clearance_crypto 0.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- data/History.txt +4 -0
- data/README.rdoc +64 -0
- data/lib/clearance_crypto/aes256.rb +42 -0
- data/lib/clearance_crypto/bcrypt.rb +26 -0
- data/lib/clearance_crypto/sha512.rb +28 -0
- data/lib/clearance_crypto.rb +6 -0
- data/test/test_clearance_crypto.rb +11 -0
- data/test/test_helper.rb +3 -0
- metadata +81 -0
data/History.txt
ADDED
data/README.rdoc
ADDED
@@ -0,0 +1,64 @@
|
|
1
|
+
= ClearanceCrypto
|
2
|
+
|
3
|
+
http://github.com/pixels-and-bits/clearance_crypto/tree/master
|
4
|
+
|
5
|
+
== DESCRIPTION:
|
6
|
+
|
7
|
+
Provides the ability to choose the encryption method used in the Clearance gem
|
8
|
+
like Authlogic
|
9
|
+
|
10
|
+
== SYNOPSIS:
|
11
|
+
|
12
|
+
If you want to use a different hashing method than SHA1 with Clearance.
|
13
|
+
|
14
|
+
You really shouldn't use AES for anything other than hiding info that you need
|
15
|
+
to be able to reverse the hash. By default it uses the generated salt. You can
|
16
|
+
override this behavior by setting the key before you create the user.
|
17
|
+
|
18
|
+
class User < ActiveRecord::Base
|
19
|
+
include Clearance::App::Models::User
|
20
|
+
include ClearanceCrypto::AES256
|
21
|
+
end
|
22
|
+
|
23
|
+
class User < ActiveRecord::Base
|
24
|
+
include Clearance::App::Models::User
|
25
|
+
include ClearanceCrypto::BCrypt
|
26
|
+
end
|
27
|
+
|
28
|
+
class User < ActiveRecord::Base
|
29
|
+
include Clearance::App::Models::User
|
30
|
+
include ClearanceCrypto::SHA512
|
31
|
+
end
|
32
|
+
|
33
|
+
== REQUIREMENTS:
|
34
|
+
|
35
|
+
* Clearance
|
36
|
+
|
37
|
+
== INSTALL:
|
38
|
+
|
39
|
+
sudo gem install clearance_crypto
|
40
|
+
|
41
|
+
== LICENSE:
|
42
|
+
|
43
|
+
(The MIT License)
|
44
|
+
|
45
|
+
Copyright (c) 2009 FIXME full name
|
46
|
+
|
47
|
+
Permission is hereby granted, free of charge, to any person obtaining
|
48
|
+
a copy of this software and associated documentation files (the
|
49
|
+
'Software'), to deal in the Software without restriction, including
|
50
|
+
without limitation the rights to use, copy, modify, merge, publish,
|
51
|
+
distribute, sublicense, and/or sell copies of the Software, and to
|
52
|
+
permit persons to whom the Software is furnished to do so, subject to
|
53
|
+
the following conditions:
|
54
|
+
|
55
|
+
The above copyright notice and this permission notice shall be
|
56
|
+
included in all copies or substantial portions of the Software.
|
57
|
+
|
58
|
+
THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND,
|
59
|
+
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
|
60
|
+
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
|
61
|
+
IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
|
62
|
+
CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
|
63
|
+
TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
|
64
|
+
SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
|
@@ -0,0 +1,42 @@
|
|
1
|
+
require "digest/sha2"
|
2
|
+
|
3
|
+
module ClearanceCrypto
|
4
|
+
module AES256
|
5
|
+
def self.included(model)
|
6
|
+
model.send(:include, InstanceMethods)
|
7
|
+
end
|
8
|
+
|
9
|
+
module InstanceMethods
|
10
|
+
attr_writer :key
|
11
|
+
|
12
|
+
def encrypt(string)
|
13
|
+
aes.encrypt
|
14
|
+
aes.key = @key
|
15
|
+
[aes.update(string) + aes.final].pack("m").chomp
|
16
|
+
end
|
17
|
+
|
18
|
+
def authenticated?(string)
|
19
|
+
aes.decrypt
|
20
|
+
aes.key = @key
|
21
|
+
(aes.update(encrypted_password.unpack("m").first) + aes.final) == string
|
22
|
+
rescue OpenSSL::CipherError
|
23
|
+
false
|
24
|
+
end
|
25
|
+
|
26
|
+
def aes_plain
|
27
|
+
aes.decrypt
|
28
|
+
aes.key = @key
|
29
|
+
(aes.update(encrypted_password.unpack("m").first) + aes.final)
|
30
|
+
rescue OpenSSL::CipherError
|
31
|
+
''
|
32
|
+
end
|
33
|
+
|
34
|
+
private
|
35
|
+
|
36
|
+
def aes
|
37
|
+
@key ||= salt
|
38
|
+
@aes ||= OpenSSL::Cipher::Cipher.new("AES-256-ECB")
|
39
|
+
end
|
40
|
+
end
|
41
|
+
end
|
42
|
+
end
|
@@ -0,0 +1,26 @@
|
|
1
|
+
require "bcrypt"
|
2
|
+
|
3
|
+
module ClearanceCrypto
|
4
|
+
module BCrypt
|
5
|
+
def self.included(model)
|
6
|
+
model.send(:include, InstanceMethods)
|
7
|
+
end
|
8
|
+
|
9
|
+
module InstanceMethods
|
10
|
+
def cost
|
11
|
+
@cost ||= 10
|
12
|
+
end
|
13
|
+
attr_writer :cost
|
14
|
+
|
15
|
+
# Creates a BCrypt hash for the password passed.
|
16
|
+
def encrypt(string)
|
17
|
+
::BCrypt::Password.create(string)
|
18
|
+
end
|
19
|
+
|
20
|
+
# Does the hash match the tokens? Uses the same tokens that were used to encrypt.
|
21
|
+
def authenticated?(string)
|
22
|
+
::BCrypt::Password.new(self.encrypted_password) == string rescue false
|
23
|
+
end
|
24
|
+
end
|
25
|
+
end
|
26
|
+
end
|
@@ -0,0 +1,28 @@
|
|
1
|
+
require "digest/sha2"
|
2
|
+
|
3
|
+
module ClearanceCrypto
|
4
|
+
module SHA512
|
5
|
+
def self.included(model)
|
6
|
+
model.send(:include, InstanceMethods)
|
7
|
+
end
|
8
|
+
|
9
|
+
module InstanceMethods
|
10
|
+
# The number of times to loop through the encryption.
|
11
|
+
def stretches
|
12
|
+
@stretches ||= 20
|
13
|
+
end
|
14
|
+
attr_writer :stretches
|
15
|
+
|
16
|
+
# Turns your raw password into a Sha512 hash.
|
17
|
+
def encrypt(string)
|
18
|
+
digest = "--#{salt}--#{string}--"
|
19
|
+
stretches.times { digest = Digest::SHA512.hexdigest(digest) }
|
20
|
+
digest
|
21
|
+
end
|
22
|
+
|
23
|
+
def authenticated?(string)
|
24
|
+
encrypt(string) == encrypted_password
|
25
|
+
end
|
26
|
+
end
|
27
|
+
end
|
28
|
+
end
|
data/test/test_helper.rb
ADDED
metadata
ADDED
@@ -0,0 +1,81 @@
|
|
1
|
+
--- !ruby/object:Gem::Specification
|
2
|
+
name: clearance_crypto
|
3
|
+
version: !ruby/object:Gem::Version
|
4
|
+
version: 0.1.0
|
5
|
+
platform: ruby
|
6
|
+
authors:
|
7
|
+
- Michael Moen
|
8
|
+
autorequire:
|
9
|
+
bindir: bin
|
10
|
+
cert_chain: []
|
11
|
+
|
12
|
+
date: 2009-02-13 00:00:00 -06:00
|
13
|
+
default_executable:
|
14
|
+
dependencies:
|
15
|
+
- !ruby/object:Gem::Dependency
|
16
|
+
name: newgem
|
17
|
+
type: :development
|
18
|
+
version_requirement:
|
19
|
+
version_requirements: !ruby/object:Gem::Requirement
|
20
|
+
requirements:
|
21
|
+
- - ">="
|
22
|
+
- !ruby/object:Gem::Version
|
23
|
+
version: 1.2.3
|
24
|
+
version:
|
25
|
+
- !ruby/object:Gem::Dependency
|
26
|
+
name: hoe
|
27
|
+
type: :development
|
28
|
+
version_requirement:
|
29
|
+
version_requirements: !ruby/object:Gem::Requirement
|
30
|
+
requirements:
|
31
|
+
- - ">="
|
32
|
+
- !ruby/object:Gem::Version
|
33
|
+
version: 1.8.0
|
34
|
+
version:
|
35
|
+
description: Provides the ability to choose the encryption method used in the Clearance gem like Authlogic
|
36
|
+
email:
|
37
|
+
- michael@underpantsgnome.com
|
38
|
+
executables: []
|
39
|
+
|
40
|
+
extensions: []
|
41
|
+
|
42
|
+
extra_rdoc_files:
|
43
|
+
- History.txt
|
44
|
+
- README.rdoc
|
45
|
+
files:
|
46
|
+
- lib/clearance_crypto.rb
|
47
|
+
- lib/clearance_crypto/aes256.rb
|
48
|
+
- lib/clearance_crypto/sha512.rb
|
49
|
+
- lib/clearance_crypto/bcrypt.rb
|
50
|
+
- History.txt
|
51
|
+
- README.rdoc
|
52
|
+
has_rdoc: true
|
53
|
+
homepage: http://github.com/pixels-and-bits/clearance_crypto/tree/master
|
54
|
+
post_install_message:
|
55
|
+
rdoc_options:
|
56
|
+
- --main
|
57
|
+
- README.rdoc
|
58
|
+
require_paths:
|
59
|
+
- lib
|
60
|
+
required_ruby_version: !ruby/object:Gem::Requirement
|
61
|
+
requirements:
|
62
|
+
- - ">="
|
63
|
+
- !ruby/object:Gem::Version
|
64
|
+
version: "0"
|
65
|
+
version:
|
66
|
+
required_rubygems_version: !ruby/object:Gem::Requirement
|
67
|
+
requirements:
|
68
|
+
- - ">="
|
69
|
+
- !ruby/object:Gem::Version
|
70
|
+
version: "0"
|
71
|
+
version:
|
72
|
+
requirements: []
|
73
|
+
|
74
|
+
rubyforge_project: underpantsgnome
|
75
|
+
rubygems_version: 1.3.1
|
76
|
+
signing_key:
|
77
|
+
specification_version: 2
|
78
|
+
summary: Provides the ability to choose the encryption method used in the Clearance gem like Authlogic
|
79
|
+
test_files:
|
80
|
+
- test/test_clearance_crypto.rb
|
81
|
+
- test/test_helper.rb
|