crypt_keeper 0.16.0.pre → 1.1.1

data/bin/crypt_keeper

@@ -1,99 +0,0 @@
-#!/usr/bin/env ruby
-$:.unshift(File.join(File.dirname(__FILE__), "/../lib"))
-require 'crypt_keeper'
-require 'yaml'
-require 'active_support/core_ext'
-require 'active_record/log_subscriber'
-require 'optparse'
-
-if !File.exists?('config/database.yml')
-  puts "Please run this from the root of the rails project"
-  exit 1
-else
-  config = YAML::load_file('./config/database.yml')
-end
-
-options = {}
-OptionParser.new do |opts|
-  opts.banner = "Usage: crypt_keeper [options]"
-
-  opts.on("--old-key [key]", "The old encryption key") do |v|
-    options[:old_key] = v
-  end
-
-  opts.on("--new-key [key]", "The new encryption key") do |v|
-    options[:new_key] = v
-  end
-
-  opts.on("--salt [salt]", "The salt for the new encryption") do |v|
-    options[:salt] = v
-  end
-
-  opts.on("--table-name [table_name]", "The name of the table") do |v|
-    options[:table_name] = v
-  end
-
-  opts.on("--columns [field1,field2]", "A comma separated list of column names which are encrypted") do |v|
-    options[:columns] = v
-  end
-
-  opts.on("--old-encryptor [old encryptor]", "The old encryptor") do |v|
-    options[:old_encryptor] = v
-  end
-
-  opts.on("--query-log [file]", "ActiveRecord query log") do |v|
-    options[:query_log] = v
-  end
-end.parse!
-
-def get_required_arg(arg, options)
-  options.fetch(arg) { raise ArgumentError, "--#{arg.to_s.sub('_', '-')} is a required option"}
-end
-
-old_key         = get_required_arg(:old_key, options)
-new_key         = get_required_arg(:new_key, options)
-salt            = get_required_arg(:salt, options)
-table_name      = get_required_arg(:table_name, options)
-columns         = get_required_arg(:columns, options).split(',')
-encryptor       = get_required_arg(:old_encryptor, options)
-env             = ENV.fetch('RAILS_ENV', 'development')
-
-if options[:query_log].present?
-  ActiveRecord::Base.logger = Logger.new(options[:query_log])
-end
-
-if encryptor == "aes"
-  old_encryptor = CryptKeeper::Provider::Aes.new(key: old_key)
-  new_encryptor = CryptKeeper::Provider::AesNew.new(key: new_key, salt: salt)
-elsif encryptor == "mysql_aes"
-  old_encryptor = CryptKeeper::Provider::MysqlAes.new(key: old_key)
-  new_encryptor = CryptKeeper::Provider::MysqlAesNew.new(key: new_key, salt: salt)
-else
-  puts "#{encryptor} is not a known encryptor that can be migrated"
-  exit 1
-end
-
-class MigrateData < ActiveRecord::Base
-  def self.reencrypt_all(encrypted_fields, old_encryptor, new_encryptor)
-    ActiveRecord::Base.transaction do
-      find_each do |record|
-        new_hash = {}
-        encrypted_fields.each do |f|
-          plaintext   = old_encryptor.decrypt(record[f])
-          ciphertext  = new_encryptor.encrypt(plaintext)
-          new_hash[f] = ciphertext
-        end
-
-        record.update_attributes! new_hash
-        yield record if block_given?
-      end
-    end
-  end
-end
-
-ActiveRecord::Base.establish_connection(config.fetch(env))
-MigrateData.table_name = table_name
-
-MigrateData.reencrypt_all(columns, old_encryptor, new_encryptor) do |r|
-  puts "#{r.id} is now re-encrypted"
-end

data/gemfiles/activerecord_3_1.gemfile

@@ -1,8 +0,0 @@
-# This file was generated by Appraisal
-
-source "https://rubygems.org"
-
-gem "activerecord", "~> 3.1.10"
-gem "activesupport", "~> 3.1.10"
-
-gemspec :path=>"../"

data/gemfiles/activerecord_3_1.gemfile.lock

@@ -1,109 +0,0 @@
-PATH
-  remote: /Users/justin/work/jmazzi/crypt_keeper
-  specs:
-    crypt_keeper (0.16.0.pre)
-      activerecord (>= 3.1, < 4.2)
-      activesupport (>= 3.1, < 4.2)
-      aes (~> 0.5.0)
-      armor (~> 0.0.2)
-
-GEM
-  remote: https://rubygems.org/
-  specs:
-    activemodel (3.1.12)
-      activesupport (= 3.1.12)
-      builder (~> 3.0.0)
-      i18n (~> 0.6)
-    activerecord (3.1.12)
-      activemodel (= 3.1.12)
-      activesupport (= 3.1.12)
-      arel (~> 2.2.3)
-      tzinfo (~> 0.3.29)
-    activesupport (3.1.12)
-      multi_json (~> 1.0)
-    aes (0.5.0)
-    appraisal (0.5.2)
-      bundler
-      rake
-    arel (2.2.3)
-    armor (0.0.2)
-    builder (3.0.4)
-    coderay (1.0.9)
-    coveralls (0.7.0)
-      multi_json (~> 1.3)
-      rest-client
-      simplecov (>= 0.7)
-      term-ansicolor
-      thor
-    diff-lcs (1.2.4)
-    ffi (1.9.0)
-    formatador (0.2.4)
-    guard (1.8.3)
-      formatador (>= 0.2.4)
-      listen (~> 1.3)
-      lumberjack (>= 1.0.2)
-      pry (>= 0.9.10)
-      thor (>= 0.14.6)
-    guard-rspec (2.5.4)
-      guard (>= 1.1)
-      rspec (~> 2.11)
-    i18n (0.6.5)
-    listen (1.3.1)
-      rb-fsevent (>= 0.9.3)
-      rb-inotify (>= 0.9)
-      rb-kqueue (>= 0.2)
-    lumberjack (1.0.4)
-    method_source (0.8.2)
-    mime-types (1.25)
-    multi_json (1.8.2)
-    mysql2 (0.3.13)
-    pg (0.15.1)
-    pry (0.9.12.2)
-      coderay (~> 1.0.5)
-      method_source (~> 0.8)
-      slop (~> 3.4)
-    rake (10.0.4)
-    rb-fsevent (0.9.3)
-    rb-inotify (0.9.2)
-      ffi (>= 0.5.0)
-    rb-kqueue (0.2.0)
-      ffi (>= 0.5.0)
-    rest-client (1.6.7)
-      mime-types (>= 1.16)
-    rspec (2.13.0)
-      rspec-core (~> 2.13.0)
-      rspec-expectations (~> 2.13.0)
-      rspec-mocks (~> 2.13.0)
-    rspec-core (2.13.1)
-    rspec-expectations (2.13.0)
-      diff-lcs (>= 1.1.3, < 2.0)
-    rspec-mocks (2.13.1)
-    simplecov (0.7.1)
-      multi_json (~> 1.0)
-      simplecov-html (~> 0.7.1)
-    simplecov-html (0.7.1)
-    slop (3.4.6)
-    sqlite3 (1.3.8)
-    term-ansicolor (1.2.2)
-      tins (~> 0.8)
-    thor (0.18.1)
-    tins (0.12.0)
-    tzinfo (0.3.38)
-
-PLATFORMS
-  ruby
-
-DEPENDENCIES
-  activerecord (~> 3.1.10)
-  activesupport (~> 3.1.10)
-  appraisal (~> 0.5.2)
-  coveralls
-  crypt_keeper!
-  guard (~> 1.8.0)
-  guard-rspec (~> 2.5.4)
-  mysql2 (~> 0.3.11)
-  pg (~> 0.15.1)
-  rake (~> 10.0.3)
-  rb-fsevent (~> 0.9.1)
-  rspec (~> 2.13.0)
-  sqlite3

data/gemfiles/activerecord_3_2.gemfile

@@ -1,8 +0,0 @@
-# This file was generated by Appraisal
-
-source "https://rubygems.org"
-
-gem "activerecord", "~> 3.2.14"
-gem "activesupport", "~> 3.2.14"
-
-gemspec :path=>"../"

data/gemfiles/activerecord_3_2.gemfile.lock

@@ -1,109 +0,0 @@
-PATH
-  remote: /Users/justin/work/jmazzi/crypt_keeper
-  specs:
-    crypt_keeper (0.16.0.pre)
-      activerecord (>= 3.1, < 4.2)
-      activesupport (>= 3.1, < 4.2)
-      aes (~> 0.5.0)
-      armor (~> 0.0.2)
-
-GEM
-  remote: https://rubygems.org/
-  specs:
-    activemodel (3.2.14)
-      activesupport (= 3.2.14)
-      builder (~> 3.0.0)
-    activerecord (3.2.14)
-      activemodel (= 3.2.14)
-      activesupport (= 3.2.14)
-      arel (~> 3.0.2)
-      tzinfo (~> 0.3.29)
-    activesupport (3.2.14)
-      i18n (~> 0.6, >= 0.6.4)
-      multi_json (~> 1.0)
-    aes (0.5.0)
-    appraisal (0.5.2)
-      bundler
-      rake
-    arel (3.0.2)
-    armor (0.0.2)
-    builder (3.0.4)
-    coderay (1.0.9)
-    coveralls (0.7.0)
-      multi_json (~> 1.3)
-      rest-client
-      simplecov (>= 0.7)
-      term-ansicolor
-      thor
-    diff-lcs (1.2.4)
-    ffi (1.9.0)
-    formatador (0.2.4)
-    guard (1.8.3)
-      formatador (>= 0.2.4)
-      listen (~> 1.3)
-      lumberjack (>= 1.0.2)
-      pry (>= 0.9.10)
-      thor (>= 0.14.6)
-    guard-rspec (2.5.4)
-      guard (>= 1.1)
-      rspec (~> 2.11)
-    i18n (0.6.5)
-    listen (1.3.1)
-      rb-fsevent (>= 0.9.3)
-      rb-inotify (>= 0.9)
-      rb-kqueue (>= 0.2)
-    lumberjack (1.0.4)
-    method_source (0.8.2)
-    mime-types (1.25)
-    multi_json (1.8.2)
-    mysql2 (0.3.13)
-    pg (0.15.1)
-    pry (0.9.12.2)
-      coderay (~> 1.0.5)
-      method_source (~> 0.8)
-      slop (~> 3.4)
-    rake (10.0.4)
-    rb-fsevent (0.9.3)
-    rb-inotify (0.9.2)
-      ffi (>= 0.5.0)
-    rb-kqueue (0.2.0)
-      ffi (>= 0.5.0)
-    rest-client (1.6.7)
-      mime-types (>= 1.16)
-    rspec (2.13.0)
-      rspec-core (~> 2.13.0)
-      rspec-expectations (~> 2.13.0)
-      rspec-mocks (~> 2.13.0)
-    rspec-core (2.13.1)
-    rspec-expectations (2.13.0)
-      diff-lcs (>= 1.1.3, < 2.0)
-    rspec-mocks (2.13.1)
-    simplecov (0.7.1)
-      multi_json (~> 1.0)
-      simplecov-html (~> 0.7.1)
-    simplecov-html (0.7.1)
-    slop (3.4.6)
-    sqlite3 (1.3.8)
-    term-ansicolor (1.2.2)
-      tins (~> 0.8)
-    thor (0.18.1)
-    tins (0.12.0)
-    tzinfo (0.3.38)
-
-PLATFORMS
-  ruby
-
-DEPENDENCIES
-  activerecord (~> 3.2.14)
-  activesupport (~> 3.2.14)
-  appraisal (~> 0.5.2)
-  coveralls
-  crypt_keeper!
-  guard (~> 1.8.0)
-  guard-rspec (~> 2.5.4)
-  mysql2 (~> 0.3.11)
-  pg (~> 0.15.1)
-  rake (~> 10.0.3)
-  rb-fsevent (~> 0.9.1)
-  rspec (~> 2.13.0)
-  sqlite3

data/gemfiles/activerecord_4_0.gemfile

@@ -1,8 +0,0 @@
-# This file was generated by Appraisal
-
-source "https://rubygems.org"
-
-gem "activerecord", "~> 4.0.0"
-gem "activesupport", "~> 4.0.0"
-
-gemspec :path=>"../"

data/gemfiles/activerecord_4_0.gemfile.lock

@@ -1,117 +0,0 @@
-PATH
-  remote: /Users/justin/work/jmazzi/crypt_keeper
-  specs:
-    crypt_keeper (0.16.0.pre)
-      activerecord (>= 3.1, < 4.2)
-      activesupport (>= 3.1, < 4.2)
-      aes (~> 0.5.0)
-      armor (~> 0.0.2)
-
-GEM
-  remote: https://rubygems.org/
-  specs:
-    activemodel (4.0.0)
-      activesupport (= 4.0.0)
-      builder (~> 3.1.0)
-    activerecord (4.0.0)
-      activemodel (= 4.0.0)
-      activerecord-deprecated_finders (~> 1.0.2)
-      activesupport (= 4.0.0)
-      arel (~> 4.0.0)
-    activerecord-deprecated_finders (1.0.3)
-    activesupport (4.0.0)
-      i18n (~> 0.6, >= 0.6.4)
-      minitest (~> 4.2)
-      multi_json (~> 1.3)
-      thread_safe (~> 0.1)
-      tzinfo (~> 0.3.37)
-    aes (0.5.0)
-    appraisal (0.5.2)
-      bundler
-      rake
-    arel (4.0.0)
-    armor (0.0.2)
-    atomic (1.1.14)
-    builder (3.1.4)
-    coderay (1.0.9)
-    coveralls (0.7.0)
-      multi_json (~> 1.3)
-      rest-client
-      simplecov (>= 0.7)
-      term-ansicolor
-      thor
-    diff-lcs (1.2.4)
-    ffi (1.9.0)
-    formatador (0.2.4)
-    guard (1.8.3)
-      formatador (>= 0.2.4)
-      listen (~> 1.3)
-      lumberjack (>= 1.0.2)
-      pry (>= 0.9.10)
-      thor (>= 0.14.6)
-    guard-rspec (2.5.4)
-      guard (>= 1.1)
-      rspec (~> 2.11)
-    i18n (0.6.5)
-    listen (1.3.1)
-      rb-fsevent (>= 0.9.3)
-      rb-inotify (>= 0.9)
-      rb-kqueue (>= 0.2)
-    lumberjack (1.0.4)
-    method_source (0.8.2)
-    mime-types (1.25)
-    minitest (4.7.5)
-    multi_json (1.8.2)
-    mysql2 (0.3.13)
-    pg (0.15.1)
-    pry (0.9.12.2)
-      coderay (~> 1.0.5)
-      method_source (~> 0.8)
-      slop (~> 3.4)
-    rake (10.0.4)
-    rb-fsevent (0.9.3)
-    rb-inotify (0.9.2)
-      ffi (>= 0.5.0)
-    rb-kqueue (0.2.0)
-      ffi (>= 0.5.0)
-    rest-client (1.6.7)
-      mime-types (>= 1.16)
-    rspec (2.13.0)
-      rspec-core (~> 2.13.0)
-      rspec-expectations (~> 2.13.0)
-      rspec-mocks (~> 2.13.0)
-    rspec-core (2.13.1)
-    rspec-expectations (2.13.0)
-      diff-lcs (>= 1.1.3, < 2.0)
-    rspec-mocks (2.13.1)
-    simplecov (0.7.1)
-      multi_json (~> 1.0)
-      simplecov-html (~> 0.7.1)
-    simplecov-html (0.7.1)
-    slop (3.4.6)
-    sqlite3 (1.3.8)
-    term-ansicolor (1.2.2)
-      tins (~> 0.8)
-    thor (0.18.1)
-    thread_safe (0.1.3)
-      atomic
-    tins (0.12.0)
-    tzinfo (0.3.38)
-
-PLATFORMS
-  ruby
-
-DEPENDENCIES
-  activerecord (~> 4.0.0)
-  activesupport (~> 4.0.0)
-  appraisal (~> 0.5.2)
-  coveralls
-  crypt_keeper!
-  guard (~> 1.8.0)
-  guard-rspec (~> 2.5.4)
-  mysql2 (~> 0.3.11)
-  pg (~> 0.15.1)
-  rake (~> 10.0.3)
-  rb-fsevent (~> 0.9.1)
-  rspec (~> 2.13.0)
-  sqlite3

data/gemfiles/activerecord_4_1.gemfile

@@ -1,8 +0,0 @@
-# This file was generated by Appraisal
-
-source "https://rubygems.org"
-
-gem "activerecord", "~> 4.1.0"
-gem "activesupport", "~> 4.1.0"
-
-gemspec :path=>"../"

data/gemfiles/activerecord_4_1.gemfile.lock

@@ -1,117 +0,0 @@
-PATH
-  remote: /Users/justin/work/jmazzi/crypt_keeper
-  specs:
-    crypt_keeper (0.16.0.pre)
-      activerecord (>= 3.1, < 4.2)
-      activesupport (>= 3.1, < 4.2)
-      aes (~> 0.5.0)
-      armor (~> 0.0.2)
-
-GEM
-  remote: https://rubygems.org/
-  specs:
-    activemodel (4.1.0)
-      activesupport (= 4.1.0)
-      builder (~> 3.1)
-    activerecord (4.1.0)
-      activemodel (= 4.1.0)
-      activesupport (= 4.1.0)
-      arel (~> 5.0.0)
-    activesupport (4.1.0)
-      i18n (~> 0.6, >= 0.6.9)
-      json (~> 1.7, >= 1.7.7)
-      minitest (~> 5.1)
-      thread_safe (~> 0.1)
-      tzinfo (~> 1.1)
-    aes (0.5.0)
-    appraisal (0.5.2)
-      bundler
-      rake
-    arel (5.0.1.20140414130214)
-    armor (0.0.3)
-    builder (3.2.2)
-    coderay (1.1.0)
-    coveralls (0.7.0)
-      multi_json (~> 1.3)
-      rest-client
-      simplecov (>= 0.7)
-      term-ansicolor
-      thor
-    diff-lcs (1.2.5)
-    docile (1.1.3)
-    ffi (1.9.3)
-    formatador (0.2.4)
-    guard (1.8.3)
-      formatador (>= 0.2.4)
-      listen (~> 1.3)
-      lumberjack (>= 1.0.2)
-      pry (>= 0.9.10)
-      thor (>= 0.14.6)
-    guard-rspec (2.5.4)
-      guard (>= 1.1)
-      rspec (~> 2.11)
-    i18n (0.6.9)
-    json (1.8.1)
-    listen (1.3.1)
-      rb-fsevent (>= 0.9.3)
-      rb-inotify (>= 0.9)
-      rb-kqueue (>= 0.2)
-    lumberjack (1.0.5)
-    method_source (0.8.2)
-    mime-types (2.2)
-    minitest (5.3.3)
-    multi_json (1.9.2)
-    mysql2 (0.3.15)
-    pg (0.15.1)
-    pry (0.9.12.6)
-      coderay (~> 1.0)
-      method_source (~> 0.8)
-      slop (~> 3.4)
-    rake (10.0.4)
-    rb-fsevent (0.9.4)
-    rb-inotify (0.9.3)
-      ffi (>= 0.5.0)
-    rb-kqueue (0.2.2)
-      ffi (>= 0.5.0)
-    rest-client (1.6.7)
-      mime-types (>= 1.16)
-    rspec (2.13.0)
-      rspec-core (~> 2.13.0)
-      rspec-expectations (~> 2.13.0)
-      rspec-mocks (~> 2.13.0)
-    rspec-core (2.13.1)
-    rspec-expectations (2.13.0)
-      diff-lcs (>= 1.1.3, < 2.0)
-    rspec-mocks (2.13.1)
-    simplecov (0.8.2)
-      docile (~> 1.1.0)
-      multi_json
-      simplecov-html (~> 0.8.0)
-    simplecov-html (0.8.0)
-    slop (3.5.0)
-    sqlite3 (1.3.9)
-    term-ansicolor (1.3.0)
-      tins (~> 1.0)
-    thor (0.19.1)
-    thread_safe (0.3.3)
-    tins (1.1.0)
-    tzinfo (1.1.0)
-      thread_safe (~> 0.1)
-
-PLATFORMS
-  ruby
-
-DEPENDENCIES
-  activerecord (~> 4.1.0)
-  activesupport (~> 4.1.0)
-  appraisal (~> 0.5.2)
-  coveralls
-  crypt_keeper!
-  guard (~> 1.8.0)
-  guard-rspec (~> 2.5.4)
-  mysql2 (~> 0.3.11)
-  pg (~> 0.15.1)
-  rake (~> 10.0.3)
-  rb-fsevent (~> 0.9.1)
-  rspec (~> 2.13.0)
-  sqlite3

data/lib/crypt_keeper/provider/aes.rb

@@ -1,66 +0,0 @@
-require 'digest/sha2'
-require 'openssl'
-require 'base64'
-
-module CryptKeeper
-  module Provider
-    class Aes
-      SEPARATOR = ":crypt_keeper:"
-
-      # Public: The encryption key
-      attr_accessor :key
-
-      # Public: An instance of  OpenSSL::Cipher::Cipher
-      attr_accessor :aes
-
-      # Public: Initializes the class
-      #
-      #   options - A hash of options. :key is required
-      def initialize(options = {})
-        legacy
-        @aes         = ::OpenSSL::Cipher::Cipher.new("AES-256-CBC")
-        @aes.padding = 1
-
-        key = options.fetch(:key) do
-          raise ArgumentError, "Missing :key"
-        end
-
-        @key = Digest::SHA256.digest(key)
-      end
-
-      # Public: Encrypt a string
-      #
-      # Note: nil and empty strings are not encryptable with AES.
-      # When they are encountered, the orignal value is returned.
-      # Otherwise, returns the encrypted string
-      def encrypt(value)
-        return value if value == '' || value.nil?
-        aes.encrypt
-        aes.key = key
-        Base64::encode64("#{aes.random_iv}#{SEPARATOR}#{aes.update(value.to_s) + aes.final}")
-      end
-
-      # Public: Decrypt a string
-      #
-      # Note: nil and empty strings are not encryptable with AES (and thus cannot be decrypted).
-      # When they are encountered, the orignal value is returned.
-      # Otherwise, returns the decrypted string
-      def decrypt(value)
-        return value if value == '' || value.nil?
-        iv, value = Base64::decode64(value.to_s).split(SEPARATOR)
-        aes.decrypt
-        aes.key = key
-        aes.iv  = iv
-        aes.update(value) + aes.final
-      end
-
-      private
-
-      def legacy
-        unless ENV['CRYPT_KEEPER_IGNORE_LEGACY_DEPRECATION']
-          warn "[DEPRECATION] AES Legacy is now deprecated. Please see http://git.io/uYcp2A"
-        end
-      end
-    end
-  end
-end

data/lib/crypt_keeper/provider/mysql_aes.rb

@@ -1,47 +0,0 @@
-require 'crypt_keeper/log_subscriber/mysql_aes'
-
-module CryptKeeper
-  module Provider
-    class MysqlAes
-      include CryptKeeper::Helper::SQL
-
-      attr_accessor :key
-
-      # Public: Initializes the encryptor
-      #
-      #  options - A hash, :key is required
-      def initialize(options = {})
-        legacy
-        ActiveSupport.run_load_hooks(:crypt_keeper_mysql_aes_log, self)
-
-        @key = options.fetch(:key) do
-          raise ArgumentError, "Missing :key"
-        end
-      end
-
-      # Public: Encrypts a string
-      #
-      # Returns an encrypted string
-      def encrypt(value)
-        Base64.encode64 escape_and_execute_sql(
-          ["SELECT AES_ENCRYPT(?, ?)", value, key]).first
-      end
-
-      # Public: Decrypts a string
-      #
-      # Returns a plaintext string
-      def decrypt(value)
-        escape_and_execute_sql(
-          ["SELECT AES_DECRYPT(?, ?)", Base64.decode64(value), key]).first
-      end
-
-      private
-
-      def legacy
-        unless ENV['CRYPT_KEEPER_IGNORE_LEGACY_DEPRECATION']
-          warn "[DEPRECATION] MySqlAes Legacy is now deprecated. Please see http://git.io/nXXOlg"
-        end
-      end
-    end
-  end
-end