// 验证将嵌入 index.html 的纯 JS AES-128-ECB 实现与 Node crypto 的一致性
const crypto = require("crypto");
const KEY = "Gi4swf3llyafmsuK";

/* ===== 以下实现与嵌入页面的代码完全一致 ===== */
var AESTool = (function(){
  "use strict";
  var sbox = new Uint8Array([
    0x63,0x7c,0x77,0x7b,0xf2,0x6b,0x6f,0xc5,0x30,0x01,0x67,0x2b,0xfe,0xd7,0xab,0x76,
    0xca,0x82,0xc9,0x7d,0xfa,0x59,0x47,0xf0,0xad,0xd4,0xa2,0xaf,0x9c,0xa4,0x72,0xc0,
    0xb7,0xfd,0x93,0x26,0x36,0x3f,0xf7,0xcc,0x34,0xa5,0xe5,0xf1,0x71,0xd8,0x31,0x15,
    0x04,0xc7,0x23,0xc3,0x18,0x96,0x05,0x9a,0x07,0x12,0x80,0xe2,0xeb,0x27,0xb2,0x75,
    0x09,0x83,0x2c,0x1a,0x1b,0x6e,0x5a,0xa0,0x52,0x3b,0xd6,0xb3,0x29,0xe3,0x2f,0x84,
    0x53,0xd1,0x00,0xed,0x20,0xfc,0xb1,0x5b,0x6a,0xcb,0xbe,0x39,0x4a,0x4c,0x58,0xcf,
    0xd0,0xef,0xaa,0xfb,0x43,0x4d,0x33,0x85,0x45,0xf9,0x02,0x7f,0x50,0x3c,0x9f,0xa8,
    0x51,0xa3,0x40,0x8f,0x92,0x9d,0x38,0xf5,0xbc,0xb6,0xda,0x21,0x10,0xff,0xf3,0xd2,
    0xcd,0x0c,0x13,0xec,0x5f,0x97,0x44,0x17,0xc4,0xa7,0x7e,0x3d,0x64,0x5d,0x19,0x73,
    0x60,0x81,0x4f,0xdc,0x22,0x2a,0x90,0x88,0x46,0xee,0xb8,0x14,0xde,0x5e,0x0b,0xdb,
    0xe0,0x32,0x3a,0x0a,0x49,0x06,0x24,0x5c,0xc2,0xd3,0xac,0x62,0x91,0x95,0xe4,0x79,
    0xe7,0xc8,0x37,0x6d,0x8d,0xd5,0x4e,0xa9,0x6c,0x56,0xf4,0xea,0x65,0x7a,0xae,0x08,
    0xba,0x78,0x25,0x2e,0x1c,0xa6,0xb4,0xc6,0xe8,0xdd,0x74,0x1f,0x4b,0xbd,0x8b,0x8a,
    0x70,0x3e,0xb5,0x66,0x48,0x03,0xf6,0x0e,0x61,0x35,0x57,0xb9,0x86,0xc1,0x1d,0x9e,
    0xe1,0xf8,0x98,0x11,0x69,0xd9,0x8e,0x94,0x9b,0x1e,0x87,0xe9,0xce,0x55,0x28,0xdf,
    0x8c,0xa1,0x89,0x0d,0xbf,0xe6,0x42,0x68,0x41,0x99,0x2d,0x0f,0xb0,0x54,0xbb,0x16
  ]);
  var invSbox = new Uint8Array(256);
  (function(){ for (var i = 0; i < 256; i++) invSbox[sbox[i]] = i; })();
  var RCON = [1,2,4,8,16,32,64,128,27,54];

  function expandKey(keyBytes){
    var rk = new Uint8Array(176), i = 16, rconIdx = 0, j, t;
    rk.set(keyBytes);
    while (i < 176) {
      t = [rk[i-4], rk[i-3], rk[i-2], rk[i-1]];
      if (i % 16 === 0) t = [sbox[t[1]] ^ RCON[rconIdx++], sbox[t[2]], sbox[t[3]], sbox[t[0]]];
      for (j = 0; j < 4; j++) { rk[i] = rk[i-16] ^ t[j]; i++; }
    }
    return rk;
  }
  function xtime(a){ return ((a << 1) ^ (a & 128 ? 27 : 0)) & 255; }
  function mul(a, b){
    var r = 0;
    while (b) { if (b & 1) r ^= a; a = xtime(a); b >>= 1; }
    return r & 255;
  }
  function encryptBlock(b, rk){
    var i, c, r, t;
    for (i = 0; i < 16; i++) b[i] ^= rk[i];
    for (var round = 1; round <= 10; round++) {
      for (i = 0; i < 16; i++) b[i] = sbox[b[i]];
      // ShiftRows（按行循环左移 r）
      for (r = 1; r < 4; r++) {
        var row = [b[r], b[r+4], b[r+8], b[r+12]];
        for (c = 0; c < 4; c++) b[r + 4*c] = row[(c + r) % 4];
      }
      if (round < 10) {
        for (c = 0; c < 4; c++) {
          var o = 4*c, a0 = b[o], a1 = b[o+1], a2 = b[o+2], a3 = b[o+3];
          b[o]   = mul(a0,2) ^ mul(a1,3) ^ a2 ^ a3;
          b[o+1] = a0 ^ mul(a1,2) ^ mul(a2,3) ^ a3;
          b[o+2] = a0 ^ a1 ^ mul(a2,2) ^ mul(a3,3);
          b[o+3] = mul(a0,3) ^ a1 ^ a2 ^ mul(a3,2);
        }
      }
      for (i = 0; i < 16; i++) b[i] ^= rk[16*round + i];
    }
    return b;
  }
  function decryptBlock(b, rk){
    var i, c, r, round;
    for (i = 0; i < 16; i++) b[i] ^= rk[160 + i];
    for (round = 9; round >= 0; round--) {
      if (round < 9) {
        for (c = 0; c < 4; c++) {
          var o = 4*c, a0 = b[o], a1 = b[o+1], a2 = b[o+2], a3 = b[o+3];
          b[o]   = mul(a0,14) ^ mul(a1,11) ^ mul(a2,13) ^ mul(a3,9);
          b[o+1] = mul(a0,9) ^ mul(a1,14) ^ mul(a2,11) ^ mul(a3,13);
          b[o+2] = mul(a0,13) ^ mul(a1,9) ^ mul(a2,14) ^ mul(a3,11);
          b[o+3] = mul(a0,11) ^ mul(a1,13) ^ mul(a2,9) ^ mul(a3,14);
        }
      }
      for (r = 1; r < 4; r++) {
        var row = [b[r], b[r+4], b[r+8], b[r+12]];
        for (c = 0; c < 4; c++) b[r + 4*c] = row[(c - r + 4) % 4];
      }
      for (i = 0; i < 16; i++) b[i] = invSbox[b[i]];
      for (i = 0; i < 16; i++) b[i] ^= rk[16*round + i];
    }
    return b;
  }
  function b2a(bytes){ var s = ""; for (var i = 0; i < bytes.length; i++) s += String.fromCharCode(bytes[i]); return s; }
  function a2b(str){ var u = new Uint8Array(str.length); for (var i = 0; i < str.length; i++) u[i] = str.charCodeAt(i) & 255; return u; }
  function pkcs7(bytes){
    var pad = 16 - (bytes.length % 16), out = new Uint8Array(bytes.length + pad);
    out.set(bytes); out.fill(pad, bytes.length);
    return out;
  }
  function encrypt(plainText, keyStr){
    if (keyStr.length !== 16) throw new Error("密钥长度必须为 16 位");
    var data = pkcs7(new TextEncoder().encode(plainText));
    var rk = expandKey(new TextEncoder().encode(keyStr));
    var out = "";
    for (var off = 0; off < data.length; off += 16) {
      var b = data.slice(off, off + 16);
      encryptBlock(b, rk);
      out += b2a(b);
    }
    return btoa(out);
  }
  function decrypt(b64Text, keyStr){
    if (keyStr.length !== 16) throw new Error("密钥长度必须为 16 位");
    var bin = atob(b64Text.trim());
    if (bin.length === 0 || bin.length % 16 !== 0) throw new Error("密文长度不合法（须为 16 字节的整数倍）");
    var rk = expandKey(new TextEncoder().encode(keyStr));
    var bytes = a2b(bin), out = [];
    for (var off = 0; off < bytes.length; off += 16) {
      var b = bytes.slice(off, off + 16);
      decryptBlock(b, rk);
      out.push(b2a(b));
    }
    var all = out.join("");
    var u8 = a2b(all);
    var pad = u8[u8.length - 1];
    if (pad < 1 || pad > 16) throw new Error("解密失败：填充不合法（密钥错误或密文损坏）");
    for (var i = u8.length - pad; i < u8.length; i++) if (u8[i] !== pad) throw new Error("解密失败：填充不合法（密钥错误或密文损坏）");
    return new TextDecoder().decode(u8.slice(0, u8.length - pad));
  }
  return { encrypt: encrypt, decrypt: decrypt };
})();
/* ===== 实现结束 ===== */

// 与 Node crypto 对比验证
function nodeEnc(p){ const e = crypto.createCipheriv("aes-128-ecb", KEY, null); return e.update(p,"utf8","base64") + e.final("base64"); }
function nodeDec(c){ const d = crypto.createDecipheriv("aes-128-ecb", KEY, null); return d.update(c,"base64","utf8") + d.final("utf8"); }

const cases = [
  "330725198202084328",
  "1",
  "330725199001011234",
  "a",
  "abc123你好身份证测试测试",           // 多字节 UTF-8 + 非 16 倍数
  "十六个字节正好16byte",               // 恰好 32 字节 UTF-8?
  "x".repeat(16),                       // 恰好 16 字节（触发整块填充）
  "y".repeat(48)                        // 多块
];
let fail = 0;
for (const p of cases) {
  const mine = AESTool.encrypt(p, KEY);
  const ref = nodeEnc(p);
  if (mine !== ref) { console.log("ENCRYPT MISMATCH:", JSON.stringify(p), mine, ref); fail++; }
  const back = AESTool.decrypt(mine, KEY);
  if (back !== p) { console.log("ROUNDTRIP FAIL:", JSON.stringify(p), back); fail++; }
}
const sample = "MoV2Ra2USY/6tc6b9xQXZkuEA+I6X3u90CSNgvFqzlE=";
if (AESTool.decrypt(sample, KEY) !== "330725198202084328") { console.log("SAMPLE DECRYPT FAIL"); fail++; }
if (AESTool.encrypt("330725198202084328", KEY) !== sample) { console.log("SAMPLE ENCRYPT FAIL"); fail++; }
if (nodeDec(AESTool.encrypt("交叉验证文本123", KEY)) !== "交叉验证文本123") { console.log("CROSS DECRYPT FAIL"); fail++; }
console.log(fail === 0 ? "AES IMPLEMENTATION VERIFIED" : "FAILED: " + fail);
process.exit(fail === 0 ? 0 : 1);