rbnacl 3.0.0 → 3.0.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/.travis.yml +1 -1
- data/CHANGES.md +5 -0
- data/README.md +18 -28
- data/bascule.gpg +52 -0
- data/lib/rbnacl/init.rb +5 -1
- data/lib/rbnacl/sodium.rb +5 -1
- data/lib/rbnacl/version.rb +1 -1
- metadata +4 -4
- data/rbnacl.gpg +0 -30
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA1:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: b67cc643ca784918a3ac35d13c2cb942e494eab9
|
|
4
|
+
data.tar.gz: 685f56452c4193577b759c5f6c29695c156c644b
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: c3cd45824f3f0510d497f932cfb6cff78c8ec70c2f13560f39d24c6bc7e00733b7611591c18700e6e4976c54b8c8aabafda86ab91649ba6384f22595a5513134
|
|
7
|
+
data.tar.gz: e4b7f9a7ccffc5146bb5dbf4358055d6271ef52fd7bba8ca993d874496ae5e79dda972542e53446b8f14a7c1f1b54276a19c6208feda9cf05d12d9441ab9faea
|
data/.travis.yml
CHANGED
data/CHANGES.md
CHANGED
|
@@ -1,3 +1,8 @@
|
|
|
1
|
+
3.0.1 (2014-05-12)
|
|
2
|
+
------------------
|
|
3
|
+
* Load gem from RBNACL_LIBSODIUM_GEM_LIB_PATH if set. Used by rbnacl-libsodium
|
|
4
|
+
gem to use libsodium compiled from a gem.
|
|
5
|
+
|
|
1
6
|
3.0.0 (2014-04-22)
|
|
2
7
|
------------------
|
|
3
8
|
* Rename RandomNonceBox to SimpleBox (backwards compatibility preserved)
|
data/README.md
CHANGED
|
@@ -78,6 +78,16 @@ for information regarding installation:
|
|
|
78
78
|
|
|
79
79
|
https://github.com/jedisct1/libsodium
|
|
80
80
|
|
|
81
|
+
For FreeBSD users, libsodium is available both via pkgng and ports. To install
|
|
82
|
+
a binary package:
|
|
83
|
+
|
|
84
|
+
pkg install libsodium
|
|
85
|
+
|
|
86
|
+
To install from ports on FreeBSD, use your favorite ports front end (e.g.
|
|
87
|
+
portmaster or portupgrade), or use make as follows:
|
|
88
|
+
|
|
89
|
+
cd /usr/ports/security/libsodium; make install clean
|
|
90
|
+
|
|
81
91
|
For OS X users, libsodium is available via homebrew and can be installed with:
|
|
82
92
|
|
|
83
93
|
brew install libsodium
|
|
@@ -107,6 +117,7 @@ Inside of your Ruby program do:
|
|
|
107
117
|
RbNaCl's documentation can be found [in the Wiki][wiki]. The following features
|
|
108
118
|
are supported:
|
|
109
119
|
|
|
120
|
+
* [SimpleBox]: easy-to-use public-key or secret-key encryption "on Rails"
|
|
110
121
|
* [Secret-key Encryption][secretkey]: authenticated symmetric encryption using a
|
|
111
122
|
single key shared among parties
|
|
112
123
|
* [Public-key Encryption][publickey]: securely send messages to a given public
|
|
@@ -124,6 +135,7 @@ information.
|
|
|
124
135
|
[RDoc documentation][rdoc] is also available.
|
|
125
136
|
|
|
126
137
|
[wiki]: https://github.com/cryptosphere/rbnacl/wiki
|
|
138
|
+
[simplebox]: https://github.com/cryptosphere/rbnacl/wiki/SimpleBox
|
|
127
139
|
[secretkey]: https://github.com/cryptosphere/rbnacl/wiki/Secret-Key-Encryption
|
|
128
140
|
[publickey]: https://github.com/cryptosphere/rbnacl/wiki/Public-Key-Encryption
|
|
129
141
|
[signatures]: https://github.com/cryptosphere/rbnacl/wiki/Digital-Signatures
|
|
@@ -141,32 +153,6 @@ by professional cryptographers.
|
|
|
141
153
|
|
|
142
154
|
That said, it's probably still a million times better than OpenSSL...
|
|
143
155
|
|
|
144
|
-
## Using Signed Gems
|
|
145
|
-
|
|
146
|
-
The RbNaCl gem is signed by Tony Arcieri's certificate, which identifies
|
|
147
|
-
as `bascule@gmail.com`. You can obtain the official certificate with:
|
|
148
|
-
|
|
149
|
-
```
|
|
150
|
-
curl https://raw.github.com/cryptosphere/rbnacl/master/bascule.cert > /tmp/bascule.cert
|
|
151
|
-
gem cert -a /tmp/bascule.cert
|
|
152
|
-
```
|
|
153
|
-
|
|
154
|
-
You can verify the authenticity of bascule.cert by its SHA256 hash:
|
|
155
|
-
|
|
156
|
-
```
|
|
157
|
-
$ shasum -a 256 bascule.cert
|
|
158
|
-
6e8b7e53d347ca6c6d214efef2b923aadecdd7650565f0eb1d8d0419723ae20c bascule.cert
|
|
159
|
-
```
|
|
160
|
-
|
|
161
|
-
If you get a different number than `6e8b7e53...`, this is not the cert you are
|
|
162
|
-
looking for!
|
|
163
|
-
|
|
164
|
-
If you'd like to install the gem in high security mode, run:
|
|
165
|
-
|
|
166
|
-
```
|
|
167
|
-
gem install rbnacl-1.0.0.gem -P HighSecurity
|
|
168
|
-
```
|
|
169
|
-
|
|
170
156
|
## Reporting Security Problems
|
|
171
157
|
|
|
172
158
|
If you have discovered a bug in RbNaCl of a sensitive nature, i.e.
|
|
@@ -174,11 +160,11 @@ one which can compromise the security of RbNaCl users, you can
|
|
|
174
160
|
report it securely by sending a GPG encrypted message. Please use
|
|
175
161
|
the following key:
|
|
176
162
|
|
|
177
|
-
https://raw.github.com/cryptosphere/rbnacl/master/
|
|
163
|
+
https://raw.github.com/cryptosphere/rbnacl/master/bascule.gpg
|
|
178
164
|
|
|
179
165
|
The key fingerprint is (or should be):
|
|
180
166
|
|
|
181
|
-
`
|
|
167
|
+
`25C1 198A C8A1 8212 7D24 E665 666B AFA9 D77E E055`
|
|
182
168
|
|
|
183
169
|
## Learn More
|
|
184
170
|
|
|
@@ -208,6 +194,10 @@ Coursera offers from Stanford University Professor Dan Boneh:
|
|
|
208
194
|
|
|
209
195
|
Only if your military understands twisted Edwards curves
|
|
210
196
|
|
|
197
|
+
### Is it "Bank Grade™"?
|
|
198
|
+
|
|
199
|
+
No, that means 3DES, which this library doesn't support, sorry
|
|
200
|
+
|
|
211
201
|
### Does it have a lock with a checkmark?
|
|
212
202
|
|
|
213
203
|
Sure, here you go:
|
data/bascule.gpg
ADDED
|
@@ -0,0 +1,52 @@
|
|
|
1
|
+
-----BEGIN PGP PUBLIC KEY BLOCK-----
|
|
2
|
+
Version: GnuPG v1
|
|
3
|
+
|
|
4
|
+
mQINBFNXTYEBEADG3Vk/ZLx6Uuw2e7SDZuyBCssszjQ+Zkkd4v1at0oinXMNBv7h
|
|
5
|
+
oRCUnx0xkHGKCeMYEWlpLKIQBQ8ngPpD1agsBlTB+dkcerADduUeiL0ftbc57lqu
|
|
6
|
+
Jss32JFQzoVybhfA1LPMnNndgNMCfKneCxftirsRIxOZg7tDvYBbRZIpFzcn8B6N
|
|
7
|
+
n3KgDqE4xZaR3N66lJhuW1exS0jHJiZ8l9IJv1zVtSinoFb5VdohPU3UnTG2rCw9
|
|
8
|
+
fIqic1ZPNFmBSMcowENulDxhfxywcJbXzGd2GA2959d3CgL+mSHNQk4etPM7Hnw1
|
|
9
|
+
rUWA84EQM+eSmI/fSNMIQKCc/Ds5JI0ZDm0ej0+LpZru6UpwDzpiviNFfIxx0ztJ
|
|
10
|
+
RQ04yRhOswpJAVNtarL6xVsXjyDqe1j+/RUkWQLAyKvasCUNAfEidI52uSG1NscB
|
|
11
|
+
dpqsj4D66FSnFKljdv9FkpcwfpkgyDh9dg134RzzpuWBZF2et0Gpu7T8SwbzfdaF
|
|
12
|
+
FdlIod9EE1gV/Ngc4mjy3Em+63mRXVcLa5cuLMh4N2rY4s//yz7dRV+J7xvyi/FH
|
|
13
|
+
QfOr+YcvrGrcuta3PZ0sEBBwD1ZoLv4mvtE8+V2DYA/ym7reuiBlJcLJnOX/Y4b4
|
|
14
|
+
+5oofRcZBdX8ts/nTGCp42ESm8by5mj1bjRBvJXpbvmDh0leTBWRHaLnkwARAQAB
|
|
15
|
+
tCpUb255IEFyY2llcmkgKGJhc2N1bGUpIDxiYXNjdWxlQGdtYWlsLmNvbT6JAj4E
|
|
16
|
+
EwECACgFAlNXTYECGwMFCQPCZwAGCwkIBwMCBhUIAgkKCwQWAgMBAh4BAheAAAoJ
|
|
17
|
+
EGZrr6nXfuBVAc4P/jITN+3drmiw87A0SfyqyxGAmkyDTzXRJqC85LoCehGaBqrn
|
|
18
|
+
APHKV4YRuN771WDnFGv9EjsrV4az8evsJ1A/mHHxj6kNKtoF45XTzUDk/dGAxh/0
|
|
19
|
+
YmpZ7d9iZS0mKNw0OTLGbVsP4Jtfn71uSVujSn805bxjKBDsfXglRb6JFLPhA35R
|
|
20
|
+
iD4K/kjRhFpyL4zo2Ymvrqe715oDtOLBX9AcGW9KjEQ6ytsC2Gbx+apv0kocmfec
|
|
21
|
+
PjVQgZVI6MugHvgEvQLogSMthKfMnxt1+3dgYQ3OyAF1os9BNq3DsG1PXfiCQyNi
|
|
22
|
+
I6weV7aMltIVItaIlBdQ9FpwTzU6ZVXi8Qd9PX1SYea3cpYD1IZL92oJMBYBgOKY
|
|
23
|
+
kUU0K5ABdNdLtEPpKDf75c01c5amDJdahOID6dDqKmLDy48NAazzDtMIN1p7fsBJ
|
|
24
|
+
LyR0BA16ds34jE8huJfvI1GwMldnVxsJhmqxveYDEKQV/KDOJ3AV1iWPa1A5EUVa
|
|
25
|
+
EEhdpq6JcIhTq+5ips7K17cjMB+c95WpNCq6zQ4BXQmSce9Hz+1VAa1wogyeakR5
|
|
26
|
+
JseJEkwgQeYgU8ZiQKgQUDNFFNGMOkq8MCRki7LScfivMz8d1yTk2VBmZ/sN0RTn
|
|
27
|
+
izlT7TY6451UalCFiPSoMDxjClaFrLD3wDTR4exyvgUopWubbHDntUYFUEvBuQIN
|
|
28
|
+
BFNXTYEBEADBtXebb611svSJeDnSfbKb1935iYmeve7sx+dsZz03hgjTxmxG3fk5
|
|
29
|
+
auWusMyHeFZPp7SCE+nI3u0quzB0npW4mxpICxQGDy9rNMT3vHfKtJyoQph/CUPB
|
|
30
|
+
jGUUDWF+bwGVzIXmZwO7ic2KvL/p9g3EM6aAvNYI7NwwmOBCF19Qi2J2GRPbd/YT
|
|
31
|
+
Ans25AR4BmxrW8+HyENgnlPBNB9W9f+nqE7DukiYHtY+7VdC8j9XHmgW2ukDZLQd
|
|
32
|
+
eobl5XvwpZEpntRO6qCw0vP9diNfQhhaUZz5MRJlmJwa3xd/HFtbjo7RMwUXXZcw
|
|
33
|
+
Bvj0WAa+lNuOAYC2g03w/LIhll4Eq6FJwmHTvaTki9m/Ib9ucCz9aJiqwp3qH1F2
|
|
34
|
+
f0ASOJPfU5k7XNnhfZhY+tiaXwSQBYjkK5IiwmcVWcixfAjavnE6vGbUda0gHNYG
|
|
35
|
+
fQ93OhAsRd1lGv3w4r9aAZg8kMA/dg9XvB92/NkPABIj1frEhI1ptUVnrNovX7XU
|
|
36
|
+
N/eN6UsjWMxUyplKO9QLbliSXfRE55/anmej9WvrQ9MYGEcvoShEpC4Uv2oSZWHH
|
|
37
|
+
6Fc7ZJ9Mf4JB4vFRy2+zNdvPEon4ZJalW14Cu3aKzFLb7BuscsJ8nT13POKpqqhI
|
|
38
|
+
7bPt9ApVOgAXPRqCko5U5M5O0fsBDrFK8czLWxR+M5ef5YvpYMsyLwARAQABiQIl
|
|
39
|
+
BBgBAgAPBQJTV02BAhsMBQkDwmcAAAoJEGZrr6nXfuBVhxUP/0CeBdkTy0FdLx9R
|
|
40
|
+
2wBFVjFmbgRqzP2XC+2QJlLxVFFluG9eEMOdK7jHPu6CrZxo0OYx7k7eI+m8Os6F
|
|
41
|
+
tWsJaAmSkiMpqOWvy/jGH9bwoVDnHJ4BbBw9pbqWw9zba62QQ2vK4qAbGK8JS7Mz
|
|
42
|
+
b4M012k5IxD10CWdN85TdCDVFjHCLkdUYEmqx0ibugL1hcpEBWZlM3CFa8Jl/X04
|
|
43
|
+
HLgBl6CTN++7MQa11TfLL7DkjPTBe7/LwMRMigUEQUmJpVNNHuL9jnvzJcylscKJ
|
|
44
|
+
0u8uwk1StNtz/fwTsFV5s5ilg0dt+/hSB+TQbr7uI9PPgWPrGQIa1EzkjflaWYJd
|
|
45
|
+
hB4R44c5iYeRpGZoiXh5bm82yxGmIleRKJtRZ8OYJy/2QRFfhG1sS24FYZWojwve
|
|
46
|
+
0A7wguMB8SSfOj6cMo14sPe38h1w7XuDrvc4HshRNoB+7SYuqH2wQRd8GdkkX0SP
|
|
47
|
+
xfJy+3H9Mq1vGWHM5ZqVpA2QEEGArVuUh6TwjqB1gUvcoNFFZ5jLS4O06r7sNxrx
|
|
48
|
+
4udMZXdmYiztQzOak3rGI8bE4NwXRsJdiAnRC6pfhJmoVGI+y0dkkQfPaZEoiAHA
|
|
49
|
+
DGnZHqa7tnlSe7LcbC8FpCnSmaEEhx9blDv6z7vYZaCkNiGb3tIeHEeOm5wLsByC
|
|
50
|
+
8VqIziiGfWBn7c9CNBhHoBsTb/oK
|
|
51
|
+
=EFdK
|
|
52
|
+
-----END PGP PUBLIC KEY BLOCK-----
|
data/lib/rbnacl/init.rb
CHANGED
|
@@ -3,7 +3,11 @@ module RbNaCl
|
|
|
3
3
|
# Defines the libsodium init function
|
|
4
4
|
module Init
|
|
5
5
|
extend FFI::Library
|
|
6
|
-
|
|
6
|
+
if defined?(RBNACL_LIBSODIUM_GEM_LIB_PATH)
|
|
7
|
+
ffi_lib RBNACL_LIBSODIUM_GEM_LIB_PATH
|
|
8
|
+
else
|
|
9
|
+
ffi_lib 'sodium'
|
|
10
|
+
end
|
|
7
11
|
|
|
8
12
|
attach_function :sodium_init, [], :int
|
|
9
13
|
end
|
data/lib/rbnacl/sodium.rb
CHANGED
data/lib/rbnacl/version.rb
CHANGED
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: rbnacl
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 3.0.
|
|
4
|
+
version: 3.0.1
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Tony Arcieri
|
|
@@ -10,7 +10,7 @@ autorequire:
|
|
|
10
10
|
bindir: bin
|
|
11
11
|
cert_chain:
|
|
12
12
|
- bascule.cert
|
|
13
|
-
date: 2014-
|
|
13
|
+
date: 2014-05-13 00:00:00.000000000 Z
|
|
14
14
|
dependencies:
|
|
15
15
|
- !ruby/object:Gem::Dependency
|
|
16
16
|
name: ffi
|
|
@@ -88,6 +88,7 @@ files:
|
|
|
88
88
|
- README.md
|
|
89
89
|
- Rakefile
|
|
90
90
|
- bascule.cert
|
|
91
|
+
- bascule.gpg
|
|
91
92
|
- images/dragons.png
|
|
92
93
|
- images/ed25519.png
|
|
93
94
|
- images/hash.png
|
|
@@ -122,7 +123,6 @@ files:
|
|
|
122
123
|
- lib/rbnacl/util.rb
|
|
123
124
|
- lib/rbnacl/version.rb
|
|
124
125
|
- rbnacl.gemspec
|
|
125
|
-
- rbnacl.gpg
|
|
126
126
|
- spec/rbnacl/authenticators/poly1305_spec.rb
|
|
127
127
|
- spec/rbnacl/boxes/curve25519xsalsa20poly1305/private_key_spec.rb
|
|
128
128
|
- spec/rbnacl/boxes/curve25519xsalsa20poly1305/public_key_spec.rb
|
|
@@ -166,7 +166,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
166
166
|
version: '0'
|
|
167
167
|
requirements: []
|
|
168
168
|
rubyforge_project:
|
|
169
|
-
rubygems_version: 2.2.
|
|
169
|
+
rubygems_version: 2.2.2
|
|
170
170
|
signing_key:
|
|
171
171
|
specification_version: 4
|
|
172
172
|
summary: The Networking and Cryptography (NaCl) library provides a high-level toolkit
|
data/rbnacl.gpg
DELETED
|
@@ -1,30 +0,0 @@
|
|
|
1
|
-
-----BEGIN PGP PUBLIC KEY BLOCK-----
|
|
2
|
-
Version: GnuPG v1.4.12 (Darwin)
|
|
3
|
-
|
|
4
|
-
mQENBFE2gC4BCADG/9ea48mbfT4Odzi6JLXQMt2z4Md6zO52O1w8RvA32hgx+Sm4
|
|
5
|
-
4amvwMGb44WXQkSCp//X4YWcZ+WAefZDz8VSfsvQ11CLAnnGPuKiItFCkmDCL0iV
|
|
6
|
-
2PrHQ3oZ8kfd3/f8qKPZI+TcPmJw1ttF/ugcly7zndCQq+17G/nMYNIxltegtfxm
|
|
7
|
-
AHGeuzgfG6r/IbvBrMgvAmV2+0/CnCpuuuIiSqkp9TnBH3rYl2x4ewwGrgp3GrGT
|
|
8
|
-
OLm/qEKNHbQGa8Q+yaHJczTJ5fNxEdVllEAfVhYPuEoBLDm4fjkgGS98nr9+T7pF
|
|
9
|
-
9M1IfmszfyenWut6RF1lfRrZQD7v02K7XOIXABEBAAG0JVRvbnkgQXJjaWVyaSA8
|
|
10
|
-
dG9ueS5hcmNpZXJpQGdtYWlsLmNvbT6JAT4EEwECACgFAlE2gC4CGwMFCQHhM4AG
|
|
11
|
-
CwkIBwMCBhUIAgkKCwQWAgMBAh4BAheAAAoJELIQJp27LYeHjwQH/jktme/Uzxhp
|
|
12
|
-
jodHv9iTUbaNi3PSjmNZJAzmtvsJzavrP2EuYomOK2Z0K387HbWPQpRGNxMzF85X
|
|
13
|
-
71YYRCGCsja6sFFaiVE5EOzbQVAdT0gyE7U/iPImbqtXAH9WdbxqgjrvnECwDsod
|
|
14
|
-
WyzGaanfbcF9E3b+od/CcjSpcsOJkuxZXwrZKxP9ehvy5dobYrLfageXVxJdj1rs
|
|
15
|
-
4tuD5IsIQnqW3uUzfaAOLS0oh6e4faDV5232Gva/y7j2fs235ceuHGv24iYf2NAE
|
|
16
|
-
c7rfnOpqT2/3ezNwqpNqE1RH2p1LgtmNkOn7z0iyck171WpCNUaDzT2QVMW1sVEQ
|
|
17
|
-
OQzIVvzM6DC5AQ0EUTaALgEIALCnnwjepJiWFYy6iSMDOZ4g6ifxOPdmlQp0SF83
|
|
18
|
-
BqbEuhr19EBb8Z3BTewIeszwiozCrYyE3Z/hXwJX9JcsTd+YlNE93IMXWq0Dvr2u
|
|
19
|
-
YPhXg4z7Ni9geJaCuQVu4R6pGHI9Irw2F/+xBvccS8nf+xzPsqcqZkFnal5ohCR2
|
|
20
|
-
Z4eXUI26La9qq9j5K6SGMemGwt9FKLXDuInOWSWpiztQBpEo66d8LGqvvHGUUTYH
|
|
21
|
-
LEsJzItLFTHOxTySvjt+9bVWgtXl5iLiR+dAL03Yf6J6E+Dzu12ELoq1kI/M6c0f
|
|
22
|
-
cczmhGT9+9PJfqg2A6MjAF5JEQUVa1HlDH9vnfwSc8nm0qUAEQEAAYkBJQQYAQIA
|
|
23
|
-
DwUCUTaALgIbDAUJAeEzgAAKCRCyECaduy2Hh19aB/93WEEPqVAFzo04f8P27KTw
|
|
24
|
-
n+UiVTTxLkEBNbUHqNDBwWZLBUhzDxoEI21OyAxMzJEj80GXyFtLBMO+lbzz8MvI
|
|
25
|
-
IcfLS3zXaeEFO+fofKbfilvzezSzslPTjxFx0He8C/SjggWVIRPfv5hpoyyx4FXW
|
|
26
|
-
a6ZmA5G29O2J85VhZr8EQuykB10K9tIGIgfpuvjfeL8K30rgPGPfwbZP7/U33Yxs
|
|
27
|
-
qwAwsd6Ej98U8TGUr/tTSVztjg7inWwkL84I3DnfedOn4ofVDetDvtjuaJcc16Z5
|
|
28
|
-
QspnbOIn+KGOcdodZQKglj4Esal0W3kg56Du9M5xzmfEB2UeK5aMTL5akoCjs9aK
|
|
29
|
-
=64l+
|
|
30
|
-
-----END PGP PUBLIC KEY BLOCK-----
|