devise-encryptable-mysql-aes 0.0.1

data/.gitignore

@@ -0,0 +1 @@
+*.swp

data/Gemfile

@@ -0,0 +1,7 @@
+source 'https://rubygems.org'
+
+gemspec
+
+gem 'devise', '~> 3.1'
+gem 'rails', "~> 3.2"
+gem 'openssl'

data/devise-encryptable-mysql-aes.gemspec

@@ -0,0 +1,14 @@
+Gem::Specification.new do |gem|
+  gem.name          = %q{devise-encryptable-mysql-aes}
+  gem.version       = %q{0.0.1}
+  gem.date          = %q{2013-10-19}
+  gem.description   = %q{AES encryption plugin for devise. Encrypt in such a way that the results work with MySQL's native AES_ENCRYPT and AES_DECRYPT functions}
+  gem.summary       = %q{Devise AES encryption consistent with native MySQL AES}
+  gem.authors       = ['Anthus Williams']
+  gem.email         = %q{anthuswilliams@gmail.com}
+  gem.files         = `git ls-files`.split($\)
+  gem.require_paths = ['lib']
+
+  gem.add_dependency('devise','>= 3.1.1')
+  gem.add_dependency('devise-encryptable', '>= 0.1.2')
+end

data/lib/devise-encryptable-mysql-aes.rb

@@ -0,0 +1 @@
+require 'encryptors/mysql_aes128.rb'

data/lib/encryptors/mysql_aes128.rb

@@ -0,0 +1,47 @@
+require 'openssl'
+
+module Devise
+  module Encryptable
+    module Encryptors
+      # Use the AES (formerly Rijndael) algorithm to encrypt passwords, and then pad the results with \0 bytes in such away that the hashes are consistent with the results of mysql's AES_ENCRYPT() and AES_DECRYPT() functions
+      class MysqlAes128 < Base 
+      class << self
+        # MySQL's AES_ENCRYPT runs in ECB mode and doesn't use any initialization vector at all
+        # we use pepper as the common key for all our encryptions, only using the salt stored in the DB as a backup if pepper is undefined
+        def digest(string, stretches, salt, pepper)
+          self.aes(:encrypt, pepper ? self.mysql_key(pepper) : salt, string)
+        end
+        alias :encrypt :digest
+
+        # format the token returned from Devise's base generator into 16-byte blocks for consumption by MySQL
+        # this method is called by devise-encryptable when setting a new password
+        def salt(stretches)
+          self.mysql_key(super)
+        end
+
+        protected
+
+        def aes(method, key, string)
+          cipher = OpenSSL::Cipher::Cipher.new('aes-128-ecb').send(method)
+          cipher.key = key
+          cipher.update(string) + cipher.final
+        end
+                
+        # given a token, produce a 16-byte key
+        # note that this is idempotent in the sense that a key that is 16 bytes will return unchanged 
+        def mysql_key(key)
+          # start with an empty 16 byte buffer
+          ret = "\0" * 16
+          # on each byte of our key, perform a bitwise OR with each element of the original key which as the same index mod 16
+          # except we use the ordinals of each character since we would need, for example, "hello"[0] to return 104 instead of "h" 
+          key.length.times do |i|
+            ret[i%16] = ( ret[i%16].ord ^ key[i].ord ).chr
+          end
+
+          ret
+        end
+      end
+      end
+    end
+  end
+end

metadata

@@ -0,0 +1,83 @@
+--- !ruby/object:Gem::Specification
+name: devise-encryptable-mysql-aes
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+  prerelease: 
+platform: ruby
+authors:
+- Anthus Williams
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2013-10-19 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: devise
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 3.1.1
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 3.1.1
+- !ruby/object:Gem::Dependency
+  name: devise-encryptable
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 0.1.2
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 0.1.2
+description: AES encryption plugin for devise. Encrypt in such a way that the results
+  work with MySQL's native AES_ENCRYPT and AES_DECRYPT functions
+email: anthuswilliams@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- .gitignore
+- Gemfile
+- README.md
+- devise-encryptable-mysql-aes.gemspec
+- lib/devise-encryptable-mysql-aes.rb
+- lib/encryptors/mysql_aes128.rb
+homepage: 
+licenses: []
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 1.8.25
+signing_key: 
+specification_version: 3
+summary: Devise AES encryption consistent with native MySQL AES
+test_files: []