains the computed hash/MAC value.
	HashValue []byte

	// CertificateID identifies the signing certificate.
	CertificateID []byte
}

type Decryptor interface {
	// Decrypt decrypts data using the provided encryption parameters.
	// Returns the decrypted data or an error if decryption fails.
	Decrypt(data []byte, params *EncryptionParams) ([]byte, error)

	// SupportsAlgorithm returns true if the algorithm is supported.
	SupportsAlgorithm(algorithm, mode uint8) bool
}

type EncryptionParams struct {
	// Algorithm specifies the encryption algorithm.
	Algorithm uint8

	// Mode specifies the block cipher mode.
	Mode uint8

	// KeyID identifies the encryption key.
	KeyID []byte

	// IV is the initialization vector for block cipher modes.
	IV []byte

	// AuthTag is the authentication tag for authenticated encryption.
	AuthTag []byte
}

type KeyManagementParams struct {
	// KeyID is the key identifier.
	KeyID []byte

	// EncryptedKey is the encrypted key data.
	EncryptedKey []byte

	// KeyWrapAlgorithm specifies how the key was encrypted.
	KeyWrapAlgorithm uint8

	// RecipientID identifies the intended key recipient.
	RecipientID []byte
}

type Parser struct {
	// contains filtered or unexported fields
}

type Reader struct {
	// contains filtered or unexported fields
}

type SECMarker struct {
	// Length is the marker segment length.
	Length uint16

	// ZoneIndex is the security zone index.
	ZoneIndex uint8

	// Flags contains security flags.
	Flags uint8

	// Tool identifies the security tool.
	Tool uint8

	// Offset specifies the zone start offset.
	Offset int64

	// Size specifies the zone size.
	Size int64

	// ToolParams contains tool-specific parameters.
	ToolParams []byte
}

type SecurityContext struct {
	// Zones contains all defined security zones.
	Zones []*SecurityZone

	// HasEncryption is true if any zone uses encryption.
	HasEncryption bool

	// HasAuthentication is true if any zone uses authentication.
	HasAuthentication bool

	// IsFullyProtected is true if the entire codestream is protected.
	IsFullyProtected bool
}

type SecurityZone struct {
	// Index is the zone identifier (0-255).
	Index uint8

	// StartOffset is the byte offset where the zone begins.
	StartOffset int64

	// EndOffset is the byte offset where the zone ends.
	EndOffset int64

	// Tool identifies the security tool applied to this zone.
	Tool uint8

	// ToolData contains tool-specific parameters.
	ToolData []byte

	// Encryption contains encryption parameters if Tool == ToolEncryption.
	Encryption *EncryptionParams

	// Authentication contains authentication parameters if Tool == ToolAuthentication.
	Authentication *AuthenticationParams

	// KeyManagement contains key info if Tool == ToolKeyManagement.
	KeyManagement *KeyManagementParams
}