package com.google.android.gms.internal.ads;

import java.security.GeneralSecurityException;
import java.security.KeyFactory;
import java.security.NoSuchProviderException;
import java.security.Provider;
import java.security.PublicKey;
import java.security.Signature;
import java.security.spec.X509EncodedKeySpec;

/* JADX INFO: loaded from: classes2.dex */
public final class h82 implements fw1 {

    /* JADX INFO: renamed from: e, reason: collision with root package name */
    public static final byte[] f12057e = {48, 42, 48, 5, 6, 3, 43, 101, 112, 3, 33, 0};

    /* JADX INFO: renamed from: a, reason: collision with root package name */
    public final PublicKey f12058a;

    /* JADX INFO: renamed from: b, reason: collision with root package name */
    public final byte[] f12059b;

    /* JADX INFO: renamed from: c, reason: collision with root package name */
    public final byte[] f12060c;

    /* JADX INFO: renamed from: d, reason: collision with root package name */
    public final Provider f12061d;

    public h82(byte[] bArr, byte[] bArr2, byte[] bArr3, Provider provider) throws GeneralSecurityException {
        if (!ih1.z(1)) {
            throw new GeneralSecurityException("Can not use Ed25519 in FIPS-mode.");
        }
        if (bArr.length != 32) {
            throw new IllegalArgumentException(String.format("Given public key's length is not %s.", 32));
        }
        this.f12058a = KeyFactory.getInstance("Ed25519", provider).generatePublic(new X509EncodedKeySpec(ih1.G(f12057e, bArr)));
        this.f12059b = bArr2;
        this.f12060c = bArr3;
        this.f12061d = provider;
    }

    public static h82 a(c72 c72Var) throws GeneralSecurityException {
        Provider providerE = vj1.e();
        if (providerE == null) {
            throw new NoSuchProviderException("Ed25519VerifyJce requires the Conscrypt provider.");
        }
        if (ih1.z(1)) {
            return new h82(c72Var.f9798c.b(), c72Var.f9799d.b(), c72Var.f9797b.f18672a.equals(x62.f18329d) ? new byte[]{0} : new byte[0], providerE);
        }
        throw new GeneralSecurityException("Can not use Ed25519 in FIPS-mode.");
    }

    @Override // com.google.android.gms.internal.ads.fw1
    public final void zza(byte[] bArr, byte[] bArr2) throws GeneralSecurityException {
        byte[] bArr3 = this.f12059b;
        int length = bArr3.length;
        if (bArr.length != length + 64) {
            throw new GeneralSecurityException(String.format("Invalid signature length: %s", 64));
        }
        if (!q12.c(bArr3, bArr)) {
            throw new GeneralSecurityException("Invalid signature (output prefix mismatch)");
        }
        Signature signature = Signature.getInstance("Ed25519", this.f12061d);
        signature.initVerify(this.f12058a);
        signature.update(bArr2);
        signature.update(this.f12060c);
        try {
            if (signature.verify(bArr, length, 64)) {
                return;
            }
        } catch (RuntimeException unused) {
        }
        throw new GeneralSecurityException("Signature check failed.");
    }
}