aws-sdk-resources 2.11.561 → 2.11.562

data/lib/aws-sdk-resources/services/s3/encryptionV2/utils.rb

@@ -0,0 +1,103 @@
+# frozen_string_literal: true
+
+require 'openssl'
+
+module Aws
+  module S3
+    module EncryptionV2
+      # @api private
+      module Utils
+
+        class << self
+
+          def encrypt_aes_gcm(key, data, auth_data)
+            cipher = aes_encryption_cipher(:GCM, key)
+            cipher.iv = (iv = cipher.random_iv)
+            cipher.auth_data = auth_data
+
+            iv + cipher.update(data) + cipher.final + cipher.auth_tag
+          end
+
+          def encrypt_rsa(key, data, auth_data)
+            # Plaintext must be KeyLengthInBytes (1 Byte) + DataKey + AuthData
+            buf = [data.bytesize] + data.unpack('C*') + auth_data.unpack('C*')
+            key.public_encrypt(buf.pack('C*'), OpenSSL::PKey::RSA::PKCS1_OAEP_PADDING)
+          end
+
+          def decrypt(key, data)
+            begin
+              case key
+              when OpenSSL::PKey::RSA # asymmetric decryption
+                key.private_decrypt(data)
+              when String # symmetric Decryption
+                cipher = aes_cipher(:decrypt, :ECB, key, nil)
+                cipher.update(data) + cipher.final
+              end
+            rescue OpenSSL::Cipher::CipherError
+              msg = 'decryption failed, possible incorrect key'
+              raise Errors::DecryptionError, msg
+            end
+          end
+
+          def decrypt_aes_gcm(key, data, auth_data)
+            # data is iv (12B) + key + tag (16B)
+            buf = data.unpack('C*')
+            iv = buf[0,12].pack('C*') # iv will always be 12 bytes
+            tag = buf[-16, 16].pack('C*') # tag is 16 bytes
+            enc_key = buf[12, buf.size - (12+16)].pack('C*')
+            cipher = aes_cipher(:decrypt, :GCM, key, iv)
+            cipher.auth_tag = tag
+            cipher.auth_data = auth_data
+            cipher.update(enc_key) + cipher.final
+          end
+
+          # returns the decrypted data + auth_data
+          def decrypt_rsa(key, enc_data)
+            # Plaintext must be KeyLengthInBytes (1 Byte) + DataKey + AuthData
+            buf = key.private_decrypt(enc_data, OpenSSL::PKey::RSA::PKCS1_OAEP_PADDING).unpack('C*')
+            key_length = buf[0]
+            data = buf[1, key_length].pack('C*')
+            auth_data = buf[key_length+1, buf.length - key_length].pack('C*')
+            [data, auth_data]
+          end
+
+          # @param [String] block_mode "CBC" or "ECB"
+          # @param [OpenSSL::PKey::RSA, String, nil] key
+          # @param [String, nil] iv The initialization vector
+          def aes_encryption_cipher(block_mode, key = nil, iv = nil)
+            aes_cipher(:encrypt, block_mode, key, iv)
+          end
+
+          # @param [String] block_mode "CBC" or "ECB"
+          # @param [OpenSSL::PKey::RSA, String, nil] key
+          # @param [String, nil] iv The initialization vector
+          def aes_decryption_cipher(block_mode, key = nil, iv = nil)
+            aes_cipher(:decrypt, block_mode, key, iv)
+          end
+
+          # @param [String] mode "encrypt" or "decrypt"
+          # @param [String] block_mode "CBC" or "ECB"
+          # @param [OpenSSL::PKey::RSA, String, nil] key
+          # @param [String, nil] iv The initialization vector
+          def aes_cipher(mode, block_mode, key, iv)
+            cipher = key ?
+              OpenSSL::Cipher.new("aes-#{cipher_size(key)}-#{block_mode.downcase}") :
+              OpenSSL::Cipher.new("aes-256-#{block_mode.downcase}")
+            cipher.send(mode) # encrypt or decrypt
+            cipher.key = key if key
+            cipher.iv = iv if iv
+            cipher
+          end
+
+          # @param [String] key
+          # @return [Integer]
+          # @raise ArgumentError
+          def cipher_size(key)
+            key.bytesize * 8
+          end
+
+        end
+      end
+    end
+  end
+end

data/lib/aws-sdk-resources/services/s3/encryption_v2.rb

@@ -0,0 +1,24 @@
+module Aws
+  module S3
+    module EncryptionV2
+
+      AES_GCM_TAG_LEN_BYTES = 16
+      EC_USER_AGENT = 'S3CryptoV2'
+
+      autoload :Client, 'aws-sdk-resources/services/s3/encryptionV2/client'
+      autoload :DecryptHandler, 'aws-sdk-resources/services/s3/encryptionV2/decrypt_handler'
+      autoload :DefaultCipherProvider, 'aws-sdk-resources/services/s3/encryptionV2/default_cipher_provider'
+      autoload :DefaultKeyProvider, 'aws-sdk-resources/services/s3/encryptionV2/default_key_provider'
+      autoload :EncryptHandler, 'aws-sdk-resources/services/s3/encryptionV2/encrypt_handler'
+      autoload :Errors, 'aws-sdk-resources/services/s3/encryptionV2/errors'
+      autoload :IOEncrypter, 'aws-sdk-resources/services/s3/encryptionV2/io_encrypter'
+      autoload :IOAuthDecrypter, 'aws-sdk-resources/services/s3/encryptionV2/io_auth_decrypter'
+      autoload :IODecrypter, 'aws-sdk-resources/services/s3/encryptionV2/io_decrypter'
+      autoload :KeyProvider, 'aws-sdk-resources/services/s3/encryptionV2/key_provider'
+      autoload :KmsCipherProvider, 'aws-sdk-resources/services/s3/encryptionV2/kms_cipher_provider'
+      autoload :Materials, 'aws-sdk-resources/services/s3/encryptionV2/materials'
+      autoload :Utils, 'aws-sdk-resources/services/s3/encryptionV2/utils'
+
+    end
+  end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-resources
 version: !ruby/object:Gem::Version
-  version: 2.11.561
+  version: 2.11.562
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-08-06 00:00:00.000000000 Z
+date: 2020-08-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.11.561
+        version: 2.11.562
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.11.561
+        version: 2.11.562
 description: AWS SDK For Ruby V2 has been marked as deprecated. Please upgrade to
   AWS SDK For Ruby V3.Provides resource oriented interfaces and other higher-level
   abstractions for many AWS services. This gem is part of the official AWS SDK for
@@ -74,6 +74,20 @@ files:
 - lib/aws-sdk-resources/services/s3/encryption/kms_cipher_provider.rb
 - lib/aws-sdk-resources/services/s3/encryption/materials.rb
 - lib/aws-sdk-resources/services/s3/encryption/utils.rb
+- lib/aws-sdk-resources/services/s3/encryptionV2/client.rb
+- lib/aws-sdk-resources/services/s3/encryptionV2/decrypt_handler.rb
+- lib/aws-sdk-resources/services/s3/encryptionV2/default_cipher_provider.rb
+- lib/aws-sdk-resources/services/s3/encryptionV2/default_key_provider.rb
+- lib/aws-sdk-resources/services/s3/encryptionV2/encrypt_handler.rb
+- lib/aws-sdk-resources/services/s3/encryptionV2/errors.rb
+- lib/aws-sdk-resources/services/s3/encryptionV2/io_auth_decrypter.rb
+- lib/aws-sdk-resources/services/s3/encryptionV2/io_decrypter.rb
+- lib/aws-sdk-resources/services/s3/encryptionV2/io_encrypter.rb
+- lib/aws-sdk-resources/services/s3/encryptionV2/key_provider.rb
+- lib/aws-sdk-resources/services/s3/encryptionV2/kms_cipher_provider.rb
+- lib/aws-sdk-resources/services/s3/encryptionV2/materials.rb
+- lib/aws-sdk-resources/services/s3/encryptionV2/utils.rb
+- lib/aws-sdk-resources/services/s3/encryption_v2.rb
 - lib/aws-sdk-resources/services/s3/file_downloader.rb
 - lib/aws-sdk-resources/services/s3/file_part.rb
 - lib/aws-sdk-resources/services/s3/file_uploader.rb