passw3rd 0.0.1

data/LICENSE

@@ -0,0 +1,10 @@
+Open Source Initiative OSI - The MIT License (MIT):Licensing
+
+The MIT License (MIT)
+Copyright (c) 2011 Neil Matatall
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README

@@ -0,0 +1,27 @@
+== DESCRIPTION:
+
+* Programmatic Password Crytpo
+
+== FEATURES/PROBLEMS:
+
+* Simple mechanism to store encrypted values using keys on the system
+
+== SYNOPSIS:
+
+require 'password_service'
+
+== REQUIREMENTS:
+
+openssl
+base64
+optparse
+
+== INSTALL:
+
+* gem install programmatic_crypto
+
+== DEVELOPERS:
+
+== LICENSE:
+
+MIT

data/bin/passw3rd

@@ -0,0 +1,5 @@
+#!/usr/bin/env ruby -w
+
+require File.expand_path('../../lib/passw3rd',  __FILE__)
+# require File.expand_path('../../lib/passw3rd/password_client.rb',  __FILE__)
+

data/lib/passw3rd/key_loader.rb

@@ -0,0 +1,50 @@
+require 'openssl'
+module Passw3rd
+  class KeyLoader
+    KEY_FILE = "/.passw3rd-encryptionKey"
+    IV_FILE = "/.passw3rd-encryptionIV"
+
+
+    def self.load(path=nil) 
+      if path.nil?
+        path = ENV['HOME']
+      end
+
+      begin
+        key = IO.readlines(File.expand_path(path + KEY_FILE))[0]
+        iv = IO.readlines(File.expand_path(path + IV_FILE))[0]
+      rescue Errno::ENOENT
+        puts "Couldn't read key/iv from #{path}.  Have they been generated?\n"
+        raise $!
+      end
+
+      pair = KeyIVPair.new
+      pair.key = [key].pack("H*")
+      pair.iv = [iv].pack("H*")
+      pair
+    end
+
+    def self.create_key_iv_file(path=nil)
+      if path.nil?
+        path = ENV['HOME']
+      end    
+
+      cipher = OpenSSL::Cipher::Cipher.new('aes-128-cbc')
+      iv = cipher.random_iv
+      key = cipher.random_key
+
+      begin
+        File.open(path + KEY_FILE, 'w') {|f| f.write(key.unpack("H*")) }
+        File.open(path + IV_FILE, 'w') {|f| f.write(iv.unpack("H*")) }
+      rescue
+        puts "Couldn't write key/IV to #{path}\n"
+        raise $!
+      end
+
+    end
+  end
+
+  class KeyIVPair
+    attr_accessor :key, :iv
+  end
+end

data/lib/passw3rd/password_client.rb

@@ -0,0 +1,76 @@
+require 'base64'
+require 'openssl'
+require 'optparse'
+
+module Passw3rd
+  class PasswordClient 
+    #  def self.run argv = ARGV
+    password_file = nil
+    output_path = nil
+    gen_key_path = nil
+    key_path = nil
+
+    opts = OptionParser.new
+    opts.banner = 'Usage: password_client [options]'
+    opts.on('-d', '--decrypt PATH_TO_PASSWORD', 'Path to password file') do |opt|
+      password_file = opt
+    end
+    opts.on('-e', '--encrypt OUTPUT_PATH', 'Write the password to this location') do |opt|
+      output_path = opt
+    end
+    opts.on('-p', '--key-path KEY_PATH', 'Use the keys specificed in this directory for encryption or decryption') do |opt|
+      key_path = opt
+      if !File.directory?(File.expand_path(key_path))
+        raise "#{opt} must be a directory"
+      end
+    end
+    opts.on('-k', '--generate-key [PATH]', 'generate key/iv and store in PATH, defaults to the home directory') do |opt|
+      gen_key_path = opt
+      if gen_key_path.nil?
+        gen_key_path = ENV["HOME"]
+      end
+      if !File.directory?(File.expand_path(gen_key_path))
+        raise "#{opt} is not a directory"
+      end
+    end
+
+    opts.on_tail("-h", "--help", "Show this message") do
+      puts opts
+      exit
+    end
+
+    opts.parse(ARGV)
+
+    # generate key/IV
+    if gen_key_path
+      Passw3rd::KeyLoader.create_key_iv_file(gen_key_path)
+      puts "generated keys in #{gen_key_path}"
+    end
+
+    # default the key directory to the users home, can also be specified by -p [path]
+    if key_path.nil?
+      key_path = ENV["HOME"]
+    end
+
+    # decrypt password_file using the key/IV in key_path
+    if password_file
+      decrypted = Passw3rd::PasswordService.getPassword(password_file, key_path)
+
+      puts("The password is: #{decrypted}")
+    end
+
+    # encrypt password, store it in output path
+    if output_path
+      begin
+        system 'stty -echo'
+        print "Enter the password: "
+        password = STDIN.gets.chomp
+      ensure
+        system 'stty echo; echo ""'
+      end
+
+      Passw3rd::PasswordService.write_password_file(password, output_path, key_path)
+      puts "Wrote password to #{output_path}"
+    end
+  end
+end

data/lib/passw3rd/password_service.rb

@@ -0,0 +1,49 @@
+module Passw3rd
+  class PasswordService
+    VERSION = '0.1.0'
+
+    def self.getPassword (password_file, key_path=nil)
+      encoded_password = IO.readlines(password_file).join
+      encrypted_password = Base64.decode64(encoded_password)
+      PasswordService.decrypt(encrypted_password, key_path)
+    end
+
+    def self.write_password_file password, output_path, key_path
+      enc_password = PasswordService.encrypt(password, key_path)
+      base64pw = Base64.encode64(enc_password) 
+      File.open(output_path, 'w') { |f| f.write base64pw }
+    end
+
+    def self.encrypt(password, key_path = nil)
+      pair = KeyLoader.load(key_path)
+      cipher = OpenSSL::Cipher::Cipher.new('aes-128-cbc')
+      cipher.encrypt
+      cipher.key = pair.key
+      cipher.iv = pair.iv
+      begin
+        e = cipher.update(password)
+        e << cipher.final
+      rescue OpenSSL::Cipher::CipherError=>err
+        puts "Couldn't encrypt password."
+        raise err
+      end
+
+    end
+
+    def self.decrypt(password, key_path = nil)
+      pair = KeyLoader.load(key_path)
+      cipher = OpenSSL::Cipher::Cipher.new('aes-128-cbc')
+      cipher.decrypt
+      cipher.key = pair.key
+      cipher.iv = pair.iv
+      begin
+        d = cipher.update(password)
+        d << cipher.final
+      rescue OpenSSL::Cipher::CipherError => err
+        puts "Coudln't decrypt password.  Are you using the right keys?"
+        raise err
+      end
+
+    end
+  end
+end

data/lib/passw3rd/version.rb

@@ -0,0 +1,3 @@
+module Passw3rd
+  Version = VERSION = '0.0.1'
+end

data/lib/passw3rd.rb

@@ -0,0 +1,7 @@
+require 'base64'
+require 'openssl'
+require 'optparse'
+require File.expand_path('../passw3rd/key_loader',  __FILE__)
+require File.expand_path('../passw3rd/password_service',  __FILE__)
+require File.expand_path('../passw3rd/password_client',  __FILE__)
+

data/test/test_password_service.rb

@@ -0,0 +1,28 @@
+require 'rubygems'
+require 'test/unit'
+require 'tmpdir'
+require 'SecureRandom'
+require File.expand_path('../../lib/passw3rd.rb',  __FILE__)
+
+class PasswordServiceTest < Test::Unit::TestCase
+  def setup
+    random_num = SecureRandom.random_number(5000)
+    @random_string = SecureRandom.random_bytes(5000 + random_num)
+  end
+  
+  def test_enc_dec
+    enc = ::Passw3rd::PasswordService.encrypt(@random_string)
+    dec = ::Passw3rd::PasswordService.decrypt(enc)
+    
+    assert_equal(@random_string, dec)
+  end
+  
+  def test_gen_key
+    ::Passw3rd::KeyLoader.create_key_iv_file(Dir.tmpdir)
+    
+    enc = ::Passw3rd::PasswordService.encrypt(@random_string, Dir.tmpdir)
+    dec = ::Passw3rd::PasswordService.decrypt(enc, Dir.tmpdir)
+    
+    assert_equal(@random_string, dec)
+  end
+end

metadata

@@ -0,0 +1,101 @@
+--- !ruby/object:Gem::Specification 
+name: passw3rd
+version: !ruby/object:Gem::Version 
+  hash: 29
+  prerelease: 
+  segments: 
+  - 0
+  - 0
+  - 1
+  version: 0.0.1
+platform: ruby
+authors: 
+- Neil Matatall
+autorequire: 
+bindir: bin
+cert_chain: []
+
+date: 2011-09-23 00:00:00 Z
+dependencies: 
+- !ruby/object:Gem::Dependency 
+  name: openssl
+  prerelease: false
+  requirement: &id001 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ">="
+      - !ruby/object:Gem::Version 
+        hash: 3
+        segments: 
+        - 0
+        version: "0"
+  type: :runtime
+  version_requirements: *id001
+- !ruby/object:Gem::Dependency 
+  name: optparse
+  prerelease: false
+  requirement: &id002 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ">="
+      - !ruby/object:Gem::Version 
+        hash: 3
+        segments: 
+        - 0
+        version: "0"
+  type: :runtime
+  version_requirements: *id002
+description: Generate a key/iv file, generate passwords, and store encrypted files in source control, keep the key/iv safe!
+email: 
+- neil.matatall@gmail.com
+executables: 
+- passw3rd
+extensions: []
+
+extra_rdoc_files: []
+
+files: 
+- README
+- LICENSE
+- lib/passw3rd/key_loader.rb
+- lib/passw3rd/password_client.rb
+- lib/passw3rd/password_service.rb
+- lib/passw3rd/version.rb
+- lib/passw3rd.rb
+- bin/passw3rd
+- test/test_password_service.rb
+homepage: https://github.com/oreoshake/passw3rd
+licenses: []
+
+post_install_message: 
+rdoc_options: []
+
+require_paths: 
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement 
+  none: false
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      hash: 3
+      segments: 
+      - 0
+      version: "0"
+required_rubygems_version: !ruby/object:Gem::Requirement 
+  none: false
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      hash: 3
+      segments: 
+      - 0
+      version: "0"
+requirements: []
+
+rubyforge_project: 
+rubygems_version: 1.8.10
+signing_key: 
+specification_version: 3
+summary: A simple "keep the passwords out of source code and config files".
+test_files: []
+