blind_index 1.0.1 → 1.0.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 93b1688db3ff1410b5e56fcf3fae01d76cfcb073df3647abb6582fffbb05d148
-  data.tar.gz: 3b0b3dff637c2eab2b7b4d5811b413166cd23503dec1d6081fb5bfee7533ce99
+  metadata.gz: 2f39918c983140363af00fe1afeda800a7476a5727fd2c676c713b92222c1f35
+  data.tar.gz: b83995b7b33eddacb2988e7fdb8816a1b2fc644161114b5e191f3d9bb2de2bd2
 SHA512:
-  metadata.gz: fcae62db34e27e82885d6fb200b6d3549bc14d9c7c1ddedf9d59aa32a7f9691010aa641379318fbb20706823b258328013ba7eb3cc2b6e63242ae4addcdc7a0e
-  data.tar.gz: 45a07059d4d78d2a9f814db37d9a80fe37603e78603207b65f80a812bce6e18c818ebb0c3fc7e6b8439203eec4398a81a9db7b32bfaa7061865244841050ad2c
+  metadata.gz: b2d03f17acbac80b5ecf8ac1f97321f3c68b0c689db1e50d95cc81cb3769086a5d8da6f8f0386325555c8eb715d46555281e00af38804cd240cadbefa45e86a4
+  data.tar.gz: 59092061d3b415d399f1a20232d680591ccc832af79387945d23d9309062bf10a4b8105062ea277af2fa06b454cd75f9ad3d49a44dabac1a990e2856bc700849

data/CHANGELOG.md

@@ -1,8 +1,13 @@
-## 1.0.1
+## 1.0.2 (2019-12-26)
+
+- Fixed `OpenSSL::KDF` error on some platforms
+- Fixed deprecation warnings in Ruby 2.7
+
+## 1.0.1 (2019-08-16)
 
 - Added support for Mongoid
 
-## 1.0.0
+## 1.0.0 (2019-07-08)
 
 - Added support for master key
 - Added support for Argon2id
@@ -15,56 +20,56 @@ Breaking changes
 - Removed `encrypted_` prefix from columns
 - Changed default encoding to Base64 strict
 
-## 0.3.5
+## 0.3.5 (2019-05-28)
 
 - Added support for hex keys
 - Added `generate_key` method
 - Fixed querying with array values
 
-## 0.3.4
+## 0.3.4 (2018-12-16)
 
 - Added `size` option
 - Added sanity checks for Argon2 cost parameters
 - Fixed ActiveRecord callback issues introduced in 0.3.3
 
-## 0.3.3
+## 0.3.3 (2018-11-12)
 
 - Added support for string keys in finders
 
-## 0.3.2
+## 0.3.2 (2018-06-18)
 
 - Added support for dynamic finders
 - Added support for inherited models
 
-## 0.3.1
+## 0.3.1 (2018-06-04)
 
 - Added scrypt and Argon2 algorithms
 - Added `cost` option
 
-## 0.3.0
+## 0.3.0 (2018-06-03)
 
 - Enforce secure key generation
 - Added `encode` option
 - Added `default_options` method
 
-## 0.2.1
+## 0.2.1 (2018-05-26)
 
 - Added class method to compute blind index
 - Fixed issue with cached statements
 
-## 0.2.0
+## 0.2.0 (2018-05-11)
 
 - Added support for ActiveRecord 4.2
 - Improved validation support when multiple blind indexes
 - Fixed `nil` handling
 
-## 0.1.1
+## 0.1.1 (2018-04-09)
 
 - Added support for ActiveRecord 5.2
 - Added `callback` option
 - Added support for `key` proc
 - Fixed error inheritance
 
-## 0.1.0
+## 0.1.0 (2017-12-17)
 
 - First release

data/README.md

@@ -16,7 +16,7 @@ We use [this approach](https://paragonie.com/blog/2017/05/building-searchable-en
 
 An important consideration in searchable encryption is leakage, which is information an attacker can gain. Blind indexing leaks that rows have the same value. If you use this for a field like last name, an attacker can use frequency analysis to predict the values. In an active attack where an attacker can control the input values, they can learn which other values in the database match.
 
-Here’s a [great article](https://blog.cryptographyengineering.com/2019/02/11/attack-of-the-week-searchable-encryption-and-the-ever-expanding-leakage-function/) on leakage in searchable encryption. Blind indexing has the same leakage as deterministic encryption.
+Here’s a [great article](https://blog.cryptographyengineering.com/2019/02/11/attack-of-the-week-searchable-encryption-and-the-ever-expanding-leakage-function/) on leakage in searchable encryption. Blind indexing has the same leakage as [deterministic encryption](#alternatives).
 
 ## Installation
 
@@ -294,7 +294,10 @@ end
 
 ## Alternatives
 
-One alternative to blind indexing is to use a deterministic encryption scheme, like [AES-SIV](https://github.com/miscreant/miscreant). In this approach, the encrypted data will be the same for matches.
+One alternative to blind indexing is to use a deterministic encryption scheme, like [AES-SIV](https://github.com/miscreant/miscreant). In this approach, the encrypted data will be the same for matches. We recommend blind indexing over deterministic encryption because:
+
+1. You can keep encryption consistent for all fields (both searchable and non-searchable)
+2. Blind indexing supports expressions
 
 ## Upgrading
 
@@ -335,7 +338,7 @@ And add to your model
 
 ```ruby
 class User < ApplicationRecord
-  blind_index :email, key: ENV["USER_EMAIL_BLIND_INDEX_KEY"], legacy: true, rotate: true
+  blind_index :email, key: ENV["USER_EMAIL_BLIND_INDEX_KEY"], legacy: true, rotate: {}
 end
 ```
 
@@ -416,5 +419,5 @@ To get started with development and testing:
 git clone https://github.com/ankane/blind_index.git
 cd blind_index
 bundle install
-rake test
+bundle exec rake test
 ```

data/lib/blind_index/extensions.rb

@@ -10,9 +10,9 @@ module BlindIndex
               value = new_hash.delete(key)
               new_hash[bi[:bidx_attribute]] =
                 if value.is_a?(Array)
-                  value.map { |v| BlindIndex.generate_bidx(v, bi) }
+                  value.map { |v| BlindIndex.generate_bidx(v, **bi) }
                 else
-                  BlindIndex.generate_bidx(value, bi)
+                  BlindIndex.generate_bidx(value, **bi)
                 end
             end
           end
@@ -64,7 +64,7 @@ module BlindIndex
       if ActiveRecord::VERSION::STRING >= "5.2"
         def build_relation(klass, attribute, value)
           if klass.respond_to?(:blind_indexes) && (bi = klass.blind_indexes[attribute])
-            value = BlindIndex.generate_bidx(value, bi)
+            value = BlindIndex.generate_bidx(value, **bi)
             attribute = bi[:bidx_attribute]
           end
           super(klass, attribute, value)
@@ -72,7 +72,7 @@ module BlindIndex
       else
         def build_relation(klass, table, attribute, value)
           if klass.respond_to?(:blind_indexes) && (bi = klass.blind_indexes[attribute])
-            value = BlindIndex.generate_bidx(value, bi)
+            value = BlindIndex.generate_bidx(value, **bi)
             attribute = bi[:bidx_attribute]
           end
           super(klass, table, attribute, value)

data/lib/blind_index/key_generator.rb

@@ -22,7 +22,7 @@ module BlindIndex
     end
 
     def hkdf(ikm, salt:, info:, length:, hash:)
-      if OpenSSL::KDF.respond_to?(:hkdf)
+      if defined?(OpenSSL::KDF.hkdf)
         return OpenSSL::KDF.hkdf(ikm, salt: salt, info: info, length: length, hash: hash)
       end
 

data/lib/blind_index/model.rb

@@ -61,7 +61,7 @@ module BlindIndex
           )
 
           define_singleton_method class_method_name do |value|
-            BlindIndex.generate_bidx(value, blind_indexes[name])
+            BlindIndex.generate_bidx(value, **blind_indexes[name])
           end
 
           define_singleton_method method_name do |value|
@@ -90,14 +90,14 @@ module BlindIndex
         end
       end
     end
-  end
 
-  module InstanceMethods
-    def read_attribute_for_validation(key)
-      if (bi = self.class.blind_indexes[key])
-        send(bi[:attribute])
-      else
-        super
+    module InstanceMethods
+      def read_attribute_for_validation(key)
+        if (bi = self.class.blind_indexes[key])
+          send(bi[:attribute])
+        else
+          super
+        end
       end
     end
   end

data/lib/blind_index/version.rb

@@ -1,3 +1,3 @@
 module BlindIndex
-  VERSION = "1.0.1"
+  VERSION = "1.0.2"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: blind_index
 version: !ruby/object:Gem::Version
-  version: 1.0.1
+  version: 1.0.2
 platform: ruby
 authors:
 - Andrew Kane
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-08-16 00:00:00.000000000 Z
+date: 2019-12-27 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -198,7 +198,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.4
+rubygems_version: 3.1.2
 signing_key: 
 specification_version: 4
 summary: Securely search encrypted database fields