legion-crypt 0.2.0 → 1.2.0

data/.rspec

@@ -1,3 +0,0 @@
---format documentation
---color
---require spec_helper

data/LICENSE.txt

@@ -1,21 +0,0 @@
-The MIT License (MIT)
-
-Copyright (c) 2020 Esity
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in
-all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
-THE SOFTWARE.

data/Rakefile

@@ -1,8 +0,0 @@
-# frozen_string_literal: true
-
-require 'bundler/gem_tasks'
-require 'rspec/core/rake_task'
-
-RSpec::Core::RakeTask.new(:spec)
-
-task default: :spec

data/bin/console

@@ -1,15 +0,0 @@
-#!/usr/bin/env ruby
-# frozen_string_literal: true
-
-require 'bundler/setup'
-require 'legion/crypt'
-
-# You can add fixtures and/or initialization code here to make experimenting
-# with your gem easier. You can also use a different console, if you like.
-
-# (If you use this, don't forget to add pry to your Gemfile!)
-# require "pry"
-# Pry.start
-
-require 'irb'
-IRB.start(__FILE__)

data/bin/setup

@@ -1,8 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-IFS=$'\n\t'
-set -vx
-
-bundle install
-
-# Do any other automated setup that you need to do here

data/lib/legion/crypt/box.rb

@@ -1,95 +0,0 @@
-# frozen_string_literal: true
-
-module Legion
-  module Crypt
-    module Box
-      def create_keys
-        Legion::Logging.debug 'Legion::Crypt::Box.create_keys has been called'
-        @private_key = RbNaCl::PrivateKey.generate
-        @public_key = @private_key.public_key
-        return unless Dir.exist? './settings'
-
-        File.open('./settings/private.key', 'w').write(@private_key.to_s)
-        File.open('./settings/public.key', 'w').write(@public_key.to_s)
-      end
-
-      def delete_keys
-        File.delete('./settings/private.key') if File.exist? './settings/private.key'
-        File.delete('./settings/public.key') if File.exist? './settings/public.key'
-      end
-
-      def load_keys
-        return unless Dir.exist? './settings'
-
-        @private_key = RbNaCl::PrivateKey.new(File.read('./settings/private.key').force_encoding('BINARY'))
-        @public_key = RbNaCl::PrivateKey.new(File.read('./settings/public.key').force_encoding('BINARY'))
-      end
-
-      def encrypt_from_keypair(public_key:, message:, **_opts)
-        Legion::Logging.debug('encrypt_from_keypair')
-        Base64.encode64(RbNaCl::SimpleBox.from_keypair(Base64.decode64(public_key), @private_key).encrypt(message))
-      end
-
-      def decrypt_from_keypair(public_key, enciphered_message)
-        Legion::Logging.debug 'decrypt_from_keypair'
-        RbNaCl::SimpleBox
-          .from_keypair(Base64.decode64(public_key), @private_key)
-          .decrypt(Base64.decode64(enciphered_message))
-      end
-
-      def encrypt(message)
-        Legion::Logging.debug 'encrypting message'
-        Base64.encode64(@box.encrypt(message))
-      end
-
-      def decrypt(message)
-        Legion::Logging.debug 'decrypting message'
-        @box.decrypt(Base64.decode64(message))
-      end
-
-      def setup_safe # rubocop:disable Metrics/AbcSize,Metrics/PerceivedComplexity
-        Legion::Logging.debug 'Setting up Legion::Crypt safe'
-        if Legion::Settings[:crypt][:cluster_secret].nil?
-          if Legion::Settings[:crypt][:vault][:connected] && Legion::Crypt.exist?('crypt')
-            Legion::Settings[:crypt][:cluster_secret] = Base64.decode64(Legion::Crypt.get('crypt')[:cluster_secret])
-          elsif Legion::Transport::Queue.new('node.crypt', passive: true).consumer_count.zero?
-            Legion::Logging.info 'Legion::Crypt Generating new cluster_secret since this is the first node'
-            Legion::Settings[:crypt][:bootstrapped] = true
-            Legion::Settings[:crypt][:cluster_secret] = RbNaCl::Random.random_bytes(RbNaCl::SecretBox.key_bytes)
-            if Legion::Settings[:crypt][:vault][:connected]
-              Legion::Crypt.write('crypt', :cluster_secret, Base64.encode64(Legion::Settings[:crypt][:cluster_secret]))
-            end
-          else
-            require 'legion/transport/messages/request_cluster_secret'
-            Legion::Logging.info 'Requesting cluster secret via public key'
-            start = Time.now
-            Legion::Transport::Messages::RequestClusterSecret.new.publish
-            sleep_time = 0.001
-            until !Legion::Settings[:crypt][:cluster_secret].nil? || (Time.now - start) > Legion::Settings[:crypt][:cluster_secret_timeout]
-              sleep(sleep_time)
-              sleep_time *= 2
-            end
-            unless Legion::Settings[:crypt][:cluster_secret].nil?
-              Legion::Logging.info "Received cluster secret in #{((Time.new - start) * 1000.0).round}ms"
-            end
-            Legion::Logging.warn 'Cluster secret is still nil' if Legion::Settings[:crypt][:cluster_secret].nil?
-          end
-        end
-
-        @key = Legion::Settings[:crypt][:cluster_secret].to_s
-        @box = RbNaCl::SimpleBox.from_secret_key(@key) unless @key.empty?
-        if !Legion::Settings[:crypt].key?(:encrypted_string) || !Legion::Settings[:crypt].key?(:validation_string)
-          unless Legion::Settings[:crypt][:bootstrapped]
-            Legion::Logging.warn 'Legion::Crypt has been set up but wasn\'t testing with a validation string!'
-          end
-          Legion::Settings[:crypt][:cs_encrypt_ready] = true
-        elsif Legion::Crypt.decrypt(Legion::Settings[:crypt][:encrypted_string]) == Legion::Settings[:crypt][:validation_string]
-          Legion::Logging.info 'Legion::Crypt was set up correctly after string match'
-          Legion::Settings[:crypt][:cs_encrypt_ready] = true
-        else
-          Legion::Logging.fatal 'idk wtf happened'
-        end
-      end
-    end
-  end
-end