rbnacl-libsodium 0.4.5a

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 784ec2f6022dc23e3ca469082d9fff0011ee9668
+  data.tar.gz: 90b90426cdbf6b418e8fa6f8f19448b803ea36b3
+SHA512:
+  metadata.gz: 411b7c761dbdcbdc2270e481bef1f104a04e33cbfdcab2517cbaa5e4c8bf046c05fc428283edfcf5a69291678bf8d99a3801281ce352622f7fbe3c955114f299
+  data.tar.gz: f7dd983700e4e5e2a876d1c3316a0162b1d4c9a0ffdb7d513090903255fa56a322933acd0dad08b6eec0bb3357fded4149574486cd5759c314add227fd752977

data/.gitignore

@@ -0,0 +1,35 @@
+*.gem
+*.rbc
+/.config
+/coverage/
+/InstalledFiles
+/pkg/
+/spec/reports/
+/test/tmp/
+/test/version_tmp/
+/tmp/
+
+## Specific to RubyMotion:
+.dat*
+.repl_history
+build/
+
+## Documentation cache and generated files:
+/.yardoc/
+/_yardoc/
+/doc/
+/rdoc/
+
+## Environment normalisation:
+/.bundle/
+/lib/bundler/man/
+
+# for a library or gem, you might want to ignore these files since the code is
+# intended to run in multiple environments; otherwise, check them in:
+Gemfile.lock
+# .ruby-version
+# .ruby-gemset
+
+# unless supporting rvm < 1.11.0 or doing something fancy, ignore this:
+.rvmrc
+/vendor/gems

data/.gitmodules

@@ -0,0 +1,3 @@
+[submodule "vendor/libsodium"]
+	path = vendor/libsodium
+	url = git://github.com/jedisct1/libsodium.git

data/CHANGES.md

@@ -0,0 +1,3 @@
+0.4.5a (2014-05-13)
+-------------------
+* Initial release with libsodium 0.4.5

data/Gemfile

@@ -0,0 +1,6 @@
+source 'https://rubygems.org'
+
+gem "rbnacl", github: 'cryptosphere/rbnacl'
+
+# Specify your gem's dependencies in rbnacl-libsodium.gemspec
+gemspec

data/LICENSE

@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) 2014 Cryptosphere
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

data/README.md

@@ -0,0 +1,23 @@
+# RbNaCl::Libsodium
+
+RbNaCl + libsodium packaged as a gem
+
+## Installation
+
+Add this line to your application's Gemfile:
+
+    gem 'rbnacl-libsodium'
+
+And then execute:
+
+    $ bundle
+
+Or install it yourself as:
+
+    $ gem install rbnacl-libsodium
+
+## Usage
+
+    require 'rbnacl/libsodium'
+
+will tweak search path allowing `rbnacl` to find bundled `libsodium`

data/Rakefile

@@ -0,0 +1 @@
+require "bundler/gem_tasks"

data/ext/rbnacl/extconf.rb

@@ -0,0 +1,30 @@
+def sys(cmd)
+  puts " -- #{cmd}"
+  unless ret = system(cmd)
+    raise "ERROR: '#{cmd}' failed"
+  end
+  ret
+end
+
+mkfl = <<MAKEFILE
+install:
+\t@echo "Nothing to do"
+
+clean:
+\t@echo "Nothing to do"
+MAKEFILE
+
+CWD = File.expand_path(File.dirname(__FILE__))
+LIBSODIUM_DIR = File.expand_path(File.join(CWD, '..', '..', 'vendor', 'libsodium'))
+MAKE = ENV['MAKE'] || ENV['make'] || "make"
+
+Dir.chdir(LIBSODIUM_DIR) do
+  sys("./autogen.sh")
+  sys("./configure --prefix=#{LIBSODIUM_DIR}/dist")
+  sys(MAKE)
+  sys("#{MAKE} install")
+end
+
+File.open("Makefile", "w") do |f|
+  f.write(mkfl)
+end

data/lib/rbnacl/libsodium.rb

@@ -0,0 +1,11 @@
+require "rbnacl/libsodium/version"
+
+module RbNaCl
+  module Libsodium
+    sodiumlib_dir = File.expand_path(File.join(File.dirname(__FILE__), "../../vendor/libsodium/dist/lib/"))
+    sodiumlib_filename = RUBY_DESCRIPTION =~ /darwin/ ? "libsodium.dylib" : "libsodium.so"
+    ::RBNACL_LIBSODIUM_GEM_LIB_PATH = File.join(sodiumlib_dir, sodiumlib_filename)
+  end
+end
+
+require "rbnacl"

data/lib/rbnacl/libsodium/version.rb

@@ -0,0 +1,5 @@
+module RbNaCl
+  module Libsodium
+    VERSION = "0.4.5a"
+  end
+end

data/rbnacl-libsodium.gemspec

@@ -0,0 +1,25 @@
+# coding: utf-8
+lib = File.expand_path('../lib', __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+require 'rbnacl/libsodium/version'
+
+Gem::Specification.new do |spec|
+  spec.name          = "rbnacl-libsodium"
+  spec.version       = RbNaCl::Libsodium::VERSION
+  spec.authors       = ["Artiom Di"]
+  spec.date          = Time.now.strftime('%Y-%m-%d')
+  spec.email         = ["kron82@gmail.com"]
+  spec.summary       = %q{rbnacl with bundled libsodium}
+  spec.homepage      = "https://github.com/cryptosphere/rbnacl-libsodium"
+  spec.license       = "MIT"
+
+  spec.files         = `git ls-files -z`.split("\x0")
+  spec.files         += Dir.glob("vendor/libsodium/**/*")
+  spec.require_paths = ["lib"]
+
+  spec.extensions    = ['ext/rbnacl/extconf.rb']
+
+  spec.add_runtime_dependency "rbnacl", "~> 3.0", ">= 3.0.1"
+  spec.add_development_dependency "bundler", "~> 1.5"
+  spec.add_development_dependency "rake"
+end

data/vendor/libsodium/AUTHORS

@@ -0,0 +1,101 @@
+Designers
+=========
+
+crypto_sign/ed25519
+-------------------
+Daniel J. Bernstein
+Niels Duif
+Tanja Lange
+Peter Schwabe
+Bo-Yin Yang
+
+Implementors
+============
+
+crypto_core/hsalsa20
+--------------------
+Daniel J. Bernstein
+
+crypto_core/salsa20
+--------------------
+Daniel J. Bernstein
+
+crypto_core/salsa2012
+-------------------
+Daniel J. Bernstein
+
+crypto_core/salsa208
+---------------------
+Daniel J. Bernstein
+
+crypto_hash/sha256
+------------------
+Daniel J. Bernstein (wrapper around crypto_hashblocks/sha256)
+
+crypto_hash/sha512
+------------------
+Daniel J. Bernstein (wrapper around crypto_hashblocks/sha512)
+
+crypto_hashblocks/sha256
+------------------------
+Daniel J. Bernstein
+
+crypto_hashblocks/sha512
+------------------------
+Daniel J. Bernstein
+
+crypto_scalarmult/curve25519/ref
+--------------------------------
+Matthew Dempsky (Mochi Media)
+
+crypto_scalarmult/curve25519/donna_c64
+--------------------------------------
+Adam Langley (Google)
+
+crypto_sign/ed25519
+-------------------
+Daniel J. Bernstein
+Niels Duif
+Tanja Lange
+lead: Peter Schwabe
+Bo-Yin Yang
+
+crypto_stream/aes128ctr
+-----------------------
+Daniel J. Bernstein
+
+crypto_stream/aes256estream
+---------------------------
+Hongjun Wu
+
+crypto_stream/salsa20
+---------------------
+Daniel J. Bernstein
+
+crypto_stream/salsa2012
+-----------------------
+Daniel J. Bernstein
+
+crypto_stream/salsa208
+----------------------
+Daniel J. Bernstein
+
+crypto_stream/xsalsa20
+----------------------
+Daniel J. Bernstein
+
+crypto_shorthash/siphash24
+--------------------------
+Jean-Philippe Aumasson
+Daniel J. Bernstein
+
+crypto_generichash/blake2b
+--------------------------
+Jean-Philippe Aumasson
+Samuel Neves
+Zooko Wilcox-O'Hearn
+Christian Winnerlein
+
+crypto_onetimeauth/poly1305/donna
+---------------------------------
+Andrew "floodyberry" M.

data/vendor/libsodium/ChangeLog

@@ -0,0 +1,68 @@
+
+* Version 0.4.5
+ - Restore compatibility with OSX <= 10.6
+
+* Version 0.4.4
+ - Visual Studio is officially supported (VC 2010 & VC 2013)
+ - mingw64 is now supported
+ - big-endian architectures are now supported as well
+ - The donna_c64 implementation of curve25519_donna_c64 now handles
+non-canonical points like the ref implementation
+ - Missing scalarmult_curve25519 and stream_salsa20 constants are now exported
+ - A crypto_onetimeauth_poly1305_ref() wrapper has been added
+
+* Version 0.4.3
+ - crypto_sign_seedbytes() and crypto_sign_SEEDBYTES were added.
+ - crypto_onetimeauth_poly1305_implementation_name() was added.
+ - poly1305-ref has been replaced by a faster implementation,
+Floodyberry's poly1305-donna-unrolled.
+ - Stackmarkings have been added to assembly code, for Hardened Gentoo.
+ - pkg-config can now be used in order to retrieve compilations flags for
+using libsodium.
+ - crypto_stream_aes256estream_*() can now deal with unaligned input
+on platforms that require word alignment.
+ - portability improvements.
+
+* Version 0.4.2
+ - All NaCl constants are now also exposed as functions.
+ - The Android and iOS cross-compilation script have been improved.
+ - libsodium can now be cross-compiled to Windows from Linux.
+ - libsodium can now be compiled with emscripten.
+ - New convenience function (prototyped in utils.h): sodium_bin2hex().
+
+* Version 0.4.1
+ - sodium_version_*() functions were not exported in version 0.4. They
+are now visible as intended.
+ - sodium_init() now calls randombytes_stir().
+ - optimized assembly version of salsa20 is now used on amd64.
+ - further cleanups and enhanced compatibility with non-C99 compilers.
+
+* Version 0.4
+ - Most constants and operations are now available as actual functions
+instead of macros, making it easier to use from other languages.
+ - New operation: crypto_generichash, featuring a variable key size, a
+variable output size, and a streaming API. Currently implemented using
+Blake2b.
+ - The package can be compiled in a separate directory.
+ - aes128ctr functions are exported.
+ - Optimized versions of curve25519 (curve25519_donna_c64), poly1305
+(poly1305_53) and ed25519 (ed25519_ref10) are available. Optionally calling
+sodium_init() once before using the library makes it pick the fastest
+implementation.
+ - New convenience function: sodium_memzero() in order to securely
+wipe a memory area.
+ - A whole bunch of cleanups and portability enhancements.
+ - On Windows, a .REF file is generated along with the shared library,
+for use with Visual Studio. The installation path for these has become
+$prefix/bin as expected by MingW.
+
+* Version 0.3
+ - The crypto_shorthash operation has been added, implemented using
+SipHash-2-4.
+
+* Version 0.2
+ - crypto_sign_seed_keypair() has been added
+
+* Version 0.1
+ - Initial release.
+

data/vendor/libsodium/LICENSE

@@ -0,0 +1,16 @@
+/*
+ * Copyright (c) 2013
+ * Frank Denis <j at pureftpd dot org>
+ *
+ * Permission to use, copy, modify, and distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */

data/vendor/libsodium/Makefile.am

@@ -0,0 +1,20 @@
+ACLOCAL_AMFLAGS = -I m4
+
+EXTRA_DIST = \
+	autogen.sh \
+	libsodium.sln \
+	libsodium.vcxproj \
+	libsodium.vcxproj.filters \
+	LICENSE \
+	README.markdown \
+	THANKS
+
+SUBDIRS = \
+	msvc-scripts \
+	src \
+	test
+
+if HAVE_PKG_CONFIG
+pkgconfigdir = $(libdir)/pkgconfig
+pkgconfig_DATA = @PACKAGE_NAME@.pc
+endif

data/vendor/libsodium/README

@@ -0,0 +1 @@
+See README.markdown

data/vendor/libsodium/README.markdown

@@ -0,0 +1,246 @@
+[![Build Status](https://travis-ci.org/jedisct1/libsodium.png?branch=master)](https://travis-ci.org/jedisct1/libsodium?branch=master)
+
+![libsodium](https://raw.github.com/jedisct1/libsodium/master/logo.png)
+============
+
+[NaCl](http://nacl.cr.yp.to/) (pronounced "salt") is a new easy-to-use
+high-speed software library for network communication, encryption,
+decryption, signatures, etc.
+
+NaCl's goal is to provide all of the core operations needed to build
+higher-level cryptographic tools.
+
+Sodium is a portable, cross-compilable, installable, packageable
+fork of NaCl, with a compatible API.
+
+## Is it full of NSA backdoors?
+
+![No NIST](http://i.imgur.com/HSxeAmp.png)
+
+The design of Sodium's primitives is completely free from NIST (and by
+association, NSA) influence, with the following minor exceptions:
+- The Poly1305 MAC, used for authenticating integrity of ciphertexts,
+uses AES as a replaceable component,
+- The Ed25519 digital signature algorithm uses SHA-512 for both key
+derivation and computing message digests,
+- APIs are provided to SHA-512 and SHA-512/256, but are replaceable by
+the Blake2 hash function, which the Sodium library also provides.
+
+The design choices, particularly in regard to the Curve25519
+Diffie-Hellman function, emphasize security (whereas NIST curves
+emphasize "performance" at the cost of security), and "magic
+constants" in NaCl/Sodium are picked by theorems designed to maximize
+security.
+
+The same cannot be said of NIST curves, where the specific origins of
+certain constants are not described by the standards and may be
+subject to malicious influence by the NSA.
+
+And despite the emphasis on higher security, primitives are faster
+across-the-board than most implementations of the NIST standards.
+
+## Portability
+
+In order to pick the fastest working implementation of each primitive,
+NaCl performs tests and benchmarks at compile-time. Unfortunately, the
+resulting library is not guaranteed to work on different hardware.
+
+Sodium performs tests at run-time, so that the same binary package can
+still run everywhere.
+
+Sodium is tested on a variety of compilers and operating systems,
+including Windows (with MingW or Visual Studio, x86 and x64), iOS and Android.
+
+## Installation
+
+Sodium is a shared library with a machine-independent set of
+headers, so that it can easily be used by 3rd party projects.
+
+The library is built using autotools, making it easy to package.
+
+Installation is trivial, and both compilation and testing can take
+advantage of multiple CPU cores.
+
+Download a
+[tarball of libsodium](https://download.libsodium.org/libsodium/releases/),
+then follow the ritual:
+
+    ./configure
+    make && make check && make install
+
+Pre-compiled Win32 packages are available for download at the same
+location.
+
+Integrity of source tarballs can currently be checked using PGP or
+verified DNS queries (`dig +dnssec +short txt <file>.download.libsodium.org`
+returns the SHA256 of any file available for download).
+
+## Comparison with vanilla NaCl
+
+Sodium does not ship C++ bindings. These might be part of a distinct
+package.
+
+The default public-key signature system in NaCl was a prototype that
+shouldn't be used any more.
+
+Sodium ships with the SUPERCOP reference implementation of
+[Ed25519](http://ed25519.cr.yp.to/), and uses this system by default
+for `crypto_sign*` operations.
+
+For backward compatibility, the previous system is still compiled in,
+as `crypto_sign_edwards25519sha512batch*`.
+
+## Additional features
+
+The Sodium library provides some convenience functions in order to retrieve
+the current version of the package and of the shared library:
+
+    const char *sodium_version_string(void);
+    const int   sodium_library_version_major(void);
+    const int   sodium_library_version_minor(void);
+
+Headers are installed in `${prefix}/include/sodium`.
+
+A convenience header includes everything you need to use the library:
+
+    #include <sodium.h>
+
+This is not required, however, before any other libsodium function, you can
+call:
+
+    sodium_init();
+
+This will pick optimized implementations of some primitives, if they
+appear to work as expected after running some tests, and these will be
+used for subsequent operations. It only need to be called once.
+
+This function is not thread-safe. No other Sodium functions should be
+called until it successfully returns. In a multithreading environment,
+if, for some reason, you really need to call `sodium_init()` while some
+other Sodium functions may be running in different threads, add locks
+accordingly (both around `sodium_init()` and around other functions).
+
+Sodium also provides helper functions to generate random numbers,
+leveraging `/dev/urandom` or `/dev/random` on *nix and the cryptographic
+service provider on Windows. The interface is similar to
+`arc4random(3)`. It is `fork(2)`-safe but not thread-safe. This holds
+true for `crypto_sign_keypair()` and `crypto_box_keypair()` as well.
+
+    uint32_t randombytes_random(void);
+
+Return a random 32-bit unsigned value.
+
+    void     randombytes_stir(void);
+
+Generate a new key for the pseudorandom number generator. The file
+descriptor for the entropy source is kept open, so that the generator
+can be reseeded even in a chroot() jail.
+
+    uint32_t randombytes_uniform(const uint32_t upper_bound);
+
+Return a value between 0 and upper_bound using a uniform distribution.
+
+    void     randombytes_buf(void * const buf, const size_t size);
+
+Fill the buffer `buf` with `size` random bytes.
+
+    int      randombytes_close(void);
+
+Close the file descriptor or the handle for the cryptographic service
+provider.
+
+A custom implementation of these functions can be registered with
+`randombytes_set_implementation()`.
+
+In addition, Sodium provides a function to securely wipe a memory
+region:
+
+    void     sodium_memzero(void * const pnt, const size_t size);
+    
+Warning: if a region has been allocated on the heap, you still have
+to make sure that it can't get swapped to disk, possibly using
+`mlock(2)`.
+
+In order to compare memory zones in constant time, Sodium provides:
+
+    int      sodium_memcmp(const void * const b1_, const void * const b2_,
+                           size_t size);
+
+And a convenience function for converting a binary buffer to a
+hexadecimal string:
+
+    char *   sodium_bin2hex(char * const hex, const size_t hexlen,
+                            const unsigned char *bin, const size_t binlen);
+
+## New operations
+
+### crypto_shorthash
+
+A lot of applications and programming language implementations have
+been recently found to be vulnerable to denial-of-service attacks when
+a hash function with weak security guarantees, like Murmurhash 3, was
+used to construct a hash table.
+
+In order to address this, Sodium provides the “shorthash” function,
+currently implemented using SipHash-2-4. This very fast hash function
+outputs short, but unpredictable (without knowing the secret key)
+values suitable for picking a list in a hash table for a given key.
+
+See `crypto_shorthash.h` for details.
+
+### crypto_generichash
+
+This hash function provides:
+
+* A variable output length (up to `crypto_generichash_BYTES_MAX` bytes)
+* A variable key length (from no key at all to
+  `crypto_generichash_KEYBYTES_MAX` bytes)
+* A simple interface as well as a streaming interface.
+
+`crypto_generichash` is currently being implemented using
+[Blake2](https://blake2.net/).
+
+## Constants available as functions
+
+In addition to constants for key sizes, output sizes and block sizes,
+Sodium provides these values through function calls, so that using
+them from different languages is easier.
+
+## Bindings for other languages
+
+* Erlang: [Erlang-NaCl](https://github.com/tonyg/erlang-nacl)
+* Haskell: [Saltine](https://github.com/tel/saltine)
+* Java: [Kalium](https://github.com/abstractj/kalium)
+* Java JNI: [Kalium-JNI](https://github.com/joshjdevl/kalium-jni)
+* Julia: [Sodium.jl](https://github.com/amitmurthy/Sodium.jl)
+* .NET: [libsodium-net](https://github.com/adamcaudill/libsodium-net)
+* Ocaml: [ocaml-sodium](https://github.com/dsheets/ocaml-sodium)
+* Pharo/Squeak: [Crypto-NaCl](http://www.eighty-twenty.org/index.cgi/tech/smalltalk/nacl-for-squeak-and-pharo-20130601.html)
+* PHP: [PHP-Sodium](https://github.com/alethia7/php-sodium)
+* Python: [PyNaCl](https://github.com/dstufft/pynacl)
+* Python: [PySodium](https://github.com/stef/pysodium)
+* Racket: part of [CRESTaceans](https://github.com/mgorlick/CRESTaceans/tree/master/bindings/libsodium)
+* Ruby: [RbNaCl](https://github.com/cryptosphere/rbnacl)
+* Ruby: [Sodium](https://github.com/stouset/sodium)
+
+## CurveCP
+
+CurveCP tools are part of a different project,
+[libchloride](https://github.com/jedisct1/libchloride).
+If you are interested in an embeddable CurveCP implementation, take a
+look at [libcurvecpr](https://github.com/impl/libcurvecpr).
+
+## Mailing list
+
+A mailing-list is available to discuss libsodium.
+
+In order to join, just send a random mail to `sodium-subscribe` {at}
+`pureftpd`{dot}`org`.
+
+## License
+
+[ISC license](http://en.wikipedia.org/wiki/ISC_license).
+
+See the `COPYING` file for details, `AUTHORS` for designers and
+implementors, and `THANKS` for contributors.
+