ruby_rncryptor 3.0.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: c80019973b935b1f0e103db228bf56c895354819
+  data.tar.gz: da313bcf46200818efa308af74bc2606bb1df055
+SHA512:
+  metadata.gz: 659d506bc5e569e0a1c449dee320d3a0f228df995510ec5094a7a3d617982fe9bc257d2fc27318051ea9392c8bd0dfc8ecd1faf97a5246fc41c96d911876b975
+  data.tar.gz: 8c0dc3e406987daceeb3931abefe86b74f70c74f7649f80dfad1ee5f3243ae4401be4afe2a72115fa917e0eec2e8cf6481000936fa63c851d4327d2f9ded78b4

data/lib/ruby_rncryptor.rb

@@ -0,0 +1,79 @@
+# RubyRNCryptor by Erik Wrenholt.
+# Based on data format described by Rob Napier 
+# https://github.com/rnapier/RNCryptor/wiki/Data-Format
+# MIT License
+
+require 'openssl'
+require 'securerandom'
+
+class RubyRNCryptor
+	include OpenSSL
+
+	def self.decrypt(data, password)
+
+		version =			data[0,1]
+		raise "RubyRNCryptor only decrypts version 2 or 3" unless (version == "\x02" || version == "\x03")
+		options =			data[1,1]
+		encryption_salt = 	data[2,8]
+		hmac_salt =			data[10,8]
+		iv =				data[18,16]
+		cipher_text =		data[34,data.length-66]
+		hmac =				data[data.length-32,32]
+				
+		msg = version + options + encryption_salt + hmac_salt + iv + cipher_text
+		
+		# Verify password is correct. First try with correct encoding
+		hmac_key = PKCS5.pbkdf2_hmac_sha1(password, hmac_salt, 10000, 32)
+		verified = [HMAC.hexdigest('sha256', hmac_key, msg)].pack('H*') == hmac
+
+		if !verified && version == "\x02"
+			# Version 2 Cocoa version truncated multibyte passwords, so try truncating.
+			password = RubyRNCryptor.truncate_multibyte_password(password)
+			hmac_key = PKCS5.pbkdf2_hmac_sha1(password, hmac_salt, 10000, 32)
+			verified = [HMAC.hexdigest('sha256', hmac_key, msg)].pack('H*') == hmac
+		end
+		
+		raise "Password may be incorrect, or the data has been corrupted. (HMAC could not be verified)" unless verified
+		
+		# HMAC was verified, now decrypt it.
+		cipher = Cipher::Cipher.new('aes-256-cbc')
+		cipher.decrypt
+		cipher.iv = iv
+		cipher.key = PKCS5.pbkdf2_hmac_sha1(password, encryption_salt, 10000, 32)
+
+		return cipher.update(cipher_text) + cipher.final
+	end
+
+	def self.encrypt(data, password, version = 3)
+
+		raise "RubyRNCryptor only encrypts version 2 or 3" unless (version == 2 || version == 3)
+		
+		version =			version.chr.to_s		# Currently version 3
+		options =			1.chr.to_s				# Uses password
+		encryption_salt =	SecureRandom.random_bytes(8)
+		hmac_salt =			SecureRandom.random_bytes(8)
+		iv =				SecureRandom.random_bytes(16)
+		cipher_text =		data[34,data.length-66]
+
+		hmac_key = PKCS5.pbkdf2_hmac_sha1(password, hmac_salt, 10000, 32)
+		
+		cipher = Cipher::Cipher.new('aes-256-cbc')
+		cipher.encrypt
+		cipher.iv = iv
+		cipher.key = PKCS5.pbkdf2_hmac_sha1(password, encryption_salt, 10000, 32)
+		cipher_text = cipher.update(data) + cipher.final
+
+		msg = version + options + encryption_salt + hmac_salt + iv + cipher_text
+		hmac = [HMAC.hexdigest('sha256', hmac_key, msg)].pack('H*')
+
+		return msg + hmac		 
+	end
+
+	def self.truncate_multibyte_password(str)
+		if str.bytes.to_a.count == str.length
+			return str
+		end
+		return str.bytes.to_a[0...str.length].map {|c| c.chr}.join
+	end
+	
+end

metadata

@@ -0,0 +1,44 @@
+--- !ruby/object:Gem::Specification
+name: ruby_rncryptor
+version: !ruby/object:Gem::Version
+  version: 3.0.0
+platform: ruby
+authors:
+- Erik Wrenholt
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2013-12-20 00:00:00.000000000 Z
+dependencies: []
+description: Encrypt and Decrypt the RNCryptor format.
+email: erik@timestretch.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/ruby_rncryptor.rb
+homepage: https://github.com/timestretch/RNCryptor/tree/master/ruby
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.0.14
+signing_key: 
+specification_version: 4
+summary: Encrypt and Decrypt the RNCryptor format
+test_files: []