master-crypt 0.0.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 30c1cf54ea583219381fdbed0e73f77f1f4b7168fe7bf5e3a568832d50be208f
+  data.tar.gz: 8add2b4b02dc45935f7317561b09e49a1e1bca477634a0bf3672ffaf8fc80a4c
+SHA512:
+  metadata.gz: b9b16ea951a97dd3577962c54303ec46ab1e3c9df2bd890408a925a69f65f71a555139facefca207c32f87d82bf8a4984e20711a95c0de807fa085c2a1ec9dca
+  data.tar.gz: d94abe5413f90b4a7cac2fcf875f834d6066904e0b2b36f3b3991a9123d89be19a19bd6b8484962a6ecf082b3c84bbab45bb06a825287498c12cc9aa41fdbd26

data/README.md

@@ -0,0 +1,12 @@
+# master-crypt
+
+## Development
+```sh
+bundle install
+```
+
+### Specs
+Run a
+```sh
+
+```

data/bin/console

@@ -0,0 +1,14 @@
+#!/usr/bin/env ruby
+
+require "bundler/setup"
+require "master_crypt"
+
+# You can add fixtures and/or initialization code here to make experimenting
+# with your gem easier. You can also use a different console, if you like.
+
+# (If you use this, don't forget to add pry to your Gemfile!)
+# require "pry"
+# Pry.start
+
+require "irb"
+IRB.start

data/bin/setup

@@ -0,0 +1,6 @@
+#!/usr/bin/env bash
+set -euxo pipefail
+
+bundle install
+
+# Do any other automated setup that you need to do here

data/lib/master_crypt.rb

@@ -0,0 +1,65 @@
+require "master_crypt/version"
+require "rbnacl"
+require "base64"
+require "digest"
+
+module MasterCrypt
+  class << self
+    def encrypt(plaintext, secrets)
+      raise "Secrets must not be blank" unless secrets.select(&:empty?).empty?
+      raise "At least 1 secret is required" if !secrets.is_a?(Array) || secrets.empty?
+
+      random_key = RbNaCl::Random.random_bytes(RbNaCl::SecretBox.key_bytes)
+      # encrypt data with random_key
+      box = RbNaCl::SimpleBox.from_secret_key(random_key)
+
+      encrypted_data = box.encrypt(plaintext)
+      encrypted_data64 = Base64.strict_encode64(encrypted_data)
+
+      # encrypt random_kets with each secret
+      encrypted_random_keys64 = secrets.collect do |secret|
+        key = generate_key_from_secret(secret)
+        box = RbNaCl::SimpleBox.from_secret_key(key)
+
+        encrypted_random_key = box.encrypt(random_key)
+        encrypted_random_key64 = Base64.strict_encode64(encrypted_random_key)
+        encrypted_random_key64
+      end
+      # encrypted_data|encrypted_random_key1:encrypted_random_key2:...
+      Base64.strict_encode64(encrypted_data64 + "|" + encrypted_random_keys64.join(":"))
+    end
+
+    def decrypt(encrypted_data, secret)
+      encrypted_data64, encrypted_random_keys64_joined = Base64.strict_decode64(encrypted_data).split("|", 2)
+
+      encrypted_random_keys64 = encrypted_random_keys64_joined.split(":")
+      key = find_key(encrypted_random_keys64, secret)
+
+      box = RbNaCl::SimpleBox.from_secret_key(key)
+
+      ciphertext = Base64.strict_decode64(encrypted_data64)
+      box.decrypt(ciphertext).force_encoding(Encoding::UTF_8)
+    end
+
+    private
+
+    def find_key(encrypted_random_keys64, secret)
+      secret_key = generate_key_from_secret(secret)
+      box = RbNaCl::SimpleBox.from_secret_key(secret_key)
+
+      encrypted_random_keys64.each do |encrypted_random_key64|
+        encrypted_random_key = Base64.strict_decode64(encrypted_random_key64)
+        begin
+          random_key = box.decrypt(encrypted_random_key)
+          return random_key
+        rescue RbNaCl::CryptoError
+        end
+      end
+      raise "No valid key for '#{secret}'"
+    end
+
+    def generate_key_from_secret(secret)
+      Digest::SHA2.hexdigest(secret)[0...32].force_encoding(Encoding::BINARY)
+    end
+  end
+end

data/lib/master_crypt/version.rb

@@ -0,0 +1,3 @@
+module MasterCrypt
+  VERSION = "0.0.1"
+end

metadata

@@ -0,0 +1,190 @@
+--- !ruby/object:Gem::Specification
+name: master-crypt
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+platform: ruby
+authors:
+- Cian McElhinney
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2021-08-01 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: standardrb
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.2'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.2'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '13.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '13.0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.10'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.10'
+- !ruby/object:Gem::Dependency
+  name: pry
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: pry-byebug
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: pry-doc
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: guard
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: guard-rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rbnacl
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 7.1.1
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 7.1.1
+description: Allows for encrypting a single piece of data with multiple keys which
+  can each be used to decrypt it
+email: 
+executables:
+- setup
+- console
+extensions: []
+extra_rdoc_files: []
+files:
+- README.md
+- bin/console
+- bin/setup
+- lib/master_crypt.rb
+- lib/master_crypt/version.rb
+homepage: https://github.com/cianmce/master-crypt
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.1.4
+signing_key: 
+specification_version: 4
+summary: Encrypting data with multiple keys
+test_files: []