omemo.cpp

// This Source Code Form is subject to the terms of the Mozilla Public
// License, version 2.0. If a copy of the MPL was not distributed with this
// file, You can obtain one at http://mozilla.org/MPL/2.0/.

#include <fmt/core.h>
#include <memory>
#include <numeric>
#include <sstream>
#include <string>
#include <string_view>
#include <stdlib.h>
#include <stdint.h>
#include <sys/param.h>
#include <time.h>
#include <math.h>
#include <limits.h>
#include <optional>
#include <ranges>
#include <filesystem>
#include <strophe.h>
#include <weechat/weechat-plugin.h>

#include "plugin.hh"
#include "xmpp/stanza.hh"
#include "account.hh"
#include "omemo.hh"
#include "gcrypt.hh"
#include "util.hh"

using namespace weechat::xmpp;
using t_omemo = omemo;

#define mdb_val_str(s) { \
    .mv_size = strlen(s), .mv_data = (char*)s \
}

#define mdb_val_intptr(i) { \
    .mv_size = sizeof(*i), .mv_data = i \
}

#define mdb_val_sizeof(t) { \
    .mv_size = sizeof(t), .mv_data = NULL \
}

#define PRE_KEY_START 1
#define PRE_KEY_COUNT 100

#define AES_KEY_SIZE (16)
#define AES_IV_SIZE (12)

const char *OMEMO_ADVICE = "[OMEMO encrypted message (XEP-0384)]";

size_t base64_decode(const char *buffer, size_t length, uint8_t **result)
{
    *result = (uint8_t*)calloc(length + 1, sizeof(uint8_t));
    return weechat_string_base_decode(64, buffer, (char*)*result);
}

size_t base64_encode(const uint8_t *buffer, size_t length, char **result)
{
    *result = (char*)calloc(length * 2, sizeof(char));
    return weechat_string_base_encode(64, (char*)buffer, length, *result);
}

std::vector<std::uint8_t> base64_decode(std::string_view buffer)
{
    auto result = std::make_unique<std::uint8_t[]>(buffer.size() + 1);
    return std::vector<std::uint8_t>(result.get(), result.get() + weechat_string_base_decode(64, buffer.data(), (char*)result.get()));
}

std::string base64_encode(std::vector<std::uint8_t> buffer)
{
    auto result = std::make_unique<char[]>(buffer.size() * 2);
    return std::string(result.get(), result.get() + weechat_string_base_encode(64, (char*)buffer.data(), buffer.size(), result.get()));
}

int aes_decrypt(const uint8_t *ciphertext, size_t ciphertext_len,
                uint8_t *key, uint8_t *iv, uint8_t *tag, size_t tag_len,
                uint8_t **plaintext, size_t *plaintext_len)
{
    gcry_cipher_hd_t cipher = NULL;
    if (gcry_cipher_open(&cipher, GCRY_CIPHER_AES128,
                GCRY_CIPHER_MODE_GCM, GCRY_CIPHER_SECURE)) goto cleanup;
    if (gcry_cipher_setkey(cipher, key, AES_KEY_SIZE)) goto cleanup;
    if (gcry_cipher_setiv(cipher, iv, AES_IV_SIZE)) goto cleanup;
    *plaintext_len = ciphertext_len;
    *plaintext = (uint8_t*)malloc((sizeof(uint8_t) * *plaintext_len) + 1);
    if (gcry_cipher_decrypt(cipher, *plaintext, *plaintext_len,
                            ciphertext, ciphertext_len)) goto cleanup;
    if (gcry_cipher_checktag(cipher, tag, tag_len)) goto cleanup;
    gcry_cipher_close(cipher);
    return 1;
cleanup:
    gcry_cipher_close(cipher);
    return 0;
}

int aes_encrypt(const uint8_t *plaintext, size_t plaintext_len,
                uint8_t **key, uint8_t **iv, uint8_t **tag, size_t *tag_len,
                uint8_t **ciphertext, size_t *ciphertext_len)
{
    *tag_len = 16;
    *tag = (uint8_t*)calloc(*tag_len, sizeof(uint8_t));
    *iv = (uint8_t*)gcry_random_bytes(AES_IV_SIZE, GCRY_STRONG_RANDOM);
    *key = (uint8_t*)gcry_random_bytes(AES_KEY_SIZE, GCRY_STRONG_RANDOM);

    gcry_cipher_hd_t cipher = NULL;
    if (gcry_cipher_open(&cipher, GCRY_CIPHER_AES128,
                GCRY_CIPHER_MODE_GCM, GCRY_CIPHER_SECURE)) goto cleanup;
    if (gcry_cipher_setkey(cipher, *key, AES_KEY_SIZE)) goto cleanup;
    if (gcry_cipher_setiv(cipher, *iv, AES_IV_SIZE)) goto cleanup;
    *ciphertext_len = plaintext_len;
    *ciphertext = (uint8_t*)malloc((sizeof(uint8_t) * *ciphertext_len) + 1);
    if (gcry_cipher_encrypt(cipher, *ciphertext, *ciphertext_len,
                            plaintext, plaintext_len)) goto cleanup;
    if (gcry_cipher_gettag(cipher, *tag, *tag_len)) goto cleanup;
    gcry_cipher_close(cipher);
    return 1;
cleanup:
    gcry_cipher_close(cipher);
    return 0;
}

void signal_protocol_address_free(signal_protocol_address* ptr) {
    if (!ptr)
        return;
    if (ptr->name) {
        free((void*)ptr->name);
    }
    return free(ptr);
}

void signal_protocol_address_set_name(signal_protocol_address* self, const char* name) {
    if (!self)
        return;
    if (!name)
        return;
    char* n = (char*)malloc(strlen(name)+1);
    memcpy(n, name, strlen(name));
    n[strlen(name)] = 0;
    if (self->name) {
        free((void*)self->name);
    }
    self->name = n;
    self->name_len = strlen(n);
}

char* signal_protocol_address_get_name(signal_protocol_address* self) {
    if (!self)
        return NULL;
    if (!self->name)
        return 0;
    char* res = (char*)malloc(sizeof(char) * (self->name_len + 1));
    memcpy(res, self->name, self->name_len);
    res[self->name_len] = 0;
    return res;
}

int32_t signal_protocol_address_get_device_id(signal_protocol_address* self) {
    if (!self)
        return -1;
    return self->device_id;
}

void signal_protocol_address_set_device_id(signal_protocol_address* self, int32_t device_id) {
    if (!self)
        return;
    self->device_id = device_id;
}

signal_protocol_address* signal_protocol_address_new(const char* name, int32_t device_id) {
    if (!name)
        return NULL;
    signal_protocol_address* address = (signal_protocol_address*)malloc(sizeof(signal_protocol_address));
    address->device_id = -1;
    address->name = NULL;
    signal_protocol_address_set_name(address, name);
    signal_protocol_address_set_device_id(address, device_id);
    return address;
}

int aes_cipher(int cipher, size_t key_len, int* algo, int* mode) {
    switch (key_len) {
        case 16:
            *algo = GCRY_CIPHER_AES128;
            break;
        case 24:
            *algo = GCRY_CIPHER_AES192;
            break;
        case 32:
            *algo = GCRY_CIPHER_AES256;
            break;
        default:
            return SG_ERR_UNKNOWN;
    }
    switch (cipher) {
        case SG_CIPHER_AES_CBC_PKCS5:
            *mode = GCRY_CIPHER_MODE_CBC;
            break;
        case SG_CIPHER_AES_CTR_NOPADDING:
            *mode = GCRY_CIPHER_MODE_CTR;
            break;
        default:
            return SG_ERR_UNKNOWN;
    }
    return SG_SUCCESS;
}

void lock_function(void *user_data)
{
    (void) user_data;
}

void unlock_function(void *user_data)
{
    (void) user_data;
}

int cp_randomize(uint8_t *data, size_t len) {
    gcry_randomize(data, len, GCRY_STRONG_RANDOM);
    return SG_SUCCESS;
}

int cp_random_generator(uint8_t *data, size_t len, void *) {
    gcry_randomize(data, len, GCRY_STRONG_RANDOM);
    return SG_SUCCESS;
}

int cp_hmac_sha256_init(void **hmac_context, const uint8_t *key, size_t key_len, void *) {
    gcry_mac_hd_t* ctx = (gcry_mac_hd_t*)malloc(sizeof(gcry_mac_hd_t));
    if (!ctx) return SG_ERR_NOMEM;

    if (gcry_mac_open(ctx, GCRY_MAC_HMAC_SHA256, 0, 0)) {
        free(ctx);
        return SG_ERR_UNKNOWN;
    }

    if (gcry_mac_setkey(*ctx, key, key_len)) {
        free(ctx);
        return SG_ERR_UNKNOWN;
    }

    *hmac_context = ctx;

    return SG_SUCCESS;
}

int cp_hmac_sha256_update(void *hmac_context, const uint8_t *data, size_t data_len, void *) {
    gcry_mac_hd_t* ctx = (gcry_mac_hd_t*)hmac_context;

    if (gcry_mac_write(*ctx, data, data_len)) return SG_ERR_UNKNOWN;

    return SG_SUCCESS;
}

int cp_hmac_sha256_final(void *hmac_context, struct signal_buffer **output, void *) {
    size_t len = gcry_mac_get_algo_maclen(GCRY_MAC_HMAC_SHA256);
    auto md = std::unique_ptr<uint8_t[]>(new uint8_t[len]);
    gcry_mac_hd_t* ctx = (gcry_mac_hd_t*)hmac_context;

    if (gcry_mac_read(*ctx, md.get(), &len)) return SG_ERR_UNKNOWN;

    struct signal_buffer *output_buffer = signal_buffer_create(md.get(), len);
    if (!output_buffer) return SG_ERR_NOMEM;

    *output = output_buffer;

    return SG_SUCCESS;
}

void cp_hmac_sha256_cleanup(void *hmac_context, void *) {
    gcry_mac_hd_t* ctx = (gcry_mac_hd_t*)hmac_context;
    if (ctx) {
        gcry_mac_close(*ctx);
        free(ctx);
    }
}

int cp_sha512_digest_init(void **digest_context, void *) {
    gcry_md_hd_t* ctx = (gcry_md_hd_t*)malloc(sizeof(gcry_mac_hd_t));
    if (!ctx) return SG_ERR_NOMEM;

    if (gcry_md_open(ctx, GCRY_MD_SHA512, 0)) {
        free(ctx);
        return SG_ERR_UNKNOWN;
    }

    *digest_context = ctx;

    return SG_SUCCESS;
}

int cp_sha512_digest_update(void *digest_context, const uint8_t *data, size_t data_len, void *) {
    gcry_md_hd_t* ctx = (gcry_md_hd_t*)digest_context;

    gcry_md_write(*ctx, data, data_len);

    return SG_SUCCESS;
}

int cp_sha512_digest_final(void *digest_context, struct signal_buffer **output, void *) {
    size_t len = gcry_md_get_algo_dlen(GCRY_MD_SHA512);
    gcry_md_hd_t* ctx = (gcry_md_hd_t*)digest_context;

    uint8_t* md = gcry_md_read(*ctx, GCRY_MD_SHA512);
    if (!md) return SG_ERR_UNKNOWN;

    gcry_md_reset(*ctx);

    struct signal_buffer *output_buffer = signal_buffer_create(md, len);
    free(md);
    if (!output_buffer) return SG_ERR_NOMEM;

    *output = output_buffer;

    return SG_SUCCESS;
}

void cp_sha512_digest_cleanup(void *digest_context, void *) {
    gcry_md_hd_t* ctx = (gcry_md_hd_t*)digest_context;
    if (ctx) {
        gcry_md_close(*ctx);
        free(ctx);
    }
}

int cp_encrypt(struct signal_buffer **output,
        int cipher,
        const uint8_t *key, size_t key_len,
        const uint8_t *iv, size_t iv_len,
        const uint8_t *plaintext, size_t plaintext_len,
        void *) {
    int algo, mode, error_code = SG_ERR_UNKNOWN;
    if (aes_cipher(cipher, key_len, &algo, &mode)) return SG_ERR_INVAL;

    gcry_cipher_hd_t ctx = {0};

    if (gcry_cipher_open(&ctx, algo, mode, 0)) return SG_ERR_NOMEM;

    signal_buffer* padded = 0;
    signal_buffer* out_buf = 0;
    goto no_error;
error:
    gcry_cipher_close(ctx);
    if (padded != 0) {
        signal_buffer_bzero_free(padded);
    }
    if (out_buf != 0) {
        signal_buffer_free(out_buf);
    }
    return error_code;
no_error:

    if (gcry_cipher_setkey(ctx, key, key_len)) goto error;

    uint8_t tag_len = 0, pad_len = 0;
    switch (cipher) {
        case SG_CIPHER_AES_CBC_PKCS5:
            if (gcry_cipher_setiv(ctx, iv, iv_len)) goto error;
            pad_len = 16 - (plaintext_len % 16);
            if (pad_len == 0) pad_len = 16;
            break;
        case SG_CIPHER_AES_CTR_NOPADDING:
            if (gcry_cipher_setctr(ctx, iv, iv_len)) goto error;
            break;
        default:
            return SG_ERR_UNKNOWN;
    }

    size_t padded_len = plaintext_len + pad_len;
    padded = signal_buffer_alloc(padded_len);
    if (padded == 0) {
        error_code = SG_ERR_NOMEM;
        goto error;
    }

    memset(signal_buffer_data(padded) + plaintext_len, pad_len, pad_len);
    memcpy(signal_buffer_data(padded), plaintext, plaintext_len);

    out_buf = signal_buffer_alloc(padded_len + tag_len);
    if (out_buf == 0) {
        error_code = SG_ERR_NOMEM;
        goto error;
    }

    if (gcry_cipher_encrypt(ctx, signal_buffer_data(out_buf), padded_len, signal_buffer_data(padded), padded_len)) goto error;

    if (tag_len > 0) {
        if (gcry_cipher_gettag(ctx, signal_buffer_data(out_buf) + padded_len, tag_len)) goto error;
    }

    *output = out_buf;
    out_buf = 0;

    signal_buffer_bzero_free(padded);
    padded = 0;

    gcry_cipher_close(ctx);
    return SG_SUCCESS;
}

int cp_decrypt(struct signal_buffer **output,
        int cipher,
        const uint8_t *key, size_t key_len,
        const uint8_t *iv, size_t iv_len,
        const uint8_t *ciphertext, size_t ciphertext_len,
        void *) {
    int algo, mode, error_code = SG_ERR_UNKNOWN;
    *output = 0;
    if (aes_cipher(cipher, key_len, &algo, &mode)) return SG_ERR_INVAL;
    if (ciphertext_len == 0) return SG_ERR_INVAL;

    gcry_cipher_hd_t ctx = {0};

    if (gcry_cipher_open(&ctx, algo, mode, 0)) return SG_ERR_NOMEM;

    signal_buffer* out_buf = 0;
    goto no_error;
error:
    gcry_cipher_close(ctx);
    if (out_buf != 0) {
        signal_buffer_bzero_free(out_buf);
    }
    return error_code;
no_error:

    if (gcry_cipher_setkey(ctx, key, key_len)) goto error;

    uint8_t tag_len = 0, pkcs_pad = 0;
    switch (cipher) {
        case SG_CIPHER_AES_CBC_PKCS5:
            if (gcry_cipher_setiv(ctx, iv, iv_len)) goto error;
            pkcs_pad = 1;
            break;
        case SG_CIPHER_AES_CTR_NOPADDING:
            if (gcry_cipher_setctr(ctx, iv, iv_len)) goto error;
            break;
        default:
            goto error;
    }

    size_t padded_len = ciphertext_len - tag_len;
    out_buf = signal_buffer_alloc(padded_len);
    if (out_buf == 0) {
        error_code = SG_ERR_NOMEM;
        goto error;
    }

    if (gcry_cipher_decrypt(ctx, signal_buffer_data(out_buf), signal_buffer_len(out_buf), ciphertext, padded_len)) goto error;

    if (tag_len > 0) {
        if (gcry_cipher_checktag(ctx, ciphertext + padded_len, tag_len)) goto error;
    }

    if (pkcs_pad) {
        uint8_t pad_len = signal_buffer_data(out_buf)[padded_len - 1];
        if (pad_len > 16 || pad_len > padded_len) goto error;
        *output = signal_buffer_create(signal_buffer_data(out_buf), padded_len - pad_len);
        signal_buffer_bzero_free(out_buf);
        out_buf = 0;
    } else {
        *output = out_buf;
        out_buf = 0;
    }

    gcry_cipher_close(ctx);
    return SG_SUCCESS;
}

int iks_get_identity_key_pair(struct signal_buffer **public_data, signal_buffer **private_data, void *user_data)
{
    auto omemo = reinterpret_cast<t_omemo*>(user_data);
    MDB_txn *transaction = NULL;
    MDB_val k_local_private_key = mdb_val_str("local_private_key");
    MDB_val k_local_public_key = mdb_val_str("local_public_key");
    MDB_val v_local_private_key, v_local_public_key;

    if (mdb_txn_begin(omemo->db_env, NULL, MDB_RDONLY, &transaction)) {
        weechat_printf(NULL, "%sxmpp: failed to open lmdb transaction",
                       weechat_prefix("error"));
        return -1;
    }

    if (!mdb_get(transaction, omemo->dbi.omemo,
                 &k_local_private_key, &v_local_private_key) &&
        !mdb_get(transaction, omemo->dbi.omemo,
                 &k_local_public_key, &v_local_public_key))
    {
        *private_data = signal_buffer_create((const uint8_t*)v_local_private_key.mv_data, v_local_private_key.mv_size);
        *public_data = signal_buffer_create((const uint8_t*)v_local_public_key.mv_data, v_local_public_key.mv_size);

        if (mdb_txn_commit(transaction)) {
            weechat_printf(NULL, "%sxmpp: failed to write lmdb transaction",
                           weechat_prefix("error"));
            goto cleanup;
        };
    }
    else
    {
        auto identity = libsignal::identity_key_pair::generate(omemo->context);

        auto private_key = identity.get_private();
        auto public_key = identity.get_public();

        ec_private_key_serialize(private_data, private_key);
        ec_public_key_serialize(public_data, public_key);

        v_local_private_key.mv_data = signal_buffer_data(*private_data);
        v_local_private_key.mv_size = signal_buffer_len(*private_data);
        v_local_public_key.mv_data = signal_buffer_data(*public_data);
        v_local_public_key.mv_size = signal_buffer_len(*public_data);

        mdb_txn_abort(transaction);
        if (mdb_txn_begin(omemo->db_env, NULL, 0, &transaction)) {
            weechat_printf(NULL, "%sxmpp: failed to open lmdb transaction",
                           weechat_prefix("error"));
            return -1;
        }

        if (mdb_put(transaction, omemo->dbi.omemo,
                    &k_local_private_key, &v_local_private_key, MDB_NOOVERWRITE) ||
            mdb_put(transaction, omemo->dbi.omemo,
                    &k_local_public_key, &v_local_public_key, MDB_NOOVERWRITE))
        {
            weechat_printf(NULL, "%sxmpp: failed to write lmdb value",
                           weechat_prefix("error"));
            goto cleanup;
        };

        if (mdb_txn_commit(transaction)) {
            weechat_printf(NULL, "%sxmpp: failed to write lmdb transaction",
                           weechat_prefix("error"));
            goto cleanup;
        };

        *private_data = signal_buffer_create((const uint8_t*)v_local_private_key.mv_data,
                v_local_private_key.mv_size);
        *public_data = signal_buffer_create((const uint8_t*)v_local_public_key.mv_data,
                v_local_public_key.mv_size);

        omemo->identity = std::move(identity);
    }

    return 0;
cleanup:
    mdb_txn_abort(transaction);
    return -1;
}

int iks_get_local_registration_id(void *user_data, uint32_t *registration_id)
{
    auto omemo = reinterpret_cast<t_omemo*>(user_data);
    MDB_txn *transaction = NULL;
    MDB_val k_local_registration_id = mdb_val_str("local_registration_id");
    MDB_val v_local_registration_id = mdb_val_sizeof(uint32_t);

    // Return the local client's registration ID
    if (mdb_txn_begin(omemo->db_env, NULL, MDB_RDONLY, &transaction)) {
        weechat_printf(NULL, "%sxmpp: failed to open lmdb transaction",
                       weechat_prefix("error"));
        return -1;
    }

    if (!mdb_get(transaction, omemo->dbi.omemo,
                 &k_local_registration_id,
                 &v_local_registration_id))
    {
        *registration_id = *(uint32_t*)v_local_registration_id.mv_data;

        if (mdb_txn_commit(transaction)) {
            weechat_printf(NULL, "%sxmpp: failed to read lmdb transaction",
                           weechat_prefix("error"));
            goto cleanup;
        };
    }
    else
    {
        uint32_t generated_id;
        signal_protocol_key_helper_generate_registration_id(
            &generated_id, 0, omemo->context);
        v_local_registration_id.mv_data = &generated_id;

        mdb_txn_abort(transaction);
        if (mdb_txn_begin(omemo->db_env, NULL, 0, &transaction)) {
            weechat_printf(NULL, "%sxmpp: failed to open lmdb transaction",
                           weechat_prefix("error"));
            return -1;
        }

        if (mdb_put(transaction, omemo->dbi.omemo,
                    &k_local_registration_id,
                    &v_local_registration_id, MDB_NOOVERWRITE))
        {
            weechat_printf(NULL, "%sxmpp: failed to write lmdb value",
                           weechat_prefix("error"));
            goto cleanup;
        };

        if (mdb_txn_commit(transaction)) {
            weechat_printf(NULL, "%sxmpp: failed to write lmdb transaction",
                           weechat_prefix("error"));
            goto cleanup;
        };

        *registration_id = generated_id;
    }

    return 0;
cleanup:
    mdb_txn_abort(transaction);
    return -1;
}

int iks_save_identity(const struct signal_protocol_address *address, uint8_t *key_data, size_t key_len, void *user_data)
{
    auto omemo = reinterpret_cast<t_omemo*>(user_data);
    MDB_txn *transaction = NULL;
    MDB_val k_identity_key = {
        .mv_size = strlen("identity_key_") + address->name_len
            + 1 + 10,
        .mv_data = NULL,
    };
    MDB_val v_identity_key = {.mv_size = key_len, .mv_data = key_data};

    k_identity_key.mv_data = malloc(sizeof(char) * (
                                           k_identity_key.mv_size + 1));
    k_identity_key.mv_size =
    snprintf((char*)k_identity_key.mv_data, k_identity_key.mv_size + 1,
             "identity_key_%s_%u", address->name, address->device_id);

    if (mdb_txn_begin(omemo->db_env, NULL, 0, &transaction)) {
        weechat_printf(NULL, "%sxmpp: failed to open lmdb transaction",
                       weechat_prefix("error"));
        return -1;
    }

    if (mdb_put(transaction, omemo->dbi.omemo, &k_identity_key,
                &v_identity_key, 0)) {
      weechat_printf(NULL, "%sxmpp: failed to write lmdb value",
                     weechat_prefix("error"));
      goto cleanup;
    };

    if (mdb_txn_commit(transaction)) {
      weechat_printf(NULL, "%sxmpp: failed to write lmdb transaction",
                     weechat_prefix("error"));
      goto cleanup;
    };

    return 0;
cleanup:
    mdb_txn_abort(transaction);
    return -1;
}

int iks_is_trusted_identity(const struct signal_protocol_address *address, uint8_t *key_data, size_t key_len, void *user_data)
{
    auto omemo = reinterpret_cast<t_omemo*>(user_data);
    MDB_txn *transaction = NULL;
    MDB_val k_identity_key = {
        .mv_size = strlen("identity_key_") + address->name_len
            + 1 + 10,
        .mv_data = NULL,
    };
    MDB_val v_identity_key = {.mv_size = key_len, .mv_data = key_data};
    int trusted = 1;

    k_identity_key.mv_data = malloc(sizeof(char) * (
                                           k_identity_key.mv_size + 1));
    k_identity_key.mv_size =
    snprintf((char*)k_identity_key.mv_data, k_identity_key.mv_size + 1,
             "identity_key_%s_%u", address->name, address->device_id);

    if (mdb_txn_begin(omemo->db_env, NULL, MDB_RDONLY, &transaction)) {
        weechat_printf(NULL, "%sxmpp: failed to open lmdb transaction",
                       weechat_prefix("error"));
        return -1;
    }

    if (mdb_get(transaction, omemo->dbi.omemo, &k_identity_key,
                &v_identity_key)) {
      weechat_printf(NULL, "%sxmpp: failed to read lmdb value",
                     weechat_prefix("error"));
      goto cleanup;
    };

    if (v_identity_key.mv_size != key_len ||
        memcmp(v_identity_key.mv_data, key_data, key_len) != 0)
        trusted = 0;

    if (mdb_txn_commit(transaction)) {
      weechat_printf(NULL, "%sxmpp: failed to write lmdb transaction",
                     weechat_prefix("error"));
      goto cleanup;
    };

    return 1 | trusted;
cleanup:
    mdb_txn_abort(transaction);
    return -1;
}

void iks_destroy_func(void *user_data)
{
    auto omemo = reinterpret_cast<t_omemo*>(user_data);
    (void) omemo;
    // Function called to perform cleanup when the data store context is being destroyed
}

int pks_store_pre_key(uint32_t pre_key_id, uint8_t *record, size_t record_len, void *user_data)
{
    auto omemo = reinterpret_cast<t_omemo*>(user_data);
    MDB_txn *transaction = NULL;
    MDB_val k_pre_key = {
        .mv_size = strlen("pre_key_") + 10, // strlen(UINT32_MAX)
        .mv_data = NULL,
    };
    MDB_val v_pre_key = {.mv_size = record_len, .mv_data = record};

    k_pre_key.mv_data = malloc(sizeof(char) * (
                                           k_pre_key.mv_size + 1));
    k_pre_key.mv_size =
    snprintf((char*)k_pre_key.mv_data, k_pre_key.mv_size + 1,
             "pre_key_%-10u", pre_key_id);

    if (mdb_txn_begin(omemo->db_env, NULL, 0, &transaction)) {
        weechat_printf(NULL, "%sxmpp: failed to open lmdb transaction",
                       weechat_prefix("error"));
        return -1;
    }

    if (mdb_put(transaction, omemo->dbi.omemo, &k_pre_key,
                &v_pre_key, 0)) {
      weechat_printf(NULL, "%sxmpp: failed to write lmdb value",
                     weechat_prefix("error"));
      goto cleanup;
    };

    if (mdb_txn_commit(transaction)) {
      weechat_printf(NULL, "%sxmpp: failed to write lmdb transaction",
                     weechat_prefix("error"));
      goto cleanup;
    };

    return 0;
cleanup:
    mdb_txn_abort(transaction);
    return -1;
}

int pks_contains_pre_key(uint32_t pre_key_id, void *user_data)
{
    auto omemo = reinterpret_cast<t_omemo*>(user_data);
    MDB_txn *transaction = NULL;
    MDB_val k_pre_key = {
        .mv_size = strlen("pre_key_") + 10, // strlen(UINT32_MAX)
        .mv_data = NULL,
    };
    MDB_val v_pre_key;

    k_pre_key.mv_data = malloc(sizeof(char) * (
                                           k_pre_key.mv_size + 1));
    k_pre_key.mv_size =
    snprintf((char*)k_pre_key.mv_data, k_pre_key.mv_size + 1,
             "pre_key_%-10u", pre_key_id);

    if (mdb_txn_begin(omemo->db_env, NULL, MDB_RDONLY, &transaction)) {
        weechat_printf(NULL, "%sxmpp: failed to open lmdb transaction",
                       weechat_prefix("error"));
        return -1;
    }

    if (mdb_get(transaction, omemo->dbi.omemo, &k_pre_key,
                &v_pre_key)) {
        weechat_printf(NULL, "%sxmpp: failed to read lmdb value",
                       weechat_prefix("error"));
        mdb_txn_abort(transaction);
        goto cleanup;
    };

    mdb_txn_abort(transaction);

    return 1;
cleanup:
    mdb_txn_abort(transaction);
    return 0;
}

uint32_t pks_get_count(t_omemo *omemo, int increment)
{
    uint32_t count = PRE_KEY_START;
    MDB_txn *transaction = NULL;
    MDB_val k_pre_key_idx = mdb_val_str("pre_key_idx");
    MDB_val v_pre_key_idx = mdb_val_intptr(&count);

    if (mdb_txn_begin(omemo->db_env, NULL, 0, &transaction)) {
        weechat_printf(NULL, "%sxmpp: failed to open lmdb transaction",
                       weechat_prefix("error"));
        return -1;
    }

    if (!mdb_get(transaction, omemo->dbi.omemo,
                 &k_pre_key_idx, &v_pre_key_idx))
    {
        if (increment)
            count += PRE_KEY_COUNT;
    }

    if (mdb_put(transaction, omemo->dbi.omemo,
                &k_pre_key_idx, &v_pre_key_idx, 0))
    {
        weechat_printf(NULL, "%sxmpp: failed to read lmdb value",
                       weechat_prefix("error"));
        goto cleanup;
    };

    if (mdb_txn_commit(transaction)) {
        weechat_printf(NULL, "%sxmpp: failed to write lmdb transaction",
                       weechat_prefix("error"));
        goto cleanup;
    };

    return count;
cleanup:
    mdb_txn_abort(transaction);
    return 0;
}

int pks_load_pre_key(struct signal_buffer **record, uint32_t pre_key_id, void *user_data)
{
    auto omemo = reinterpret_cast<t_omemo*>(user_data);
    MDB_txn *transaction = NULL;
    MDB_val k_pre_key = {
        .mv_size = strlen("pre_key_") + 10, // strlen(UINT32_MAX)
        .mv_data = NULL,
    };
    MDB_val v_pre_key;

    k_pre_key.mv_data = malloc(sizeof(char) * (
                                           k_pre_key.mv_size + 1));
    k_pre_key.mv_size =
    snprintf((char*)k_pre_key.mv_data, k_pre_key.mv_size + 1,
             "pre_key_%-10u", pre_key_id);

    if (mdb_txn_begin(omemo->db_env, NULL, 0, &transaction)) {
        weechat_printf(NULL, "%sxmpp: failed to open lmdb transaction",
                       weechat_prefix("error"));
        return -1;
    }

    if (!mdb_get(transaction, omemo->dbi.omemo,
                 &k_pre_key, &v_pre_key))
    {
        *record = signal_buffer_create((const uint8_t*)v_pre_key.mv_data, v_pre_key.mv_size);

        if (mdb_txn_commit(transaction)) {
            weechat_printf(NULL, "%sxmpp: failed to close lmdb transaction",
                           weechat_prefix("error"));
            goto cleanup;
        };
    }
    else
    {
        mdb_txn_abort(transaction);

        signal_protocol_key_helper_pre_key_list_node *pre_keys_list;
        session_pre_key *pre_key = NULL;

        for (signal_protocol_key_helper_generate_pre_keys(&pre_keys_list,
                    pks_get_count(omemo, 1), PRE_KEY_COUNT,
                    omemo->context); pre_keys_list;
             pre_keys_list = signal_protocol_key_helper_key_list_next(pre_keys_list))
        {
            pre_key = signal_protocol_key_helper_key_list_element(pre_keys_list);
            uint32_t id = session_pre_key_get_id(pre_key);
            session_pre_key_serialize(record, pre_key);
            pks_store_pre_key(id, signal_buffer_data(*record),
                    signal_buffer_len(*record), user_data);
        }
        signal_protocol_key_helper_key_list_free(pre_keys_list);
    }

    return 0;
cleanup:
    mdb_txn_abort(transaction);
    return -1;
}

int pks_remove_pre_key(uint32_t pre_key_id, void *user_data)
{
    auto omemo = reinterpret_cast<t_omemo*>(user_data);
    MDB_txn *transaction = NULL;
    MDB_val k_pre_key = {
        .mv_size = strlen("pre_key_") + 10, // strlen(UINT32_MAX)
        .mv_data = NULL,
    };
    MDB_val v_pre_key;

    k_pre_key.mv_data = malloc(sizeof(char) * (
                                           k_pre_key.mv_size + 1));
    k_pre_key.mv_size =
    snprintf((char*)k_pre_key.mv_data, k_pre_key.mv_size + 1,
             "pre_key_%-10u", pre_key_id);

    if (mdb_txn_begin(omemo->db_env, NULL, 0, &transaction)) {
        weechat_printf(NULL, "%sxmpp: failed to open lmdb transaction",
                       weechat_prefix("error"));
        return -1;
    }

    if (mdb_del(transaction, omemo->dbi.omemo, &k_pre_key,
                &v_pre_key)) {
      weechat_printf(NULL, "%sxmpp: failed to erase lmdb value",
                     weechat_prefix("error"));
      goto cleanup;
    };

    if (mdb_txn_commit(transaction)) {
        weechat_printf(NULL, "%sxmpp: failed to close lmdb transaction",
                       weechat_prefix("error"));
        goto cleanup;
    };

    return 0;
cleanup:
    mdb_txn_abort(transaction);
    return -1;
}

void pks_destroy_func(void *user_data)
{
    auto omemo = reinterpret_cast<t_omemo*>(user_data);
    (void) omemo;
    // Function called to perform cleanup when the data store context is being destroyed
}

int spks_load_signed_pre_key(struct signal_buffer **record, uint32_t signed_pre_key_id, void *user_data)
{
    auto omemo = reinterpret_cast<t_omemo*>(user_data);
    MDB_txn *transaction = NULL;
    MDB_val k_signed_pre_key = {
        .mv_size = strlen("signed_pre_key_") + 10, // strlen(UINT32_MAX)
        .mv_data = NULL,
    };
    MDB_val v_signed_pre_key;

    k_signed_pre_key.mv_data = malloc(sizeof(char) * (
                                           k_signed_pre_key.mv_size + 1));
    k_signed_pre_key.mv_size =
    snprintf((char*)k_signed_pre_key.mv_data, k_signed_pre_key.mv_size + 1,
             "signed_pre_key_%-10u", signed_pre_key_id);

    if (mdb_txn_begin(omemo->db_env, NULL, 0, &transaction)) {
        weechat_printf(NULL, "%sxmpp: failed to open lmdb transaction",
                       weechat_prefix("error"));
        return -1;
    }

    if (!mdb_get(transaction, omemo->dbi.omemo,
                 &k_signed_pre_key, &v_signed_pre_key))
    {
        *record = signal_buffer_create((const uint8_t*)v_signed_pre_key.mv_data, v_signed_pre_key.mv_size);

        if (mdb_txn_commit(transaction)) {
            weechat_printf(NULL, "%sxmpp: failed to close lmdb transaction",
                           weechat_prefix("error"));
            goto cleanup;
        };
    }
    else
    {
        session_signed_pre_key *signed_pre_key = NULL;
        struct signal_buffer *serialized_key = NULL;

        signal_protocol_key_helper_generate_signed_pre_key(&signed_pre_key, omemo->identity, signed_pre_key_id, time(NULL), omemo->context);
        session_signed_pre_key_serialize(&serialized_key, signed_pre_key);

        v_signed_pre_key.mv_data = signal_buffer_data(serialized_key);
        v_signed_pre_key.mv_size = signal_buffer_len(serialized_key);

        if (mdb_put(transaction, omemo->dbi.omemo,
                    &k_signed_pre_key, &v_signed_pre_key, MDB_NOOVERWRITE))
        {
            weechat_printf(NULL, "%sxmpp: failed to read lmdb value",
                           weechat_prefix("error"));
            goto cleanup;
        };

        if (mdb_txn_commit(transaction)) {
            weechat_printf(NULL, "%sxmpp: failed to write lmdb transaction",
                           weechat_prefix("error"));
            goto cleanup;
        };

        *record = serialized_key;
    }

    return 0;
cleanup:
    mdb_txn_abort(transaction);
    return -1;
}

int spks_store_signed_pre_key(uint32_t signed_pre_key_id, uint8_t *record, size_t record_len, void *user_data)
{
    auto omemo = reinterpret_cast<t_omemo*>(user_data);
    MDB_txn *transaction = NULL;
    MDB_val k_signed_pre_key = {
        .mv_size = strlen("signed_pre_key_") + 10, // strlen(UINT32_MAX)
        .mv_data = NULL,
    };
    MDB_val v_signed_pre_key = {.mv_size = record_len, .mv_data = record};

    k_signed_pre_key.mv_data = malloc(sizeof(char) * (
                                           k_signed_pre_key.mv_size + 1));
    k_signed_pre_key.mv_size =
    snprintf((char*)k_signed_pre_key.mv_data, k_signed_pre_key.mv_size + 1,
             "signed_pre_key_%-10u", signed_pre_key_id);

    if (mdb_txn_begin(omemo->db_env, NULL, 0, &transaction)) {
        weechat_printf(NULL, "%sxmpp: failed to open lmdb transaction",
                       weechat_prefix("error"));
        return -1;
    }

    if (mdb_put(transaction, omemo->dbi.omemo, &k_signed_pre_key,
                &v_signed_pre_key, 0)) {
      weechat_printf(NULL, "%sxmpp: failed to write lmdb value",
                     weechat_prefix("error"));
      goto cleanup;
    };

    if (mdb_txn_commit(transaction)) {
      weechat_printf(NULL, "%sxmpp: failed to write lmdb transaction",
                     weechat_prefix("error"));
      goto cleanup;
    };

    return 0;
cleanup:
    mdb_txn_abort(transaction);
    return -1;
}

int spks_contains_signed_pre_key(uint32_t signed_pre_key_id, void *user_data)
{
    auto omemo = reinterpret_cast<t_omemo*>(user_data);
    MDB_txn *transaction = NULL;
    MDB_val k_signed_pre_key = {
        .mv_size = strlen("signed_pre_key_") + 10, // strlen(UINT32_MAX)
        .mv_data = NULL,
    };
    MDB_val v_signed_pre_key;

    k_signed_pre_key.mv_data = malloc(sizeof(char) * (
                                           k_signed_pre_key.mv_size + 1));
    k_signed_pre_key.mv_size =
    snprintf((char*)k_signed_pre_key.mv_data, k_signed_pre_key.mv_size + 1,
             "signed_pre_key_%-10u", signed_pre_key_id);

    if (mdb_txn_begin(omemo->db_env, NULL, MDB_RDONLY, &transaction)) {
        weechat_printf(NULL, "%sxmpp: failed to open lmdb transaction",
                       weechat_prefix("error"));
        return -1;
    }

    if (mdb_get(transaction, omemo->dbi.omemo, &k_signed_pre_key,
                &v_signed_pre_key)) {
        mdb_txn_abort(transaction);
        goto cleanup;
    };

    mdb_txn_abort(transaction);

    return 1;
cleanup:
    mdb_txn_abort(transaction);
    return 0;
}

int spks_remove_signed_pre_key(uint32_t signed_pre_key_id, void *user_data)
{
    auto omemo = reinterpret_cast<t_omemo*>(user_data);
    MDB_txn *transaction = NULL;
    MDB_val k_signed_pre_key = {
        .mv_size = strlen("signed_pre_key_") + 10, // strlen(UINT32_MAX)
        .mv_data = NULL,
    };
    MDB_val v_signed_pre_key;

    k_signed_pre_key.mv_data = malloc(sizeof(char) * (
                                           k_signed_pre_key.mv_size + 1));
    k_signed_pre_key.mv_size =
    snprintf((char*)k_signed_pre_key.mv_data, k_signed_pre_key.mv_size + 1,
             "signed_pre_key_%-10u", signed_pre_key_id);

    if (mdb_txn_begin(omemo->db_env, NULL, 0, &transaction)) {
        weechat_printf(NULL, "%sxmpp: failed to open lmdb transaction",
                       weechat_prefix("error"));
        return -1;
    }

    if (mdb_del(transaction, omemo->dbi.omemo, &k_signed_pre_key,
                &v_signed_pre_key)) {
      weechat_printf(NULL, "%sxmpp: failed to erase lmdb value",
                     weechat_prefix("error"));
      goto cleanup;
    };

    if (mdb_txn_commit(transaction)) {
        weechat_printf(NULL, "%sxmpp: failed to close lmdb transaction",
                       weechat_prefix("error"));
        goto cleanup;
    };

    return 0;
cleanup:
    mdb_txn_abort(transaction);
    return -1;
}

void spks_destroy_func(void *user_data)
{
    auto omemo = reinterpret_cast<t_omemo*>(user_data);
    (void) omemo;
    // Function called to perform cleanup when the data store context is being destroyed
}

int ss_load_session_func(struct signal_buffer **record, signal_buffer **user_record, const struct signal_protocol_address *address, void *user_data)
{
    auto omemo = reinterpret_cast<t_omemo*>(user_data);
    MDB_txn *transaction = NULL;
    MDB_val k_session = {
        .mv_size = strlen("session_") + 10 + //strlen(address->device_id) +
             1 + strlen(address->name),
        .mv_data = NULL,
    };
    MDB_val v_session;
    MDB_val k_user = {
        .mv_size = strlen("user_") + 10 + //strlen(address->device_id) +
             1 + strlen(address->name),
        .mv_data = NULL,
    };
    MDB_val v_user; (void) v_user; (void) user_record;

    k_session.mv_data = malloc(sizeof(char) * (k_session.mv_size + 1));
    k_session.mv_size =
    snprintf((char*)k_session.mv_data, k_session.mv_size + 1,
             "session_%u_%s", address->device_id, address->name);
    k_user.mv_data = malloc(sizeof(char) * (k_user.mv_size + 1));
    k_user.mv_size =
    snprintf((char*)k_user.mv_data, k_user.mv_size + 1,
             "user_%u_%s", address->device_id, address->name);

    if (mdb_txn_begin(omemo->db_env, NULL, MDB_RDONLY, &transaction)) {
        weechat_printf(NULL, "%sxmpp: failed to open lmdb transaction",
                       weechat_prefix("error"));
        return -1;
    }

    if (mdb_get(transaction, omemo->dbi.omemo,
                &k_session, &v_session)/* ||
        mdb_get(transaction, omemo->dbi.omemo,
                 &k_user, &v_user)*/)
    {
        mdb_txn_abort(transaction);
        return 0;
    }

    *record = signal_buffer_create((const uint8_t*)v_session.mv_data, v_session.mv_size);
  //*user_record = signal_buffer_create(v_user.mv_data, v_user.mv_size);

    if (mdb_txn_commit(transaction)) {
        weechat_printf(NULL, "%sxmpp: failed to close lmdb transaction",
                       weechat_prefix("error"));
        goto cleanup;
    };

    return 1;
cleanup:
    mdb_txn_abort(transaction);
    return -1;
}

int ss_get_sub_device_sessions_func(signal_int_list **sessions, const char *name, size_t name_len, void *user_data)
{
    auto omemo = reinterpret_cast<t_omemo*>(user_data);
    MDB_txn *transaction = NULL;
    MDB_val k_device_ids = {
        .mv_size = strlen("device_ids_") + name_len,
        .mv_data = NULL,
    };
    MDB_val v_device_ids;

    k_device_ids.mv_data = malloc(sizeof(char) * (
                                           k_device_ids.mv_size + 1));
    snprintf((char*)k_device_ids.mv_data, k_device_ids.mv_size + 1,
             "device_ids_%s", name);

    if (mdb_txn_begin(omemo->db_env, NULL, MDB_RDONLY, &transaction)) {
        weechat_printf(NULL, "%sxmpp: failed to open lmdb transaction",
                       weechat_prefix("error"));
        return -1;
    }

    if (!mdb_get(transaction, omemo->dbi.omemo,
                 &k_device_ids, &v_device_ids))
    {
        char **argv;
        int argc, i;
        signal_int_list *list = signal_int_list_alloc();

        if (!list) {
            goto cleanup;
        }

        argv = weechat_string_split((const char*)v_device_ids.mv_data, " ", NULL, 0, 0, &argc);
        if (mdb_txn_commit(transaction)) {
            weechat_printf(NULL, "%sxmpp: failed to close lmdb transaction",
                           weechat_prefix("error"));
            goto cleanup;
        };

        for (i = 0; i < argc; i++)
        {
            char* device_id = argv[i];

            signal_int_list_push_back(list, strtol(device_id, NULL, 10));
        }

        weechat_string_free_split(argv);

        *sessions = list;
        return argc;
    }
    else
    {
        mdb_txn_abort(transaction);
        return 0;
    }
cleanup:
    mdb_txn_abort(transaction);
    return -1;
}

int ss_store_session_func(const struct signal_protocol_address *address, uint8_t *record, size_t record_len, uint8_t *user_record, size_t user_record_len, void *user_data)
{
    auto omemo = reinterpret_cast<t_omemo*>(user_data);
    MDB_txn *transaction = NULL;
    MDB_val k_session = {
        .mv_size = strlen("session_") + 10 + //strlen(address->device_id) +
             1 + strlen(address->name),
        .mv_data = NULL,
    };
    MDB_val v_session = {.mv_size = record_len, .mv_data = record};
    MDB_val k_user = {
        .mv_size = strlen("user_") + 10 + //strlen(address->device_id) +
             1 + strlen(address->name),
        .mv_data = NULL,
    };
    MDB_val v_user = {.mv_size = user_record_len, .mv_data = user_record}; (void) v_user;

    k_session.mv_data = malloc(sizeof(char) * (
                                           k_session.mv_size + 1));
    k_session.mv_size =
    snprintf((char*)k_session.mv_data, k_session.mv_size + 1,
             "session_%u_%s", address->device_id, address->name);
    k_user.mv_data = malloc(sizeof(char) * (
                                           k_user.mv_size + 1));
    k_user.mv_size =
    snprintf((char*)k_user.mv_data, k_user.mv_size + 1,
             "user_%u_%s", address->device_id, address->name);

    if (mdb_txn_begin(omemo->db_env, NULL, 0, &transaction)) {
        weechat_printf(NULL, "%sxmpp: failed to open lmdb transaction",
                       weechat_prefix("error"));
        return -1;
    }

    if (mdb_put(transaction, omemo->dbi.omemo,
                &k_session, &v_session, 0)/* ||
        mdb_put(transaction, omemo->dbi.omemo,
                &k_user, &v_user, 0)*/) {
      weechat_printf(NULL, "%sxmpp: failed to write lmdb value",
                     weechat_prefix("error"));
      goto cleanup;
    };

    if (mdb_txn_commit(transaction)) {
      weechat_printf(NULL, "%sxmpp: failed to write lmdb transaction",
                     weechat_prefix("error"));
      goto cleanup;
    };

    return 0;
cleanup:
    mdb_txn_abort(transaction);
    return -1;
}

int ss_contains_session_func(const struct signal_protocol_address *address, void *user_data)
{
    auto omemo = reinterpret_cast<t_omemo*>(user_data);
    MDB_txn *transaction = NULL;
    MDB_val k_session = {
        .mv_size = strlen("session_") + 10 + //strlen(address->device_id) +
             1 + strlen(address->name),
        .mv_data = NULL,
    };
    MDB_val v_session;

    k_session.mv_data = malloc(sizeof(char) * (
                                           k_session.mv_size + 1));
    k_session.mv_size =
        snprintf((char*)k_session.mv_data, k_session.mv_size + 1,
                 "session_%u_%s", address->device_id, address->name);

    if (mdb_txn_begin(omemo->db_env, NULL, MDB_RDONLY, &transaction)) {
        weechat_printf(NULL, "%sxmpp: failed to open lmdb transaction",
                       weechat_prefix("error"));
        return 0;
    }

    if (mdb_get(transaction, omemo->dbi.omemo, &k_session, &v_session)) {
        mdb_txn_abort(transaction);
        return 0;
    };

    mdb_txn_abort(transaction);
    return 1;
}

int ss_delete_session_func(const struct signal_protocol_address *address, void *user_data)
{
    auto omemo = reinterpret_cast<t_omemo*>(user_data);
    MDB_txn *transaction = NULL;
    MDB_val k_session = {
        .mv_size = strlen("session_") + 10 + //strlen(address->device_id) +
             1 + strlen(address->name),
        .mv_data = NULL,
    };
    MDB_val v_session;

    k_session.mv_data = malloc(sizeof(char) * (
                                           k_session.mv_size + 1));
    k_session.mv_size =
        snprintf((char*)k_session.mv_data, k_session.mv_size + 1,
                 "session_%u_%s", address->device_id, address->name);

    if (mdb_txn_begin(omemo->db_env, NULL, 0, &transaction)) {
        weechat_printf(NULL, "%sxmpp: failed to open lmdb transaction",
                       weechat_prefix("error"));
        return -1;
    }

    if (mdb_del(transaction, omemo->dbi.omemo, &k_session, &v_session)) {
        weechat_printf(NULL, "%sxmpp: failed to erase lmdb value",
                       weechat_prefix("error"));
        goto cleanup;
    };

    if (mdb_txn_commit(transaction)) {
        weechat_printf(NULL, "%sxmpp: failed to close lmdb transaction",
                       weechat_prefix("error"));
        goto cleanup;
    };

    return 1;
cleanup:
    mdb_txn_abort(transaction);
    return -1;
}

int ss_delete_all_sessions_func(const char *name, size_t name_len, void *user_data)
{
    signal_int_list *sessions;
    ss_get_sub_device_sessions_func(&sessions, name, name_len, user_data);

    int n = signal_int_list_size(sessions);
    for (int i = 0; i < n; i++)
    {
        struct signal_protocol_address address = {.name = name, .name_len = name_len,
            .device_id = signal_int_list_at(sessions, i)};
        ss_delete_session_func(&address, user_data);
    }
    signal_int_list_free(sessions);
    return -1;
}

void ss_destroy_func(void *user_data)
{
    auto omemo = reinterpret_cast<t_omemo*>(user_data);
    (void) omemo;
    // Function called to perform cleanup when the data store context is being destroyed
}

int sks_store_sender_key(const signal_protocol_sender_key_name *sender_key_name, uint8_t *record, size_t record_len, uint8_t *user_record, size_t user_record_len, void *user_data)
{
    auto omemo = reinterpret_cast<t_omemo*>(user_data);
    char *device_list = NULL;
    MDB_txn *transaction = NULL;
    MDB_val k_sender_key = {
        .mv_size = strlen("sender_key_") + strlen(sender_key_name->group_id) +
             1 + 10 + //strlen(sender_key_name->sender.device_id) +
             1 + strlen(sender_key_name->sender.name),
        .mv_data = NULL,
    };
    MDB_val v_sender_key = {.mv_size = record_len, .mv_data = record};
    MDB_val k_user = {
        .mv_size = strlen("user_") + strlen(sender_key_name->group_id) +
             1 + 10 + //strlen(sender_key_name->sender.device_id) +
             1 + strlen(sender_key_name->sender.name),
        .mv_data = NULL,
    };
    MDB_val v_user = {.mv_size = user_record_len, .mv_data = user_record}; (void) v_user;
    MDB_val k_device_ids = {
        .mv_size = strlen("device_ids_") + strlen(sender_key_name->sender.name),
        .mv_data = NULL,
    };
    MDB_val v_device_ids;

    k_sender_key.mv_data = malloc(sizeof(char) * (
                                           k_sender_key.mv_size + 1));
    k_sender_key.mv_size =
    snprintf((char*)k_sender_key.mv_data, k_sender_key.mv_size + 1,
             "sender_key_%s_%u_%s", sender_key_name->group_id,
             sender_key_name->sender.device_id,
             sender_key_name->sender.name);
    k_user.mv_data = malloc(sizeof(char) * (
                                           k_user.mv_size + 1));
    k_user.mv_size =
    snprintf((char*)k_user.mv_data, k_user.mv_size + 1,
             "user_%s_%u_%s", sender_key_name->group_id,
             sender_key_name->sender.device_id,
             sender_key_name->sender.name);
    k_device_ids.mv_data = malloc(sizeof(char) * (
                                           k_device_ids.mv_size + 1));
    snprintf((char*)k_device_ids.mv_data, k_device_ids.mv_size + 1,
             "device_ids_%s", sender_key_name->sender.name);

    if (mdb_txn_begin(omemo->db_env, NULL, 0, &transaction)) {
        weechat_printf(NULL, "%sxmpp: failed to open lmdb transaction",
                       weechat_prefix("error"));
        return -1;
    }

    if (!mdb_get(transaction, omemo->dbi.omemo,
                 &k_device_ids, &v_device_ids))
    {
        char **argv;
        int argc, i;

        argv = weechat_string_split((const char*)v_device_ids.mv_data, " ", NULL, 0, 0, &argc);
        for (i = 0; i < argc; i++)
        {
            char* device_id = argv[i];
            if (strtol(device_id, NULL, 10) == sender_key_name->sender.device_id) break;
        }

        weechat_string_free_split(argv);

        if (i == argc)
        {
            size_t device_list_len = strlen((const char*)v_device_ids.mv_data) + 1 + 10 + 1;
            device_list = (char*)malloc(sizeof(char) * device_list_len);
            snprintf(device_list, device_list_len, "%s %u",
                     (char*)v_device_ids.mv_data, sender_key_name->sender.device_id);
            v_device_ids.mv_data = device_list;
            v_device_ids.mv_size = strlen(device_list) + 1;
        }
    }
    else
    {
        device_list = (char*)malloc(sizeof(char) * (10 + 1));
        snprintf(device_list, 10 + 1, "%u", sender_key_name->sender.device_id);
        v_device_ids.mv_data = device_list;
        v_device_ids.mv_size = strlen(device_list) + 1;
    }

    if (mdb_put(transaction, omemo->dbi.omemo,
                &k_sender_key, &v_sender_key, 0)/* ||
        mdb_put(transaction, omemo->dbi.omemo,
                &k_user, &v_user, 0)*/ ||
        mdb_put(transaction, omemo->dbi.omemo,
                &k_device_ids, &v_device_ids, 0)) {
      weechat_printf(NULL, "%sxmpp: failed to write lmdb value",
                     weechat_prefix("error"));
      goto cleanup;
    };

    if (mdb_txn_commit(transaction)) {
      weechat_printf(NULL, "%sxmpp: failed to write lmdb transaction",
                     weechat_prefix("error"));
      goto cleanup;
    };
    free(device_list);

    return 0;
cleanup:
    free(device_list);
    mdb_txn_abort(transaction);
    return -1;
}

int sks_load_sender_key(struct signal_buffer **record, signal_buffer **user_record, const signal_protocol_sender_key_name *sender_key_name, void *user_data)
{
    auto omemo = reinterpret_cast<t_omemo*>(user_data);
    MDB_txn *transaction = NULL;
    MDB_val k_sender_key = {
        .mv_size = strlen("sender_key_") + strlen(sender_key_name->group_id) +
             1 + 10 + //strlen(sender_key_name->sender.device_id) +
             1 + strlen(sender_key_name->sender.name),
        .mv_data = NULL,
    };
    MDB_val v_sender_key;
    MDB_val k_user = {
        .mv_size = strlen("user_") + strlen(sender_key_name->group_id) +
             1 + 10 + //strlen(sender_key_name->sender.device_id) +
             1 + strlen(sender_key_name->sender.name),
        .mv_data = NULL,
    };
    MDB_val v_user; (void) v_user; (void) user_record;

    k_sender_key.mv_data = malloc(sizeof(char) * (
                                           k_sender_key.mv_size + 1));
    k_sender_key.mv_size =
    snprintf((char*)k_sender_key.mv_data, k_sender_key.mv_size + 1,
             "sender_key_%s_%u_%s", sender_key_name->group_id,
             sender_key_name->sender.device_id,
             sender_key_name->sender.name);
    k_user.mv_data = malloc(sizeof(char) * (
                                           k_user.mv_size + 1));
    k_user.mv_size =
    snprintf((char*)k_user.mv_data, k_user.mv_size + 1,
             "user_%s_%u_%s", sender_key_name->group_id,
             sender_key_name->sender.device_id,
             sender_key_name->sender.name);

    if (mdb_txn_begin(omemo->db_env, NULL, 0, &transaction)) {
        weechat_printf(NULL, "%sxmpp: failed to open lmdb transaction",
                       weechat_prefix("error"));
        return -1;
    }

    if (mdb_get(transaction, omemo->dbi.omemo,
                &k_sender_key, &v_sender_key)/* &&
        mdb_get(transaction, omemo->dbi.omemo,
                &k_user, &v_user)*/)
    {
        *record = signal_buffer_create((const uint8_t*)v_sender_key.mv_data, v_sender_key.mv_size);
      //*user_record = signal_buffer_create(v_user.mv_data, v_user.mv_size);

        if (mdb_txn_commit(transaction)) {
            weechat_printf(NULL, "%sxmpp: failed to close lmdb transaction",
                           weechat_prefix("error"));
            goto cleanup;
        };
    }
    else
    {
        goto cleanup;
    }

    return 0;
cleanup:
    mdb_txn_abort(transaction);
    return -1;
}

void sks_destroy_func(void *user_data)
{
    auto omemo = reinterpret_cast<t_omemo*>(user_data);
    (void) omemo;
    // Function called to perform cleanup when the data store context is being destroyed
}

int dls_store_devicelist(const char *jid, signal_int_list *devicelist, t_omemo *omemo)
{
    auto transaction = lmdb::txn::begin(omemo->db_env);
    std::string k_devicelist = fmt::format("devicelist_{}", jid);
    std::string v_devicelist;

    for (size_t i = 0; i < signal_int_list_size(devicelist); i++)
    {
        int device = signal_int_list_at(devicelist, i);
        std::string device_id = std::to_string(device);
        if (v_devicelist.size() > 0)
            v_devicelist += ";";
        v_devicelist += device_id;
    }

    omemo->dbi.omemo.put(transaction, k_devicelist, v_devicelist);
  //omemo->dbi.omemo.put(wtxn, "fullname", std::string_view("J. Random Hacker"));
  //{
  //    auto cursor = lmdb::cursor::open(rtxn, dbi);
  //    std::string_view key, value;
  //    if (cursor.get(key, value, MDB_FIRST)) {
  //        do {
  //            std::cout << "key: " << key << "  value: " << value << std::endl;
  //        } while (cursor.get(key, value, MDB_NEXT));
  //    }
  //}

    transaction.commit();

    return 0;
}

int dls_load_devicelist(signal_int_list **devicelist, const char *jid, t_omemo *omemo)
{
    auto transaction = lmdb::txn::begin(omemo->db_env);
    std::string k_devicelist = fmt::format("devicelist_{}", jid);
    std::string_view v_devicelist;
    omemo->dbi.omemo.get(transaction, k_devicelist, v_devicelist);

    auto devices = v_devicelist
        | std::ranges::views::split(';')
        | std::ranges::views::transform([](auto&& str) {
            return std::stoul(std::string(&*str.begin(), std::ranges::distance(str)));
        });

    *devicelist = signal_int_list_alloc();
    for (uint32_t&& device_id : devices)
    {
        signal_int_list_push_back(*devicelist, device_id);
    }

    transaction.commit();

    return 0;
}

int bks_store_bundle(struct signal_protocol_address *address,
        struct t_pre_key **pre_keys, struct t_pre_key **signed_pre_keys,
        const char *signature, const char *identity_key, t_omemo *omemo)
{
    size_t n_pre_keys = -1;
    while (pre_keys[++n_pre_keys] != NULL);
    auto pre_key_buffers = std::vector<std::string>(n_pre_keys);
    for (auto pre_key : std::vector<struct t_pre_key*>(pre_keys, pre_keys + n_pre_keys))
    {
        pre_key_buffers.push_back(fmt::format("{}.{}", pre_key->id, pre_key->public_key));
    }

    n_pre_keys = -1;
    while (signed_pre_keys[++n_pre_keys] != NULL);
    auto signed_pre_key_buffers = std::vector<std::string>(n_pre_keys);
    for (auto signed_pre_key : std::vector<struct t_pre_key*>(signed_pre_keys, signed_pre_keys + n_pre_keys))
    {
        signed_pre_key_buffers.push_back(fmt::format("{}.{}", signed_pre_key->id, signed_pre_key->public_key));

        uint8_t *signing_key_buf;
        size_t signing_key_len = base64_decode(identity_key,
                strlen(identity_key), &signing_key_buf);
        libsignal::public_key signing_key(signing_key_buf,
                signing_key_len, omemo->context);

        uint8_t *signed_key_buf;
        size_t signed_key_len = base64_decode(signed_pre_key->public_key,
                strlen(signed_pre_key->public_key), &signed_key_buf);
        uint8_t *signature_buf;
        size_t signature_len = base64_decode(signature,
                strlen(signature), &signature_buf);
        int valid = curve_verify_signature(signing_key,
                signed_key_buf, signed_key_len,
                signature_buf, signature_len);
        if (valid <= 0) {
            weechat_printf(NULL, "%somemo: failed to validate ED25519 signature for %s:%u",
                           weechat_prefix("error"), address->name, address->device_id);
        }
    }

    std::string k_bundle_pk = fmt::format("bundle_pk_{}_{}", address->name, address->device_id);
    std::string k_bundle_sk = fmt::format("bundle_sk_{}_{}", address->name, address->device_id);
    std::string k_bundle_sg = fmt::format("bundle_sg_{}_{}", address->name, address->device_id);
    std::string k_bundle_ik = fmt::format("bundle_ik_{}_{}", address->name, address->device_id);

    std::string v_bundle_pk = std::accumulate(pre_key_buffers.begin(), pre_key_buffers.end(), std::string(";"));
    std::string v_bundle_sk = std::accumulate(signed_pre_key_buffers.begin(), signed_pre_key_buffers.end(), std::string(";"));
    std::string_view v_bundle_sg = signature;
    std::string_view v_bundle_ik = identity_key;

    auto transaction = lmdb::txn::begin(omemo->db_env);

    omemo->dbi.omemo.put(transaction, k_bundle_pk, v_bundle_pk);
    omemo->dbi.omemo.put(transaction, k_bundle_sk, v_bundle_sk);
    omemo->dbi.omemo.put(transaction, k_bundle_sg, v_bundle_sg);
    omemo->dbi.omemo.put(transaction, k_bundle_ik, v_bundle_ik);

    transaction.commit();

    return 0;
}

std::optional<libsignal::pre_key_bundle> bks_load_bundle(struct signal_protocol_address *address, t_omemo *omemo)
{
    std::string k_bundle_pk = fmt::format("bundle_pk_{}_{}", address->name, address->device_id);
    std::string k_bundle_sk = fmt::format("bundle_sk_{}_{}", address->name, address->device_id);
    std::string k_bundle_sg = fmt::format("bundle_sg_{}_{}", address->name, address->device_id);
    std::string k_bundle_ik = fmt::format("bundle_ik_{}_{}", address->name, address->device_id);

    std::string_view v_bundle_pk;
    std::string_view v_bundle_sk;
    std::string_view v_bundle_sg;
    std::string_view v_bundle_ik;

    auto transaction = lmdb::txn::begin(omemo->db_env);

    uint32_t pre_key_id = 0;
    uint32_t signed_pre_key_id = 0;
    uint8_t *sig_buf; size_t sig_len;
    struct signal_buffer *signature;
    uint8_t *key_buf; size_t key_len;

    omemo->dbi.omemo.get(transaction, k_bundle_pk, v_bundle_pk);
    omemo->dbi.omemo.get(transaction, k_bundle_sk, v_bundle_sk);
    omemo->dbi.omemo.get(transaction, k_bundle_sg, v_bundle_sg);
    omemo->dbi.omemo.get(transaction, k_bundle_ik, v_bundle_ik);

    auto r_bundle_pks = v_bundle_pk
        | std::ranges::views::split(';')
        | std::ranges::views::transform([](auto&& str) {
            return std::string_view(&*str.begin(), std::ranges::distance(str));
        });
    auto bundle_pks = std::vector<std::string>{r_bundle_pks.begin(), r_bundle_pks.begin()};
    if (bundle_pks.size() > 0)
    {
        std::istringstream iss(bundle_pks[rand() % bundle_pks.size()]);
        iss >> pre_key_id;
        char delim;
        iss.get(delim);
        if (delim != ',') throw std::runtime_error("Bundle parse failure");
        std::string key_data;
        iss >> key_data;
        key_len = base64_decode(key_data.data(), key_data.size(), &key_buf);
    }
    else
        return {};
    libsignal::public_key pre_key(key_buf, key_len, omemo->context);

    auto r_bundle_sks = v_bundle_sk
        | std::ranges::views::split(';')
        | std::ranges::views::transform([](auto&& str) {
            return std::string_view(&*str.begin(), std::ranges::distance(str));
        });
    auto bundle_sks = std::vector<std::string>{r_bundle_sks.begin(), r_bundle_sks.begin()};
    if (bundle_sks.size() > 0)
    {
        std::istringstream iss(bundle_sks[rand() % bundle_sks.size()]);
        iss >> signed_pre_key_id;
        char delim;
        iss.get(delim);
        if (delim != ',') throw std::runtime_error("Bundle parse failure");
        std::string key_data;
        iss >> key_data;
        key_len = base64_decode(key_data.data(), key_data.size(), &key_buf);
    }
    else
        return {};
    libsignal::public_key signed_pre_key(key_buf, key_len, omemo->context);

    sig_len = base64_decode(v_bundle_sg.data(), v_bundle_sg.size(), &sig_buf);
    signature = signal_buffer_create(sig_buf, sig_len);
    key_len = base64_decode(v_bundle_ik.data(), v_bundle_ik.size(), &key_buf);
    libsignal::public_key identity_key(key_buf, key_len, omemo->context);

    libsignal::pre_key_bundle bundle((uint32_t)address->device_id, (int)address->device_id,
                                     (uint32_t)pre_key_id, *pre_key, (uint32_t)signed_pre_key_id, *signed_pre_key,
                                     (const uint8_t*)signal_buffer_data(signature), (size_t)signal_buffer_len(signature),
                                     *identity_key);

    transaction.commit();

    return bundle;
}

void log_emit_weechat(int level, const char *message, size_t len, void *user_data)
{
    struct t_gui_buffer *buffer = (struct t_gui_buffer*)user_data;

    static const char *log_level_name[5] = {"error", "warn", "notice", "info", "debug"};

    const char *tags = level < SG_LOG_DEBUG ? "no_log" : NULL;

    (void)buffer;
    weechat_printf_date_tags(
        NULL, 0, tags,
        _("%somemo (%s): %.*s"),
        weechat_prefix("network"),
        log_level_name[level], len, message);
}

xmpp_stanza_t *omemo::get_bundle(xmpp_ctx_t *context, char *from, char *to)
{
    auto omemo = this;

    xmpp_stanza_t **children = (xmpp_stanza_t **)malloc(sizeof(*children) * (100 + 1));
    xmpp_stanza_t *parent = NULL;
    struct signal_buffer *record = NULL;
    ec_key_pair *keypair = NULL;
    ec_public_key *public_key = NULL;

    int num_keys = 0;
    for (uint32_t id = PRE_KEY_START;
            id < INT_MAX && num_keys < 100; id++)
    {
        if (pks_load_pre_key(&record, id, omemo) != 0) continue;
        else num_keys++;
        session_pre_key *pre_key = NULL;
        session_pre_key_deserialize(&pre_key, signal_buffer_data(record),
                signal_buffer_len(record), omemo->context);
        if (pre_key == 0) (*((int*)0))++;
        signal_buffer_free(record);
        keypair = session_pre_key_get_key_pair(pre_key);
        public_key = ec_key_pair_get_public(keypair);
        ec_public_key_serialize(&record, public_key);
        char *data = NULL;
        base64_encode(signal_buffer_data(record),
                signal_buffer_len(record), &data);
        signal_buffer_free(record);
        if (pre_key) session_pre_key_destroy((signal_type_base*)pre_key);
      //SIGNAL_UNREF(pre_key);
        char *id_str = (char *)malloc(sizeof(char) * (10 + 1));
        snprintf(id_str, 10+1, "%u", id);
        children[num_keys-1] = stanza__iq_pubsub_publish_item_bundle_prekeys_preKeyPublic(
                context, NULL, NULL, with_free(id_str));
        stanza__set_text(context, children[num_keys-1], with_free(data));
    }
    children[100] = NULL;

    children[3] = stanza__iq_pubsub_publish_item_bundle_prekeys(
            context, NULL, children);
    children[4] = NULL;

    spks_load_signed_pre_key(&record, 1, omemo);
    session_signed_pre_key *signed_pre_key;
    session_signed_pre_key_deserialize(&signed_pre_key,
            signal_buffer_data(record), signal_buffer_len(record),
            omemo->context);
    signal_buffer_free(record);
    uint32_t signed_pre_key_id = session_signed_pre_key_get_id(signed_pre_key);
    keypair = session_signed_pre_key_get_key_pair(signed_pre_key);
    public_key = ec_key_pair_get_public(keypair);
    ec_public_key_serialize(&record, public_key);
    char *signed_pre_key_public = NULL;
    base64_encode(signal_buffer_data(record), signal_buffer_len(record),
            &signed_pre_key_public);
    signal_buffer_free(record);
    char *signed_pre_key_id_str = (char *)malloc(sizeof(char) * (10 + 1));
    snprintf(signed_pre_key_id_str, 10+1, "%u", signed_pre_key_id);
    children[0] = stanza__iq_pubsub_publish_item_bundle_signedPreKeyPublic(
            context, NULL, NULL, with_free(signed_pre_key_id_str));
    stanza__set_text(context, children[0], with_free(signed_pre_key_public));

    const uint8_t *keysig = session_signed_pre_key_get_signature(signed_pre_key);
    size_t keysig_len = session_signed_pre_key_get_signature_len(signed_pre_key);
    char *signed_pre_key_signature = NULL;
    base64_encode(keysig, keysig_len, &signed_pre_key_signature);
    session_pre_key_destroy((signal_type_base*)signed_pre_key);
    children[1] = stanza__iq_pubsub_publish_item_bundle_signedPreKeySignature(
            context, NULL, NULL);
    stanza__set_text(context, children[1], with_free(signed_pre_key_signature));

    iks_get_identity_key_pair(&record, (signal_buffer**)&signed_pre_key, omemo);
    char *identity_key = NULL;
    base64_encode(signal_buffer_data(record), signal_buffer_len(record),
            &identity_key);
    signal_buffer_free(record);
    children[2] = stanza__iq_pubsub_publish_item_bundle_identityKey(
            context, NULL, NULL);
    stanza__set_text(context, children[2], with_free(identity_key));

    children[0] = stanza__iq_pubsub_publish_item_bundle(
            context, NULL, children, with_noop("eu.siacs.conversations.axolotl"));
    children[1] = NULL;

    children[0] = stanza__iq_pubsub_publish_item(
            context, NULL, children, NULL);

    size_t bundle_node_len = strlen("eu.siacs.conversations.axolotl.bundles:") + 10;
    char *bundle_node = (char *)malloc(sizeof(char) * (bundle_node_len + 1));
    snprintf(bundle_node, bundle_node_len+1,
            "eu.siacs.conversations.axolotl.bundles:%u", omemo->device_id);
    children[0] = stanza__iq_pubsub_publish(
            context, NULL, children, with_free(bundle_node));

    omemo->handle_bundle(from, omemo->device_id, children[0]);

    children[0] = stanza__iq_pubsub(
            context, NULL, children, with_noop("http://jabber.org/protocol/pubsub"));

    parent = stanza__iq(
        context, NULL, children, NULL, (char*)"announce2", from, to, (char*)"set");
    free(children);

    return parent;
}

void omemo::init(struct t_gui_buffer *buffer, const char *account_name)
{
    gcrypt::check_version();

    const auto omemo = this;

    omemo->context.create(buffer);
    omemo->context.set_log_function(&log_emit_weechat);

    try {
        omemo->db_path = std::shared_ptr<char>(
            weechat_string_eval_expression("${weechat_data_dir}/xmpp/omemo.db",
                                           NULL, NULL, NULL),
            &free).get();
        std::filesystem::path path(omemo->db_path.data());
        std::filesystem::create_directories(
                std::filesystem::path(omemo->db_path.data()).parent_path());

        omemo->db_env = lmdb::env::create();
        omemo->db_env.set_max_dbs(50);
        omemo->db_env.set_mapsize((size_t)1048576 * 8000); // 8000MB map for valgrind
        omemo->db_env.open(omemo->db_path.data(), MDB_NOSUBDIR, 0664);

        lmdb::txn parentTransaction{nullptr};
        lmdb::txn transaction = lmdb::txn::begin(omemo->db_env, parentTransaction);

        std::string db_name = fmt::format("omemo_{}", account_name);
        omemo->dbi.omemo = lmdb::dbi::open(transaction, db_name.data(), MDB_CREATE);

        transaction.commit();
    } catch (const lmdb::error& ex) {
        auto format = fmt::format("%sxmpp: lmdb failure - {}", ex.what());
        weechat_printf(NULL, format.data(), weechat_prefix("error"));
        throw;
    }

    struct signal_crypto_provider crypto_provider = {
        .random_func = &cp_random_generator,
        .hmac_sha256_init_func = &cp_hmac_sha256_init,
        .hmac_sha256_update_func = &cp_hmac_sha256_update,
        .hmac_sha256_final_func = &cp_hmac_sha256_final,
        .hmac_sha256_cleanup_func = &cp_hmac_sha256_cleanup,
        .sha512_digest_init_func = &cp_sha512_digest_init,
        .sha512_digest_update_func = &cp_sha512_digest_update,
        .sha512_digest_final_func = &cp_sha512_digest_final,
        .sha512_digest_cleanup_func = &cp_sha512_digest_cleanup,
        .encrypt_func = &cp_encrypt,
        .decrypt_func = &cp_decrypt,
        .user_data = omemo,
    };

    omemo->context.set_crypto_provider(&crypto_provider);
    omemo->context.set_locking_functions(&lock_function, &unlock_function);

    omemo->store_context.create(omemo->context);

    struct signal_protocol_identity_key_store identity_key_store = {
        .get_identity_key_pair = &iks_get_identity_key_pair,
        .get_local_registration_id = &iks_get_local_registration_id,
        .save_identity = &iks_save_identity,
        .is_trusted_identity = &iks_is_trusted_identity,
        .destroy_func = &iks_destroy_func,
        .user_data = omemo,
    };

    omemo->store_context.set_identity_key_store(&identity_key_store);

    struct signal_protocol_pre_key_store pre_key_store = {
        .load_pre_key = &pks_load_pre_key,
        .store_pre_key = &pks_store_pre_key,
        .contains_pre_key = &pks_contains_pre_key,
        .remove_pre_key = &pks_remove_pre_key,
        .destroy_func = &pks_destroy_func,
        .user_data = omemo,
    };

    omemo->store_context.set_pre_key_store(&pre_key_store);

    struct signal_protocol_signed_pre_key_store signed_pre_key_store = {
        .load_signed_pre_key = &spks_load_signed_pre_key,
        .store_signed_pre_key = &spks_store_signed_pre_key,
        .contains_signed_pre_key = &spks_contains_signed_pre_key,
        .remove_signed_pre_key = &spks_remove_signed_pre_key,
        .destroy_func = &spks_destroy_func,
        .user_data = omemo,
    };

    omemo->store_context.set_signed_pre_key_store(&signed_pre_key_store);

    struct signal_protocol_session_store session_store = {
        .load_session_func = &ss_load_session_func,
        .get_sub_device_sessions_func = &ss_get_sub_device_sessions_func,
        .store_session_func = &ss_store_session_func,
        .contains_session_func = &ss_contains_session_func,
        .delete_session_func = &ss_delete_session_func,
        .delete_all_sessions_func = &ss_delete_all_sessions_func,
        .destroy_func = &ss_destroy_func,
        .user_data = omemo,
    };

    omemo->store_context.set_session_store(&session_store);

    struct signal_protocol_sender_key_store sender_key_store = {
        .store_sender_key = &sks_store_sender_key,
        .load_sender_key = &sks_load_sender_key,
        .destroy_func = &sks_destroy_func,
        .user_data = omemo,
    };

    omemo->store_context.set_sender_key_store(&sender_key_store);

    struct signal_buffer *public_data, *private_data;
    iks_get_local_registration_id(omemo, &omemo->device_id);
    if (!iks_get_identity_key_pair(&public_data, &private_data, omemo))
    {
        libsignal::public_key public_key(signal_buffer_data(public_data),
                signal_buffer_len(public_data), omemo->context);
        libsignal::private_key private_key(signal_buffer_data(private_data),
                signal_buffer_len(private_data), omemo->context);
        omemo->identity.create(public_key, private_key);
    }
    weechat_printf(buffer, "%somemo: device = %d",
                   weechat_prefix("info"), omemo->device_id);
}

void omemo::handle_devicelist(const char *jid, xmpp_stanza_t *items)
{
    auto omemo = this;

    xmpp_stanza_t *item = xmpp_stanza_get_child_by_name(items, "item");
    if (!item) return;
    xmpp_stanza_t *list = xmpp_stanza_get_child_by_name(item, "list");
    if (!list) return;
    signal_int_list *devicelist = signal_int_list_alloc();
    for (xmpp_stanza_t *device = xmpp_stanza_get_children(list);
         device; device = xmpp_stanza_get_next(device))
    {
        const char *name = xmpp_stanza_get_name(device);
        if (weechat_strcasecmp(name, "device") != 0)
            continue;

        const char *device_id = xmpp_stanza_get_id(device);
        if (!device_id)
            continue;

        signal_int_list_push_back(devicelist, strtol(device_id, NULL, 10));
    }
    if (dls_store_devicelist(jid, devicelist, omemo))
        weechat_printf(NULL, "%somemo: failed to handle devicelist (%s)",
                       weechat_prefix("error"), jid);
    signal_int_list_free(devicelist);
}

void omemo::handle_bundle(const char *jid, uint32_t device_id,
                          xmpp_stanza_t *items)
{
    auto omemo = this;
    xmpp_stanza_t *item = xmpp_stanza_get_child_by_name(items, "item");
    if (!item) return;
    xmpp_stanza_t *bundle = xmpp_stanza_get_child_by_name(item, "bundle");
    if (!bundle) return;
    xmpp_stanza_t *signedprekey = xmpp_stanza_get_child_by_name(bundle, "signedPreKeyPublic");
    if (!signedprekey) return;
    const char *signed_pre_key = xmpp_stanza_get_text(signedprekey);
    if (!signed_pre_key) return;
    const char *signed_pre_key_id = xmpp_stanza_get_attribute(signedprekey, "signedPreKeyId");
    if (!signed_pre_key_id) return;
    xmpp_stanza_t *signature = xmpp_stanza_get_child_by_name(bundle, "signedPreKeySignature");
    if (!signature) return;
    const char *key_signature = xmpp_stanza_get_text(signature);
    if (!key_signature) return;
    xmpp_stanza_t *identitykey = xmpp_stanza_get_child_by_name(bundle, "identityKey");
    if (!identitykey) return;
    const char *identity_key = xmpp_stanza_get_text(identitykey);
    if (!identity_key) return;
    xmpp_stanza_t *prekeys = xmpp_stanza_get_child_by_name(bundle, "prekeys");
    if (!prekeys) return;

    int num_prekeys = 0;
    for (xmpp_stanza_t *prekey = xmpp_stanza_get_children(prekeys);
         prekey; prekey = xmpp_stanza_get_next(prekey))
        num_prekeys++;
    struct t_pre_key **pre_keys = (struct t_pre_key **)malloc(sizeof(struct t_pre_key) * num_prekeys);

    num_prekeys = -1;
    char **format = weechat_string_dyn_alloc(256);
    weechat_string_dyn_concat(format, "omemo bundle %s/%u:\n%s..SPK %u: %s\n%3$s..SKS: %s\n%3$s..IK: %s", -1);
    for (xmpp_stanza_t *prekey = xmpp_stanza_get_children(prekeys);
         prekey; prekey = xmpp_stanza_get_next(prekey))
    {
        const char *name = xmpp_stanza_get_name(prekey);
        if (weechat_strcasecmp(name, "preKeyPublic") != 0)
            continue;

        const char *pre_key_id = xmpp_stanza_get_attribute(prekey, "preKeyId");
        if (!pre_key_id)
            continue;
        const char *pre_key = xmpp_stanza_get_text(prekey);
        if (!pre_key)
            continue;

        pre_keys[++num_prekeys] = (struct t_pre_key*)malloc(sizeof(struct t_pre_key));
        pre_keys[num_prekeys]->id = pre_key_id;
        pre_keys[num_prekeys]->public_key = pre_key;

        weechat_string_dyn_concat(format, "\n%3$s..PK ", -1);
        weechat_string_dyn_concat(format, pre_key_id, -1);
        weechat_string_dyn_concat(format, ": ", -1);
        weechat_string_dyn_concat(format, pre_key, -1);
    }
    pre_keys[num_prekeys] = NULL;
    weechat_string_dyn_free(format, 1);

    struct t_pre_key signed_key = {
        .id = signed_pre_key_id,
        .public_key = signed_pre_key,
    };
    struct t_pre_key *signed_pre_keys[2] = { &signed_key, NULL };

    struct signal_protocol_address address = {
        .name = jid, .name_len = strlen(jid), .device_id = (int32_t)device_id };
    {
        uint8_t *key_buf;
        size_t key_len = base64_decode(identity_key,
                strlen(identity_key), &key_buf);
        libsignal::public_key key(key_buf, key_len, omemo->context);
        signal_protocol_identity_save_identity(omemo->store_context,
                &address, key);
    }
    bks_store_bundle(&address, pre_keys, signed_pre_keys,
        key_signature, identity_key, omemo);
}

char *omemo::decode(weechat::account *account, const char *jid,
                    xmpp_stanza_t *encrypted)
{
    auto omemo = &account->omemo;
    uint8_t *key_data = NULL, *tag_data = NULL, *iv_data = NULL, *payload_data = NULL;
    size_t key_len = 0, tag_len = 0, iv_len = 0, payload_len = 0;

    xmpp_stanza_t *header = xmpp_stanza_get_child_by_name(encrypted, "header");
    if (!header) return NULL;
    xmpp_stanza_t *iv = xmpp_stanza_get_child_by_name(header, "iv");
    if (!iv) return NULL;
    const char *iv__text = xmpp_stanza_get_text(iv);
    if (!iv__text) return NULL;
    iv_len = base64_decode(iv__text, strlen(iv__text), &iv_data);
    if (iv_len != AES_IV_SIZE) return NULL;

    char **format = weechat_string_dyn_alloc(256);
    weechat_string_dyn_concat(format, "omemo msg %s:\n%s..IV: %s", -1);
    for (xmpp_stanza_t *key = xmpp_stanza_get_children(header);
         key; key = xmpp_stanza_get_next(key))
    {
        const char *name = xmpp_stanza_get_name(key);
        if (weechat_strcasecmp(name, "key") != 0)
            continue;

        const char *key_prekey = xmpp_stanza_get_attribute(key, "prekey");
        const char *key_id = xmpp_stanza_get_attribute(key, "rid");
        if (!key_id)
            continue;
        if (strtol(key_id, NULL, 10) != omemo->device_id)
            continue;
        xmpp_stanza_t *key_text = xmpp_stanza_get_children(key);
        const char *data = key_text ? xmpp_stanza_get_text(key_text) : NULL;
        if (!data)
            continue;
        key_len = base64_decode(data, strlen(data), &key_data);

        weechat_string_dyn_concat(format, "\n%2$s..K ", -1);
        if (key_prekey)
            weechat_string_dyn_concat(format, "*", -1);
        weechat_string_dyn_concat(format, key_id, -1);
        weechat_string_dyn_concat(format, ": ", -1);
        weechat_string_dyn_concat(format, data, -1);

        const char *source_id = xmpp_stanza_get_attribute(header, "sid");
        if (!source_id)
            continue;

        int ret;
        struct signal_protocol_address address = {
            .name = jid, .name_len = strlen(jid), .device_id = (int32_t)strtol(source_id, NULL, 10) };
        signal_message *key_message = NULL;
        struct signal_buffer *aes_key = NULL;
        if (key_prekey) {
            pre_key_signal_message *pre_key_message = NULL;
            if ((ret = pre_key_signal_message_deserialize(&pre_key_message,
                key_data, key_len, omemo->context))) return NULL;
            ec_public_key *identity_key = pre_key_signal_message_get_identity_key(pre_key_message);
          //uint32_t device_id = pre_key_signal_message_get_registration_id(pre_key_message);
          //uint32_t pre_key_id = pre_key_signal_message_get_pre_key_id(pre_key_message);
          //uint32_t signed_key_id = pre_key_signal_message_get_signed_pre_key_id(pre_key_message);
          //ec_public_key *base_key = pre_key_signal_message_get_base_key(pre_key_message);
            key_message = pre_key_signal_message_get_signal_message(pre_key_message);
            struct signal_buffer *identity_buf;
            if ((ret = ec_public_key_serialize(&identity_buf, identity_key))) return NULL;
            if ((ret = iks_save_identity(&address, signal_buffer_data(identity_buf),
                                    signal_buffer_len(identity_buf), omemo))) return NULL;

            struct session_cipher *cipher;
            if ((ret = session_cipher_create(&cipher, omemo->store_context,
                                        &address, omemo->context))) return NULL;
            if ((ret = session_cipher_decrypt_pre_key_signal_message(cipher,
                                                                pre_key_message,
                                                                0, &aes_key))) return NULL;
        } else {
            if ((ret = signal_message_deserialize(&key_message,
                key_data, key_len, omemo->context))) return NULL;
            struct session_cipher *cipher;
            if ((ret = session_cipher_create(&cipher, omemo->store_context,
                                        &address, omemo->context))) return NULL;
            if ((ret = session_cipher_decrypt_signal_message(cipher, key_message,
                                                        0, &aes_key))) return NULL;
        }

        if (!aes_key) return NULL;
        key_data = signal_buffer_data(aes_key);
        key_len = signal_buffer_len(aes_key);
        if (key_len >= AES_KEY_SIZE) {
            tag_len = key_len - AES_KEY_SIZE;
            tag_data = key_data + AES_KEY_SIZE;
            key_len = AES_KEY_SIZE;
        }
        else
        {
            return NULL;
        }

        char *aes_key64 = NULL;
        if (base64_encode(key_data, key_len, &aes_key64) && aes_key64)
        {
            weechat_string_dyn_concat(format, "\n%2$s..AES: ", -1);
            weechat_string_dyn_concat(format, aes_key64, -1);
            weechat_string_dyn_concat(format, " (", -1);
            snprintf(aes_key64, strlen(aes_key64), "%lu", key_len);
            weechat_string_dyn_concat(format, aes_key64, -1);
            weechat_string_dyn_concat(format, ")", -1);
        }
        if (tag_len && base64_encode(tag_data, tag_len, &aes_key64) && aes_key64)
        {
            weechat_string_dyn_concat(format, "\n%2$s..TAG: ", -1);
            weechat_string_dyn_concat(format, aes_key64, -1);
            weechat_string_dyn_concat(format, " (", -1);
            snprintf(aes_key64, strlen(aes_key64), "%lu", tag_len);
            weechat_string_dyn_concat(format, aes_key64, -1);
            weechat_string_dyn_concat(format, ")", -1);
        }
    }

    xmpp_stanza_t *payload = xmpp_stanza_get_child_by_name(encrypted, "payload");
    if (payload && (payload = xmpp_stanza_get_children(payload)))
    {
        const char *payload_text = xmpp_stanza_get_text(payload);
        if (!payload_text) return NULL;
        payload_len = base64_decode(payload_text, strlen(payload_text), &payload_data);
        weechat_string_dyn_concat(format, "\n%2$s..PL: ", -1);
        weechat_string_dyn_concat(format, payload_text, -1);
    }
  //weechat_printf(NULL, *format, jid, weechat_color("red"), iv__text);
    weechat_string_dyn_free(format, 1);

    if (!(payload_data && iv_data && key_data)) return NULL;
    if (iv_len != AES_IV_SIZE || key_len != AES_KEY_SIZE) return NULL;
    char *plaintext = NULL; size_t plaintext_len = 0;
    if (aes_decrypt(payload_data, payload_len, key_data, iv_data, tag_data, tag_len,
                    (uint8_t**)&plaintext, &plaintext_len) || plaintext)
    {
        plaintext[plaintext_len] = '\0';
        return plaintext;
    }
    return NULL;
}

xmpp_stanza_t *omemo::encode(weechat::account *account, const char *jid,
                             const char *unencrypted)
{
    auto omemo = &account->omemo;
    uint8_t *key = NULL; uint8_t *iv = NULL;
    uint8_t *tag = NULL; size_t tag_len = 0;
    uint8_t *ciphertext = NULL; size_t ciphertext_len = 0;
    aes_encrypt((uint8_t*)unencrypted, strlen(unencrypted),
                &key, &iv, &tag, &tag_len,
                &ciphertext, &ciphertext_len);

    uint8_t *key_and_tag = (uint8_t *)malloc(sizeof(uint8_t) * (AES_KEY_SIZE+tag_len));
    memcpy(key_and_tag, key, AES_KEY_SIZE);
    free(key);
    memcpy(key_and_tag+AES_KEY_SIZE, tag, tag_len);
    free(tag);
    char *key64 = NULL;
    base64_encode(key_and_tag, AES_KEY_SIZE+tag_len, &key64);
    char *iv64 = NULL;
    base64_encode(iv, AES_IV_SIZE, &iv64);
    free(iv);
    char *ciphertext64 = NULL;
    base64_encode(ciphertext, ciphertext_len, &ciphertext64);
    free(ciphertext);

    xmpp_stanza_t *encrypted = xmpp_stanza_new(account->context);
    xmpp_stanza_set_name(encrypted, "encrypted");
    xmpp_stanza_set_ns(encrypted, "eu.siacs.conversations.axolotl");
    xmpp_stanza_t *header = xmpp_stanza_new(account->context);
    xmpp_stanza_set_name(header, "header");
    char device_id_str[10+1] = {0};
    snprintf(device_id_str, 10+1, "%u", omemo->device_id);
    xmpp_stanza_set_attribute(header, "sid", device_id_str);

    int ret, keycount = 0;
    signal_int_list *devicelist;
    const char *target = jid;
    for (int self = 0; self <= 1; self++)
    {
        if ((ret = dls_load_devicelist(&devicelist, target, omemo))) return NULL;
        for (size_t i = 0; i < signal_int_list_size(devicelist); i++)
        {
            uint32_t device_id = signal_int_list_at(devicelist, i);
            if (!device_id) continue;
            struct signal_protocol_address address = {
                .name = target, .name_len = strlen(target), .device_id = (int32_t)device_id};

            xmpp_stanza_t *header__key = xmpp_stanza_new(account->context);
            xmpp_stanza_set_name(header__key, "key");
            char device_id_str[10+1] = {0};
            snprintf(device_id_str, 10+1, "%u", device_id);
            xmpp_stanza_set_attribute(header__key, "rid", device_id_str);

            if (((ret = ss_contains_session_func(&address, omemo))) <= 0)
            {
                try {
                    auto bundle = bks_load_bundle(&address, omemo);
                    if (!bundle) throw std::runtime_error(fmt::format("No bundle for {}", target));

                    libsignal::session_builder builder(omemo->store_context, &address, omemo->context);
                    builder.process_pre_key_bundle(*bundle);
                }
                catch (const std::exception& ex) {
                    continue;
                }
            }

            struct session_cipher *cipher;
            if ((ret = session_cipher_create(&cipher, omemo->store_context, &address, omemo->context))) continue;

            struct ciphertext_message *signal_message;
            if ((ret = session_cipher_encrypt(cipher, key_and_tag, AES_KEY_SIZE+tag_len, &signal_message))) continue;
            struct signal_buffer *record = ciphertext_message_get_serialized(signal_message);
            int prekey = ciphertext_message_get_type(signal_message) == CIPHERTEXT_PREKEY_TYPE
                ? 1 : 0;

            char *payload = NULL;
            base64_encode(signal_buffer_data(record), signal_buffer_len(record),
                    &payload);

            if (prekey)
                xmpp_stanza_set_attribute(header__key, "prekey",
                        prekey ? "true" : "false");
            stanza__set_text(account->context, header__key, with_free(payload));
            xmpp_stanza_add_child(header, header__key);
            xmpp_stanza_release(header__key);

            if (target == jid)
                keycount++;

            signal_buffer_free(record);
          //SIGNAL_UNREF(signal_message);
            session_cipher_free(cipher);
        }
        signal_int_list_free(devicelist);
        target = account->jid().data();
    }
    free(key_and_tag);

    if (keycount == 0) {
        weechat_printf(NULL, "omemo: no keys for %s", jid);
        return NULL;
    }

    xmpp_stanza_t *header__iv = xmpp_stanza_new(account->context);
    xmpp_stanza_set_name(header__iv, "iv");
    stanza__set_text(account->context, header__iv, with_noop(iv64));
    xmpp_stanza_add_child(header, header__iv);
    xmpp_stanza_release(header__iv);
    xmpp_stanza_add_child(encrypted, header);
    xmpp_stanza_release(header);
    xmpp_stanza_t *encrypted__payload = xmpp_stanza_new(account->context);
    xmpp_stanza_set_name(encrypted__payload, "payload");
    stanza__set_text(account->context, encrypted__payload, with_noop(ciphertext64));
    xmpp_stanza_add_child(encrypted, encrypted__payload);
    xmpp_stanza_release(encrypted__payload);

    free(iv64);
    free(key64);
    free(ciphertext64);
    return encrypted;
}

omemo::~omemo()
{
}