ruby_rncryptor_secured 1.0.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 787594561e48e0d6c41efa06fe055ae0890e24f5
+  data.tar.gz: 6f8056e3845aa22abe770a0b9b8656f041e7abc0
+SHA512:
+  metadata.gz: c2c58acd3235120340d1522856afff379749fff15915cabe87394bb17b2b98a1b87444527d6ce7cd7a676604045f8cc2e423b6a5574f59386deb0ad0270a7821
+  data.tar.gz: 135e3ab2f5ba0ecfb243a477c739eb065dbe3aacd677e285a07697dd86699515085f0ac7467dac3f4a9985013123d8c4d20d4396b81431c0b2218fc12b8a5386

data/lib/ruby_rncryptor.rb

@@ -0,0 +1,79 @@
+# RubyRNCryptor by Erik Wrenholt.
+# Based on data format described by Rob Napier 
+# https://github.com/rnapier/RNCryptor/wiki/Data-Format
+# MIT License
+
+require 'openssl'
+require 'securerandom'
+
+class RubyRNCryptor
+	include OpenSSL
+
+	def self.decrypt(data, password)
+
+		version =			data[0,1]
+		raise "RubyRNCryptor only decrypts version 2 or 3" unless (version == "\x02" || version == "\x03")
+		options =			data[1,1]
+		encryption_salt = 	data[2,8]
+		hmac_salt =			data[10,8]
+		iv =				data[18,16]
+		cipher_text =		data[34,data.length-66]
+		hmac =				data[data.length-32,32]
+				
+		msg = version + options + encryption_salt + hmac_salt + iv + cipher_text
+		
+		# Verify password is correct. First try with correct encoding
+		hmac_key = PKCS5.pbkdf2_hmac_sha1(password, hmac_salt, 10000, 32)
+		verified = [HMAC.hexdigest('sha256', hmac_key, msg)].pack('H*') == hmac
+
+		if !verified && version == "\x02"
+			# Version 2 Cocoa version truncated multibyte passwords, so try truncating.
+			password = RubyRNCryptor.truncate_multibyte_password(password)
+			hmac_key = PKCS5.pbkdf2_hmac_sha1(password, hmac_salt, 10000, 32)
+			verified = [HMAC.hexdigest('sha256', hmac_key, msg)].pack('H*') == hmac
+		end
+		
+		raise "Password may be incorrect, or the data has been corrupted. (HMAC could not be verified)" unless verified
+		
+		# HMAC was verified, now decrypt it.
+		cipher = Cipher::Cipher.new('aes-256-cbc')
+		cipher.decrypt
+		cipher.iv = iv
+		cipher.key = PKCS5.pbkdf2_hmac_sha1(password, encryption_salt, 10000, 32)
+
+		return cipher.update(cipher_text) + cipher.final
+	end
+
+	def self.encrypt(data, password, version = 3)
+
+		raise "RubyRNCryptor only encrypts version 2 or 3" unless (version == 2 || version == 3)
+		
+		version =			version.chr.to_s		# Currently version 3
+		options =			1.chr.to_s				# Uses password
+		encryption_salt =	SecureRandom.random_bytes(8)
+		hmac_salt =			SecureRandom.random_bytes(8)
+		iv =				SecureRandom.random_bytes(16)
+		cipher_text =		data[34,data.length-66]
+
+		hmac_key = PKCS5.pbkdf2_hmac_sha1(password, hmac_salt, 10000, 32)
+		
+		cipher = Cipher::Cipher.new('aes-256-cbc')
+		cipher.encrypt
+		cipher.iv = iv
+		cipher.key = PKCS5.pbkdf2_hmac_sha1(password, encryption_salt, 10000, 32)
+		cipher_text = cipher.update(data) + cipher.final
+
+		msg = version + options + encryption_salt + hmac_salt + iv + cipher_text
+		hmac = [HMAC.hexdigest('sha256', hmac_key, msg)].pack('H*')
+
+		return msg + hmac		 
+	end
+
+	def self.truncate_multibyte_password(str)
+		if str.bytes.to_a.count == str.length
+			return str
+		end
+		return str.bytes.to_a[0...str.length].map {|c| c.chr}.join
+	end
+	
+end

metadata

@@ -0,0 +1,44 @@
+--- !ruby/object:Gem::Specification
+name: ruby_rncryptor_secured
+version: !ruby/object:Gem::Version
+  version: 1.0.0
+platform: ruby
+authors:
+- Dheena Erik Wrenholt
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2015-12-04 00:00:00.000000000 Z
+dependencies: []
+description: Encrypt and Decrypt the RNCryptor format - By Erik Wrenholt.
+email: dheenaindian@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/ruby_rncryptor.rb
+homepage: https://github.com/timestretch/RNCryptor/tree/master/ruby
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.4.8
+signing_key: 
+specification_version: 4
+summary: Encrypt and Decrypt the RNCryptor format
+test_files: []