messagesodium 0.3.0 → 1.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: ab737303b92992980e7aa7189686b57603c40cea
-  data.tar.gz: 3d3216c1bfbc8174f4ed8d4a1808a44c7b3d515a
+  metadata.gz: bb122db1e8005db897c3aa57a712ca9ab3915444
+  data.tar.gz: c997dd81ecea262cf40483f92bd48f3d088687a4
 SHA512:
-  metadata.gz: 6f267c8fc47f1741adfb8b239cf7e71f9b5e44d9ff2f1735f72c44f6916d2d0db74db9cd3d0d6bfcab4e37a10e98da80de7fa4a8e17060ae4fc4b6224fe5a7d5
-  data.tar.gz: 4024beeed614f60c3831940d0295f9baf14ef7cae9d627c1832d70ae46be2803e877579f8567459960fd192f005bb61689071adb169caee7b230f8db53f88ecb
+  metadata.gz: 7fe3030e7e1438c131e2b67819e26802469eda4a89a69e8e570e69f722378926a793d46d7be5e7cf3c6c011e45d66f35b9c4562e3beccfe64772e86855b57ab9
+  data.tar.gz: 36c078a41aa312d2c1918b3c1a92d28b3aed97964386ac2a8785799b54a4b3639bb54784e3921e720f512db67886cb6b821d33b9dc50adb55f29d136ec8a7fa7

data/README.md

@@ -1,6 +1,6 @@
 # Messagesodium
 
-Project status: 1.0 Release candidate
+Project status: Stable
 
 Patches Cookiestore to use libsodium for encryption and verification.
 [![Build Status](https://travis-ci.org/technion/messagesodium.svg?branch=master)](https://travis-ci.org/technion/messagesodium)
@@ -11,6 +11,10 @@ Rails [Cookiestore](https://www.justinweiss.com/articles/how-rails-sessions-work
 
 This gem brings an alternative backend to CookieStore.
 
+## Reason
+
+There are a series of benefits described below. None of these are highly compelling on their own, but I recommend considering the way these features add up.
+
 # Use
 
 Just insert this gem into your Gemfile like any other:
@@ -18,7 +22,7 @@ Just insert this gem into your Gemfile like any other:
     gem 'messagesodium'
 
 And run your usual bundle installation. Any existing sessions will be invalidated, much like if you changed your secret key.
-You can test it is active by looking at any session cookie. The absence of the "--" delimeter will confirm you are using this gem.
+You can test it is active by looking at any session cookie. The absence of the "--" delimiter will confirm you are using this gem.
 
 # Demonstration
 
@@ -52,7 +56,7 @@ Smaller cookies are a good thing. It's less data on the wire for every single pa
 
 ## More performant
 
-The above benchmark shows our approach as much more performant. Some of that is just crypto, which can be hardware dependant.
+The above benchmark shows our approach as much more performant. Some of that is just crypto, which can be hardware dependent.
 
 But some of this is down to the message packing. Dipping into Base64 functions three separate times to open one cookie is ineffecient. When the IV is known to be of BLOCKSIZE length, choosing to cut it by using split() and a delimiter is the long way around. In the end, performance is great.
 
@@ -60,7 +64,7 @@ But some of this is down to the message packing. Dipping into Base64 functions t
 
 Let's be clear about the fact that I have no known issue with the current CookieStore implementation. However, it's worth having a read of the view of [Google's Adam Langley](https://www.imperialviolet.org/2013/10/07/chacha20.html) when describing "a strong motivation to replace it" when describing CBC mode.
 
-Indeed, the are several comments in the original Rails source code to the effect of "this dance is done in the hope we don't introduce a vulnerability".
+Indeed, the are several comments in the original Rails source code to the effect of "this dance is done in the hope we don't introduce a vulnerability". In general, it would be argued that a thin layer of code on libsodium presents a higher quality product than a library over OpenSSL.
 
 What you'll find in this gem is a much smaller, more easily audited codebase without any hoops to jump through.
 

data/lib/messagesodium/version.rb

@@ -1,3 +1,3 @@
 module Messagesodium
-  VERSION = "0.3.0".freeze
+  VERSION = "1.0.0".freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: messagesodium
 version: !ruby/object:Gem::Version
-  version: 0.3.0
+  version: 1.0.0
 platform: ruby
 authors:
 - Technion
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2017-09-07 00:00:00.000000000 Z
+date: 2017-09-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rbnacl-libsodium