//! Implement the `v1` scheme's challenge string format

//!

//! This is a packed byte-string which encodes our puzzle's parameters

//! as inputs for Equi-X. We need to construct challenge strings both to

//! solve and to verify puzzles.

use crate::pow::v1::{

    err::SolutionErrorV1, types::Effort, types::Instance, types::Nonce, types::Seed,

    types::NONCE_LEN, types::SEED_LEN,

};

use arrayvec::{ArrayVec, CapacityError};

use blake2::{digest::consts::U4, Blake2b, Digest};

/// Algorithm personalization string (P)

///

/// This becomes part of the challenge string, binding a puzzle solution to

/// this particular algorithm even if other similar protocols exist using

/// the same building blocks.

const P_STRING: &[u8] = b"Tor hs intro v1\0";

/// Length of the personalization string, in bytes

const P_STRING_LEN: usize = 16;

/// Length of the HsBlindId

const ID_LEN: usize = 32;

/// Location of the [`Seed`] within a [`Challenge`]

const SEED_OFFSET: usize = P_STRING_LEN + ID_LEN;

/// Location of the [`Nonce`] within a [`Challenge`]

const NONCE_OFFSET: usize = SEED_OFFSET + SEED_LEN;

/// Location of the [`Effort`] within a [`Challenge`]

const EFFORT_OFFSET: usize = NONCE_OFFSET + NONCE_LEN;

/// Packed length of an [`Effort`], in bytes

const EFFORT_LEN: usize = 4;

/// Total length of our Equi-X challenge string

const CHALLENGE_LEN: usize = EFFORT_OFFSET + EFFORT_LEN;

/// A fully assembled challenge string, with some access to inner fields

///

/// This is the combined input to Equi-X. Defined by Proposal 327

/// as `(P || ID || C || N || INT_32(E))`

#[derive(derive_more::AsRef, Debug, Clone, Eq, PartialEq)]

pub(super) struct Challenge([u8; CHALLENGE_LEN]);

impl Challenge {

    /// Build a new [`Challenge`].

    ///

    /// Copies [`Instance`], [`Effort`], and [`Nonce`] values into

    /// a new byte array.

    /// Clone the [`Seed`] portion of this challenge.

    /// Clone the [`Nonce`] portion of this challenge.

    /// Return the [`Effort`] used in this challenge.

    /// Increment the [`Nonce`] value inside this challenge.

    ///

    /// Note that this will take a different amount of time depending on the

    /// number of bytes affected. There's no timing side channel here: The

    /// timing variation here is swamped by variation in the solver itself,

    /// and the nonce is not a secret value.

        /// Wrapping increment for a serialized little endian value of arbitrary width.

            }

    /// Verify that a solution proof passes the effort test.

    ///

    /// This computes a Blake2b hash of the challenge and the serialized

    /// Equi-X solution, and tests the result against the effort encoded

    /// in the challenge string.

    ///

    /// Used by both the [`crate::pow::v1::Solver`] and the [`crate::pow::v1::Verifier`].

        }

}