# EncryptionManager.kt

    /*
     * The MIT License
     *
     * Original work sponsored and donated by The Danish Health Data Authority (http://www.sundhedsdatastyrelsen.dk)
     *
     * Copyright (C) 2025 The Danish Health Data Authority (http://www.sundhedsdatastyrelsen.dk)
     *
     *
     * Permission is hereby granted, free of charge, to any person obtaining a copy of
     * this software and associated documentation files (the "Software"), to deal in
     * the Software without restriction, including without limitation the rights to
     * use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
     * of the Software, and to permit persons to whom the Software is furnished to do
     * so, subject to the following conditions:
     *
     *
     * The above copyright notice and this permission notice shall be included in all
     * copies or substantial portions of the Software.
     *
     *
     * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
     * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
     * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
     * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
     * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
     * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
     * SOFTWARE.
     */
    package dk.nsp.mingraviditet.core.datastore.crypto

    import javax.crypto.Cipher
    import javax.crypto.SecretKey

    interface EncryptionManager {

        fun encrypt(data: ByteArray, keyAlias: String): ByteArray
    }

    class EncryptionManagerImpl : EncryptionManager {

        private val cipher by lazy {
            Cipher.getInstance(Crypto.TRANSFORMATION)
        }

        private val keyGenerator: KeyStoreManager by lazy {
            KeyStoreManagerImpl()
        }

        override fun encrypt(data: ByteArray, keyAlias: String): ByteArray {
            val secretKey: SecretKey = keyGenerator.getOrGenerateKey(keyAlias)

            cipher.init(Cipher.ENCRYPT_MODE, secretKey)
            val initializationVector = cipher.iv
            val encryptedBytes = cipher.doFinal(data)
            return initializationVector + encryptedBytes
        }
    }