securerandom 0.2.2 → 0.3.1
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/.document +4 -0
- data/.github/workflows/test.yml +11 -4
- data/docs/random.rb +10 -0
- data/lib/random/formatter.rb +131 -3
- data/lib/securerandom.rb +14 -11
- data/securerandom.gemspec +9 -2
- metadata +5 -3
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 154280692de39feb39b719344f5c47fd256decdb5bd71cf80cb54b87ef155bd3
|
4
|
+
data.tar.gz: 0aab5a7dc6e671530e0327bcad3bf9d4caae862fed9925bc9cdcc47a57eae68f
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 99c06212cd3c4908e1bf9c2a459e7f3cc851fbb38396256932787b9725b7aaad7873c7b3ac00bfde458bd2316f1e38e02e62734d0df43d1d1c6ca29c2905ea3c
|
7
|
+
data.tar.gz: c8680a7e9566fcd2d064560c46046f7bc97d1e3b257613c7396306912fac01dcb810f20604e87c4914c327cc1d0f66c3ae8fc952b40f75bec58f520da2f7c627
|
data/.document
ADDED
data/.github/workflows/test.yml
CHANGED
@@ -1,17 +1,24 @@
|
|
1
|
-
name:
|
1
|
+
name: test
|
2
2
|
|
3
3
|
on: [push, pull_request]
|
4
4
|
|
5
5
|
jobs:
|
6
|
-
|
6
|
+
ruby-versions:
|
7
|
+
uses: ruby/actions/.github/workflows/ruby_versions.yml@master
|
8
|
+
with:
|
9
|
+
engine: cruby
|
10
|
+
min_version: 2.6
|
11
|
+
|
12
|
+
test:
|
13
|
+
needs: ruby-versions
|
7
14
|
name: build (${{ matrix.ruby }} / ${{ matrix.os }})
|
8
15
|
strategy:
|
9
16
|
matrix:
|
10
|
-
ruby:
|
17
|
+
ruby: ${{ fromJson(needs.ruby-versions.outputs.versions) }}
|
11
18
|
os: [ ubuntu-latest, macos-latest, windows-latest ]
|
12
19
|
runs-on: ${{ matrix.os }}
|
13
20
|
steps:
|
14
|
-
- uses: actions/checkout@
|
21
|
+
- uses: actions/checkout@v4
|
15
22
|
- name: Set up Ruby
|
16
23
|
uses: ruby/setup-ruby@v1
|
17
24
|
with:
|
data/docs/random.rb
ADDED
data/lib/random/formatter.rb
CHANGED
@@ -174,6 +174,125 @@ module Random::Formatter
|
|
174
174
|
"%08x-%04x-%04x-%04x-%04x%08x" % ary
|
175
175
|
end
|
176
176
|
|
177
|
+
alias uuid_v4 uuid
|
178
|
+
|
179
|
+
# Generate a random v7 UUID (Universally Unique IDentifier).
|
180
|
+
#
|
181
|
+
# require 'random/formatter'
|
182
|
+
#
|
183
|
+
# Random.uuid_v7 # => "0188d4c3-1311-7f96-85c7-242a7aa58f1e"
|
184
|
+
# Random.uuid_v7 # => "0188d4c3-16fe-744f-86af-38fa04c62bb5"
|
185
|
+
# Random.uuid_v7 # => "0188d4c3-1af8-764f-b049-c204ce0afa23"
|
186
|
+
# Random.uuid_v7 # => "0188d4c3-1e74-7085-b14f-ef6415dc6f31"
|
187
|
+
# # |<--sorted-->| |<----- random ---->|
|
188
|
+
#
|
189
|
+
# # or
|
190
|
+
# prng = Random.new
|
191
|
+
# prng.uuid_v7 # => "0188ca51-5e72-7950-a11d-def7ff977c98"
|
192
|
+
#
|
193
|
+
# The version 7 UUID starts with the least significant 48 bits of a 64 bit
|
194
|
+
# Unix timestamp (milliseconds since the epoch) and fills the remaining bits
|
195
|
+
# with random data, excluding the version and variant bits.
|
196
|
+
#
|
197
|
+
# This allows version 7 UUIDs to be sorted by creation time. Time ordered
|
198
|
+
# UUIDs can be used for better database index locality of newly inserted
|
199
|
+
# records, which may have a significant performance benefit compared to random
|
200
|
+
# data inserts.
|
201
|
+
#
|
202
|
+
# The result contains 74 random bits (9.25 random bytes).
|
203
|
+
#
|
204
|
+
# Note that this method cannot be made reproducable because its output
|
205
|
+
# includes not only random bits but also timestamp.
|
206
|
+
#
|
207
|
+
# See draft-ietf-uuidrev-rfc4122bis[https://datatracker.ietf.org/doc/draft-ietf-uuidrev-rfc4122bis/]
|
208
|
+
# for details of UUIDv7.
|
209
|
+
#
|
210
|
+
# ==== Monotonicity
|
211
|
+
#
|
212
|
+
# UUIDv7 has millisecond precision by default, so multiple UUIDs created
|
213
|
+
# within the same millisecond are not issued in monotonically increasing
|
214
|
+
# order. To create UUIDs that are time-ordered with sub-millisecond
|
215
|
+
# precision, up to 12 bits of additional timestamp may added with
|
216
|
+
# +extra_timestamp_bits+. The extra timestamp precision comes at the expense
|
217
|
+
# of random bits. Setting <tt>extra_timestamp_bits: 12</tt> provides ~244ns
|
218
|
+
# of precision, but only 62 random bits (7.75 random bytes).
|
219
|
+
#
|
220
|
+
# prng = Random.new
|
221
|
+
# Array.new(4) { prng.uuid_v7(extra_timestamp_bits: 12) }
|
222
|
+
# # =>
|
223
|
+
# ["0188d4c7-13da-74f9-8b53-22a786ffdd5a",
|
224
|
+
# "0188d4c7-13da-753b-83a5-7fb9b2afaeea",
|
225
|
+
# "0188d4c7-13da-754a-88ea-ac0baeedd8db",
|
226
|
+
# "0188d4c7-13da-7557-83e1-7cad9cda0d8d"]
|
227
|
+
# # |<--- sorted --->| |<-- random --->|
|
228
|
+
#
|
229
|
+
# Array.new(4) { prng.uuid_v7(extra_timestamp_bits: 8) }
|
230
|
+
# # =>
|
231
|
+
# ["0188d4c7-3333-7a95-850a-de6edb858f7e",
|
232
|
+
# "0188d4c7-3333-7ae8-842e-bc3a8b7d0cf9", # <- out of order
|
233
|
+
# "0188d4c7-3333-7ae2-995a-9f135dc44ead", # <- out of order
|
234
|
+
# "0188d4c7-3333-7af9-87c3-8f612edac82e"]
|
235
|
+
# # |<--- sorted -->||<---- random --->|
|
236
|
+
#
|
237
|
+
# Any rollbacks of the system clock will break monotonicity. UUIDv7 is based
|
238
|
+
# on UTC, which excludes leap seconds and can rollback the clock. To avoid
|
239
|
+
# this, the system clock can synchronize with an NTP server configured to use
|
240
|
+
# a "leap smear" approach. NTP or PTP will also be needed to synchronize
|
241
|
+
# across distributed nodes.
|
242
|
+
#
|
243
|
+
# Counters and other mechanisms for stronger guarantees of monotonicity are
|
244
|
+
# not implemented. Applications with stricter requirements should follow
|
245
|
+
# {Section 6.2}[https://www.ietf.org/archive/id/draft-ietf-uuidrev-rfc4122bis-07.html#monotonicity_counters]
|
246
|
+
# of the specification.
|
247
|
+
#
|
248
|
+
def uuid_v7(extra_timestamp_bits: 0)
|
249
|
+
case (extra_timestamp_bits = Integer(extra_timestamp_bits))
|
250
|
+
when 0 # min timestamp precision
|
251
|
+
ms = Process.clock_gettime(Process::CLOCK_REALTIME, :millisecond)
|
252
|
+
rand = random_bytes(10)
|
253
|
+
rand.setbyte(0, rand.getbyte(0) & 0x0f | 0x70) # version
|
254
|
+
rand.setbyte(2, rand.getbyte(2) & 0x3f | 0x80) # variant
|
255
|
+
"%08x-%04x-%s" % [
|
256
|
+
(ms & 0x0000_ffff_ffff_0000) >> 16,
|
257
|
+
(ms & 0x0000_0000_0000_ffff),
|
258
|
+
rand.unpack("H4H4H12").join("-")
|
259
|
+
]
|
260
|
+
|
261
|
+
when 12 # max timestamp precision
|
262
|
+
ms, ns = Process.clock_gettime(Process::CLOCK_REALTIME, :nanosecond)
|
263
|
+
.divmod(1_000_000)
|
264
|
+
extra_bits = ns * 4096 / 1_000_000
|
265
|
+
rand = random_bytes(8)
|
266
|
+
rand.setbyte(0, rand.getbyte(0) & 0x3f | 0x80) # variant
|
267
|
+
"%08x-%04x-7%03x-%s" % [
|
268
|
+
(ms & 0x0000_ffff_ffff_0000) >> 16,
|
269
|
+
(ms & 0x0000_0000_0000_ffff),
|
270
|
+
extra_bits,
|
271
|
+
rand.unpack("H4H12").join("-")
|
272
|
+
]
|
273
|
+
|
274
|
+
when (0..12) # the generic version is slower than the special cases above
|
275
|
+
rand_a, rand_b1, rand_b2, rand_b3 = random_bytes(10).unpack("nnnN")
|
276
|
+
rand_mask_bits = 12 - extra_timestamp_bits
|
277
|
+
ms, ns = Process.clock_gettime(Process::CLOCK_REALTIME, :nanosecond)
|
278
|
+
.divmod(1_000_000)
|
279
|
+
"%08x-%04x-%04x-%04x-%04x%08x" % [
|
280
|
+
(ms & 0x0000_ffff_ffff_0000) >> 16,
|
281
|
+
(ms & 0x0000_0000_0000_ffff),
|
282
|
+
0x7000 |
|
283
|
+
((ns * (1 << extra_timestamp_bits) / 1_000_000) << rand_mask_bits) |
|
284
|
+
rand_a & ((1 << rand_mask_bits) - 1),
|
285
|
+
0x8000 | (rand_b1 & 0x3fff),
|
286
|
+
rand_b2,
|
287
|
+
rand_b3
|
288
|
+
]
|
289
|
+
|
290
|
+
else
|
291
|
+
raise ArgumentError, "extra_timestamp_bits must be in 0..12"
|
292
|
+
end
|
293
|
+
end
|
294
|
+
|
295
|
+
# Internal interface to Random; Generate random data _n_ bytes.
|
177
296
|
private def gen_random(n)
|
178
297
|
self.bytes(n)
|
179
298
|
end
|
@@ -221,16 +340,20 @@ module Random::Formatter
|
|
221
340
|
result
|
222
341
|
end
|
223
342
|
|
343
|
+
# The default character list for #alphanumeric.
|
224
344
|
ALPHANUMERIC = [*'A'..'Z', *'a'..'z', *'0'..'9']
|
345
|
+
|
225
346
|
# Generate a random alphanumeric string.
|
226
347
|
#
|
227
348
|
# The argument _n_ specifies the length, in characters, of the alphanumeric
|
228
349
|
# string to be generated.
|
350
|
+
# The argument _chars_ specifies the character list which the result is
|
351
|
+
# consist of.
|
229
352
|
#
|
230
353
|
# If _n_ is not specified or is nil, 16 is assumed.
|
231
354
|
# It may be larger in the future.
|
232
355
|
#
|
233
|
-
# The result may contain A-Z, a-z and 0-9.
|
356
|
+
# The result may contain A-Z, a-z and 0-9, unless _chars_ is specified.
|
234
357
|
#
|
235
358
|
# require 'random/formatter'
|
236
359
|
#
|
@@ -238,8 +361,13 @@ module Random::Formatter
|
|
238
361
|
# # or
|
239
362
|
# prng = Random.new
|
240
363
|
# prng.alphanumeric(10) #=> "i6K93NdqiH"
|
241
|
-
|
364
|
+
#
|
365
|
+
# Random.alphanumeric(4, chars: [*"0".."9"]) #=> "2952"
|
366
|
+
# # or
|
367
|
+
# prng = Random.new
|
368
|
+
# prng.alphanumeric(10, chars: [*"!".."/"]) #=> ",.,++%/''."
|
369
|
+
def alphanumeric(n = nil, chars: ALPHANUMERIC)
|
242
370
|
n = 16 if n.nil?
|
243
|
-
choose(
|
371
|
+
choose(chars, n)
|
244
372
|
end
|
245
373
|
end
|
data/lib/securerandom.rb
CHANGED
@@ -39,28 +39,28 @@ require 'random/formatter'
|
|
39
39
|
# +NotImplementedError+ is raised.
|
40
40
|
|
41
41
|
module SecureRandom
|
42
|
+
|
43
|
+
# The version
|
44
|
+
VERSION = "0.3.1"
|
45
|
+
|
42
46
|
class << self
|
47
|
+
# Returns a random binary string containing +size+ bytes.
|
48
|
+
#
|
49
|
+
# See Random.bytes
|
43
50
|
def bytes(n)
|
44
51
|
return gen_random(n)
|
45
52
|
end
|
46
53
|
|
47
54
|
private
|
48
55
|
|
56
|
+
# :stopdoc:
|
57
|
+
|
58
|
+
# Implementation using OpenSSL
|
49
59
|
def gen_random_openssl(n)
|
50
|
-
@pid = 0 unless defined?(@pid)
|
51
|
-
pid = $$
|
52
|
-
unless @pid == pid
|
53
|
-
now = Process.clock_gettime(Process::CLOCK_REALTIME, :nanosecond)
|
54
|
-
OpenSSL::Random.random_add([now, @pid, pid].join(""), 0.0)
|
55
|
-
seed = Random.urandom(16)
|
56
|
-
if (seed)
|
57
|
-
OpenSSL::Random.random_add(seed, 16)
|
58
|
-
end
|
59
|
-
@pid = pid
|
60
|
-
end
|
61
60
|
return OpenSSL::Random.random_bytes(n)
|
62
61
|
end
|
63
62
|
|
63
|
+
# Implementation using system random device
|
64
64
|
def gen_random_urandom(n)
|
65
65
|
ret = Random.urandom(n)
|
66
66
|
unless ret
|
@@ -86,6 +86,9 @@ module SecureRandom
|
|
86
86
|
end
|
87
87
|
end
|
88
88
|
|
89
|
+
# :startdoc:
|
90
|
+
|
91
|
+
# Generate random data bytes for Random::Formatter
|
89
92
|
public :gen_random
|
90
93
|
end
|
91
94
|
end
|
data/securerandom.gemspec
CHANGED
@@ -1,6 +1,13 @@
|
|
1
|
+
name = File.basename(__FILE__, ".gemspec")
|
2
|
+
version = ["lib", Array.new(name.count("-")+1).join("/")].find do |dir|
|
3
|
+
break File.foreach(File.join(__dir__, dir, "#{name.tr('-', '/')}.rb")) do |line|
|
4
|
+
/^\s*VERSION\s*=\s*"(.*)"/ =~ line and break $1
|
5
|
+
end rescue nil
|
6
|
+
end
|
7
|
+
|
1
8
|
Gem::Specification.new do |spec|
|
2
|
-
spec.name =
|
3
|
-
spec.version =
|
9
|
+
spec.name = name
|
10
|
+
spec.version = version
|
4
11
|
spec.authors = ["Tanaka Akira"]
|
5
12
|
spec.email = ["akr@fsij.org"]
|
6
13
|
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: securerandom
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.
|
4
|
+
version: 0.3.1
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Tanaka Akira
|
8
8
|
autorequire:
|
9
9
|
bindir: exe
|
10
10
|
cert_chain: []
|
11
|
-
date:
|
11
|
+
date: 2023-12-16 00:00:00.000000000 Z
|
12
12
|
dependencies: []
|
13
13
|
description: Interface for secure random number generator.
|
14
14
|
email:
|
@@ -17,6 +17,7 @@ executables: []
|
|
17
17
|
extensions: []
|
18
18
|
extra_rdoc_files: []
|
19
19
|
files:
|
20
|
+
- ".document"
|
20
21
|
- ".github/dependabot.yml"
|
21
22
|
- ".github/workflows/test.yml"
|
22
23
|
- ".gitignore"
|
@@ -26,6 +27,7 @@ files:
|
|
26
27
|
- Rakefile
|
27
28
|
- bin/console
|
28
29
|
- bin/setup
|
30
|
+
- docs/random.rb
|
29
31
|
- lib/random/formatter.rb
|
30
32
|
- lib/securerandom.rb
|
31
33
|
- rakelib/epoch.rake
|
@@ -52,7 +54,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
52
54
|
- !ruby/object:Gem::Version
|
53
55
|
version: '0'
|
54
56
|
requirements: []
|
55
|
-
rubygems_version: 3.
|
57
|
+
rubygems_version: 3.5.0.dev
|
56
58
|
signing_key:
|
57
59
|
specification_version: 4
|
58
60
|
summary: Interface for secure random number generator.
|