encryption_activator 0.1

data/CHANGELOG

@@ -0,0 +1 @@
+v0.1. Proof of concept

data/Manifest

@@ -0,0 +1,6 @@
+CHANGELOG
+README.md
+Rakefile
+lib/encryption_activator.rb
+test/test_all.rb
+Manifest

data/README.md

@@ -0,0 +1,39 @@
+
+## Encryption Activator
+
+This gem lets you encrypt fields in your Rails app's database, and by
+default, raise an exception if you try to access any of the fields, until
+you call the prompt method which will ask for the encryption key.
+
+
+## Examples
+
+    gem 'encryption_activator'
+    
+    EncryptionActivator.key     # raises EncryptionActivator::KeyNotSetException
+    EncryptionActivator.prompt  # prompts for key at the terminal
+    EncryptionActivator.key     # => returns key
+
+    
+## Use with Rails: attr_encrypted
+
+### Key-less mode
+
+Put this in eg. config/initializers/activerecord_attr_encrypted.rb :
+
+    ActiveRecord::Base.attr_encrypted_options.merge!(
+      key:    EncryptionActivator.keyproc,
+      encode: true
+    )
+
+Your app will work without the key being set, as long as you don't try to
+read any of the encrypted fields.
+
+### Activate encrypted mode
+
+Somewhere in your worker process or
+startup thread, you call this:
+
+    EncryptionActivator.prompt
+
+After this, the app can read and write the encrypted fields.

data/Rakefile

@@ -0,0 +1,8 @@
+require 'echoe'
+
+Echoe.new('encryption_activator') do |p|
+  p.author = "Andrew Snow"
+  p.email = 'andrew@modulus.org'
+  p.summary = 'Ruby gem to prompt for password at run time for attr_encrypted'
+  p.url = 'https://github.com/andys/encryption_activator'
+end

data/encryption_activator.gemspec

@@ -0,0 +1,30 @@
+# -*- encoding: utf-8 -*-
+
+Gem::Specification.new do |s|
+  s.name = "encryption_activator"
+  s.version = "0.1"
+
+  s.required_rubygems_version = Gem::Requirement.new(">= 1.2") if s.respond_to? :required_rubygems_version=
+  s.authors = ["Andrew Snow"]
+  s.date = "2013-02-18"
+  s.description = "Ruby gem to prompt for password at run time for attr_encrypted"
+  s.email = "andrew@modulus.org"
+  s.extra_rdoc_files = ["CHANGELOG", "README.md", "lib/encryption_activator.rb"]
+  s.files = ["CHANGELOG", "README.md", "Rakefile", "lib/encryption_activator.rb", "test/test_all.rb", "Manifest", "encryption_activator.gemspec"]
+  s.homepage = "https://github.com/andys/encryption_activator"
+  s.rdoc_options = ["--line-numbers", "--inline-source", "--title", "Encryption_activator", "--main", "README.md"]
+  s.require_paths = ["lib"]
+  s.rubyforge_project = "encryption_activator"
+  s.rubygems_version = "1.8.25"
+  s.summary = "Ruby gem to prompt for password at run time for attr_encrypted"
+  s.test_files = ["test/test_all.rb"]
+
+  if s.respond_to? :specification_version then
+    s.specification_version = 3
+
+    if Gem::Version.new(Gem::VERSION) >= Gem::Version.new('1.2.0') then
+    else
+    end
+  else
+  end
+end

data/lib/encryption_activator.rb

@@ -0,0 +1,42 @@
+require 'io/console'
+
+module EncryptionActivator
+
+  class KeyNotSetException < Exception ; end
+
+  class << self
+    attr_writer :key
+
+    def prompt(tty=STDIN)
+      if tty.tty?
+        attempt1 = nil
+        3.times do
+          $stderr.print "Enter key: "
+          attempt1 = tty.noecho(&:gets).chomp
+          if attempt1.length < 20
+            $stderr.puts "not long enough, minimum 20 chars"
+            next
+          end
+
+          $stderr.print "\n  Confirm: "
+          attempt2 = tty.noecho(&:gets).chomp
+
+          if attempt1 == attempt2
+            self.key = attempt1
+            break
+          end
+          $stderr.puts "did not match, try again"
+        end
+      end
+    end
+
+    def keyproc
+      lambda {|*opts| @key || raise(EncryptionActivator::KeyNotSetException.new("Key not set!")) }
+    end
+
+    def key
+      keyproc.call
+    end
+  end
+end
+

data/test/test_all.rb

@@ -0,0 +1,36 @@
+require 'minitest/autorun'
+require 'pty'
+require "#{File.dirname(__FILE__)}/../lib/encryption_activator"
+
+class TestEncryptionActivator < MiniTest::Unit::TestCase
+
+  def setup
+    EncryptionActivator.key = nil
+  end
+
+  def test_key_entry_good
+    k = 'flibbleflibbleflibble'
+    PTY.open do |m, s|
+      2.times { s.puts(k) }
+      EncryptionActivator.prompt(m)
+    end
+    assert_equal k, EncryptionActivator.key
+  end
+
+  def test_key_entry_blank
+    PTY.open do |m, s|
+      Thread.new { loop { s.puts("") } }
+      EncryptionActivator.prompt(m)
+    end
+    assert_raises(EncryptionActivator::KeyNotSetException) { EncryptionActivator.key }
+  end
+
+  def test_keyproc_nokey
+    assert_raises(EncryptionActivator::KeyNotSetException) { EncryptionActivator.key }
+  end  
+
+  def test_keyprocx
+    EncryptionActivator.key = 'flibble'
+    assert_equal 'flibble', EncryptionActivator.key
+  end  
+end

metadata

@@ -0,0 +1,61 @@
+--- !ruby/object:Gem::Specification
+name: encryption_activator
+version: !ruby/object:Gem::Version
+  version: '0.1'
+  prerelease: 
+platform: ruby
+authors:
+- Andrew Snow
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2013-02-18 00:00:00.000000000 Z
+dependencies: []
+description: Ruby gem to prompt for password at run time for attr_encrypted
+email: andrew@modulus.org
+executables: []
+extensions: []
+extra_rdoc_files:
+- CHANGELOG
+- README.md
+- lib/encryption_activator.rb
+files:
+- CHANGELOG
+- README.md
+- Rakefile
+- lib/encryption_activator.rb
+- test/test_all.rb
+- Manifest
+- encryption_activator.gemspec
+homepage: https://github.com/andys/encryption_activator
+licenses: []
+post_install_message: 
+rdoc_options:
+- --line-numbers
+- --inline-source
+- --title
+- Encryption_activator
+- --main
+- README.md
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '1.2'
+requirements: []
+rubyforge_project: encryption_activator
+rubygems_version: 1.8.25
+signing_key: 
+specification_version: 3
+summary: Ruby gem to prompt for password at run time for attr_encrypted
+test_files:
+- test/test_all.rb