securerandom 0.2.2 → 0.3.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/.document +4 -0
- data/.github/workflows/test.yml +11 -4
- data/docs/random.rb +10 -0
- data/lib/random/formatter.rb +131 -3
- data/lib/securerandom.rb +14 -11
- data/securerandom.gemspec +9 -2
- metadata +5 -3
    
        checksums.yaml
    CHANGED
    
    | @@ -1,7 +1,7 @@ | |
| 1 1 | 
             
            ---
         | 
| 2 2 | 
             
            SHA256:
         | 
| 3 | 
            -
              metadata.gz:  | 
| 4 | 
            -
              data.tar.gz:  | 
| 3 | 
            +
              metadata.gz: 154280692de39feb39b719344f5c47fd256decdb5bd71cf80cb54b87ef155bd3
         | 
| 4 | 
            +
              data.tar.gz: 0aab5a7dc6e671530e0327bcad3bf9d4caae862fed9925bc9cdcc47a57eae68f
         | 
| 5 5 | 
             
            SHA512:
         | 
| 6 | 
            -
              metadata.gz:  | 
| 7 | 
            -
              data.tar.gz:  | 
| 6 | 
            +
              metadata.gz: 99c06212cd3c4908e1bf9c2a459e7f3cc851fbb38396256932787b9725b7aaad7873c7b3ac00bfde458bd2316f1e38e02e62734d0df43d1d1c6ca29c2905ea3c
         | 
| 7 | 
            +
              data.tar.gz: c8680a7e9566fcd2d064560c46046f7bc97d1e3b257613c7396306912fac01dcb810f20604e87c4914c327cc1d0f66c3ae8fc952b40f75bec58f520da2f7c627
         | 
    
        data/.document
    ADDED
    
    
    
        data/.github/workflows/test.yml
    CHANGED
    
    | @@ -1,17 +1,24 @@ | |
| 1 | 
            -
            name:  | 
| 1 | 
            +
            name: test
         | 
| 2 2 |  | 
| 3 3 | 
             
            on: [push, pull_request]
         | 
| 4 4 |  | 
| 5 5 | 
             
            jobs:
         | 
| 6 | 
            -
               | 
| 6 | 
            +
              ruby-versions:
         | 
| 7 | 
            +
                uses: ruby/actions/.github/workflows/ruby_versions.yml@master
         | 
| 8 | 
            +
                with:
         | 
| 9 | 
            +
                  engine: cruby
         | 
| 10 | 
            +
                  min_version: 2.6
         | 
| 11 | 
            +
             | 
| 12 | 
            +
              test:
         | 
| 13 | 
            +
                needs: ruby-versions
         | 
| 7 14 | 
             
                name: build (${{ matrix.ruby }} / ${{ matrix.os }})
         | 
| 8 15 | 
             
                strategy:
         | 
| 9 16 | 
             
                  matrix:
         | 
| 10 | 
            -
                    ruby:  | 
| 17 | 
            +
                    ruby: ${{ fromJson(needs.ruby-versions.outputs.versions) }}
         | 
| 11 18 | 
             
                    os: [ ubuntu-latest, macos-latest, windows-latest ]
         | 
| 12 19 | 
             
                runs-on: ${{ matrix.os }}
         | 
| 13 20 | 
             
                steps:
         | 
| 14 | 
            -
                - uses: actions/checkout@ | 
| 21 | 
            +
                - uses: actions/checkout@v4
         | 
| 15 22 | 
             
                - name: Set up Ruby
         | 
| 16 23 | 
             
                  uses: ruby/setup-ruby@v1
         | 
| 17 24 | 
             
                  with:
         | 
    
        data/docs/random.rb
    ADDED
    
    
    
        data/lib/random/formatter.rb
    CHANGED
    
    | @@ -174,6 +174,125 @@ module Random::Formatter | |
| 174 174 | 
             
                "%08x-%04x-%04x-%04x-%04x%08x" % ary
         | 
| 175 175 | 
             
              end
         | 
| 176 176 |  | 
| 177 | 
            +
              alias uuid_v4 uuid
         | 
| 178 | 
            +
             | 
| 179 | 
            +
              # Generate a random v7 UUID (Universally Unique IDentifier).
         | 
| 180 | 
            +
              #
         | 
| 181 | 
            +
              #   require 'random/formatter'
         | 
| 182 | 
            +
              #
         | 
| 183 | 
            +
              #   Random.uuid_v7 # => "0188d4c3-1311-7f96-85c7-242a7aa58f1e"
         | 
| 184 | 
            +
              #   Random.uuid_v7 # => "0188d4c3-16fe-744f-86af-38fa04c62bb5"
         | 
| 185 | 
            +
              #   Random.uuid_v7 # => "0188d4c3-1af8-764f-b049-c204ce0afa23"
         | 
| 186 | 
            +
              #   Random.uuid_v7 # => "0188d4c3-1e74-7085-b14f-ef6415dc6f31"
         | 
| 187 | 
            +
              #   #                    |<--sorted-->| |<----- random ---->|
         | 
| 188 | 
            +
              #
         | 
| 189 | 
            +
              #   # or
         | 
| 190 | 
            +
              #   prng = Random.new
         | 
| 191 | 
            +
              #   prng.uuid_v7 # => "0188ca51-5e72-7950-a11d-def7ff977c98"
         | 
| 192 | 
            +
              #
         | 
| 193 | 
            +
              # The version 7 UUID starts with the least significant 48 bits of a 64 bit
         | 
| 194 | 
            +
              # Unix timestamp (milliseconds since the epoch) and fills the remaining bits
         | 
| 195 | 
            +
              # with random data, excluding the version and variant bits.
         | 
| 196 | 
            +
              #
         | 
| 197 | 
            +
              # This allows version 7 UUIDs to be sorted by creation time.  Time ordered
         | 
| 198 | 
            +
              # UUIDs can be used for better database index locality of newly inserted
         | 
| 199 | 
            +
              # records, which may have a significant performance benefit compared to random
         | 
| 200 | 
            +
              # data inserts.
         | 
| 201 | 
            +
              #
         | 
| 202 | 
            +
              # The result contains 74 random bits (9.25 random bytes).
         | 
| 203 | 
            +
              #
         | 
| 204 | 
            +
              # Note that this method cannot be made reproducable because its output
         | 
| 205 | 
            +
              # includes not only random bits but also timestamp.
         | 
| 206 | 
            +
              #
         | 
| 207 | 
            +
              # See draft-ietf-uuidrev-rfc4122bis[https://datatracker.ietf.org/doc/draft-ietf-uuidrev-rfc4122bis/]
         | 
| 208 | 
            +
              # for details of UUIDv7.
         | 
| 209 | 
            +
              #
         | 
| 210 | 
            +
              # ==== Monotonicity
         | 
| 211 | 
            +
              #
         | 
| 212 | 
            +
              # UUIDv7 has millisecond precision by default, so multiple UUIDs created
         | 
| 213 | 
            +
              # within the same millisecond are not issued in monotonically increasing
         | 
| 214 | 
            +
              # order.  To create UUIDs that are time-ordered with sub-millisecond
         | 
| 215 | 
            +
              # precision, up to 12 bits of additional timestamp may added with
         | 
| 216 | 
            +
              # +extra_timestamp_bits+.  The extra timestamp precision comes at the expense
         | 
| 217 | 
            +
              # of random bits.  Setting <tt>extra_timestamp_bits: 12</tt> provides ~244ns
         | 
| 218 | 
            +
              # of precision, but only 62 random bits (7.75 random bytes).
         | 
| 219 | 
            +
              #
         | 
| 220 | 
            +
              #   prng = Random.new
         | 
| 221 | 
            +
              #   Array.new(4) { prng.uuid_v7(extra_timestamp_bits: 12) }
         | 
| 222 | 
            +
              #   # =>
         | 
| 223 | 
            +
              #   ["0188d4c7-13da-74f9-8b53-22a786ffdd5a",
         | 
| 224 | 
            +
              #    "0188d4c7-13da-753b-83a5-7fb9b2afaeea",
         | 
| 225 | 
            +
              #    "0188d4c7-13da-754a-88ea-ac0baeedd8db",
         | 
| 226 | 
            +
              #    "0188d4c7-13da-7557-83e1-7cad9cda0d8d"]
         | 
| 227 | 
            +
              #   # |<--- sorted --->| |<-- random --->|
         | 
| 228 | 
            +
              #
         | 
| 229 | 
            +
              #   Array.new(4) { prng.uuid_v7(extra_timestamp_bits: 8) }
         | 
| 230 | 
            +
              #   # =>
         | 
| 231 | 
            +
              #   ["0188d4c7-3333-7a95-850a-de6edb858f7e",
         | 
| 232 | 
            +
              #    "0188d4c7-3333-7ae8-842e-bc3a8b7d0cf9",  # <- out of order
         | 
| 233 | 
            +
              #    "0188d4c7-3333-7ae2-995a-9f135dc44ead",  # <- out of order
         | 
| 234 | 
            +
              #    "0188d4c7-3333-7af9-87c3-8f612edac82e"]
         | 
| 235 | 
            +
              #   # |<--- sorted -->||<---- random --->|
         | 
| 236 | 
            +
              #
         | 
| 237 | 
            +
              # Any rollbacks of the system clock will break monotonicity.  UUIDv7 is based
         | 
| 238 | 
            +
              # on UTC, which excludes leap seconds and can rollback the clock.  To avoid
         | 
| 239 | 
            +
              # this, the system clock can synchronize with an NTP server configured to use
         | 
| 240 | 
            +
              # a "leap smear" approach.  NTP or PTP will also be needed to synchronize
         | 
| 241 | 
            +
              # across distributed nodes.
         | 
| 242 | 
            +
              #
         | 
| 243 | 
            +
              # Counters and other mechanisms for stronger guarantees of monotonicity are
         | 
| 244 | 
            +
              # not implemented.  Applications with stricter requirements should follow
         | 
| 245 | 
            +
              # {Section 6.2}[https://www.ietf.org/archive/id/draft-ietf-uuidrev-rfc4122bis-07.html#monotonicity_counters]
         | 
| 246 | 
            +
              # of the specification.
         | 
| 247 | 
            +
              #
         | 
| 248 | 
            +
              def uuid_v7(extra_timestamp_bits: 0)
         | 
| 249 | 
            +
                case (extra_timestamp_bits = Integer(extra_timestamp_bits))
         | 
| 250 | 
            +
                when 0 # min timestamp precision
         | 
| 251 | 
            +
                  ms = Process.clock_gettime(Process::CLOCK_REALTIME, :millisecond)
         | 
| 252 | 
            +
                  rand = random_bytes(10)
         | 
| 253 | 
            +
                  rand.setbyte(0, rand.getbyte(0) & 0x0f | 0x70) # version
         | 
| 254 | 
            +
                  rand.setbyte(2, rand.getbyte(2) & 0x3f | 0x80) # variant
         | 
| 255 | 
            +
                  "%08x-%04x-%s" % [
         | 
| 256 | 
            +
                    (ms & 0x0000_ffff_ffff_0000) >> 16,
         | 
| 257 | 
            +
                    (ms & 0x0000_0000_0000_ffff),
         | 
| 258 | 
            +
                    rand.unpack("H4H4H12").join("-")
         | 
| 259 | 
            +
                  ]
         | 
| 260 | 
            +
             | 
| 261 | 
            +
                when 12 # max timestamp precision
         | 
| 262 | 
            +
                  ms, ns = Process.clock_gettime(Process::CLOCK_REALTIME, :nanosecond)
         | 
| 263 | 
            +
                    .divmod(1_000_000)
         | 
| 264 | 
            +
                  extra_bits = ns * 4096 / 1_000_000
         | 
| 265 | 
            +
                  rand = random_bytes(8)
         | 
| 266 | 
            +
                  rand.setbyte(0, rand.getbyte(0) & 0x3f | 0x80) # variant
         | 
| 267 | 
            +
                  "%08x-%04x-7%03x-%s" % [
         | 
| 268 | 
            +
                    (ms & 0x0000_ffff_ffff_0000) >> 16,
         | 
| 269 | 
            +
                    (ms & 0x0000_0000_0000_ffff),
         | 
| 270 | 
            +
                    extra_bits,
         | 
| 271 | 
            +
                    rand.unpack("H4H12").join("-")
         | 
| 272 | 
            +
                  ]
         | 
| 273 | 
            +
             | 
| 274 | 
            +
                when (0..12) # the generic version is slower than the special cases above
         | 
| 275 | 
            +
                  rand_a, rand_b1, rand_b2, rand_b3 = random_bytes(10).unpack("nnnN")
         | 
| 276 | 
            +
                  rand_mask_bits = 12 - extra_timestamp_bits
         | 
| 277 | 
            +
                  ms, ns = Process.clock_gettime(Process::CLOCK_REALTIME, :nanosecond)
         | 
| 278 | 
            +
                    .divmod(1_000_000)
         | 
| 279 | 
            +
                  "%08x-%04x-%04x-%04x-%04x%08x" % [
         | 
| 280 | 
            +
                    (ms & 0x0000_ffff_ffff_0000) >> 16,
         | 
| 281 | 
            +
                    (ms & 0x0000_0000_0000_ffff),
         | 
| 282 | 
            +
                    0x7000 |
         | 
| 283 | 
            +
                      ((ns * (1 << extra_timestamp_bits) / 1_000_000) << rand_mask_bits) |
         | 
| 284 | 
            +
                      rand_a & ((1 << rand_mask_bits) - 1),
         | 
| 285 | 
            +
                    0x8000 | (rand_b1 & 0x3fff),
         | 
| 286 | 
            +
                    rand_b2,
         | 
| 287 | 
            +
                    rand_b3
         | 
| 288 | 
            +
                  ]
         | 
| 289 | 
            +
             | 
| 290 | 
            +
                else
         | 
| 291 | 
            +
                  raise ArgumentError, "extra_timestamp_bits must be in 0..12"
         | 
| 292 | 
            +
                end
         | 
| 293 | 
            +
              end
         | 
| 294 | 
            +
             | 
| 295 | 
            +
              # Internal interface to Random; Generate random data _n_ bytes.
         | 
| 177 296 | 
             
              private def gen_random(n)
         | 
| 178 297 | 
             
                self.bytes(n)
         | 
| 179 298 | 
             
              end
         | 
| @@ -221,16 +340,20 @@ module Random::Formatter | |
| 221 340 | 
             
                result
         | 
| 222 341 | 
             
              end
         | 
| 223 342 |  | 
| 343 | 
            +
              # The default character list for #alphanumeric.
         | 
| 224 344 | 
             
              ALPHANUMERIC = [*'A'..'Z', *'a'..'z', *'0'..'9']
         | 
| 345 | 
            +
             | 
| 225 346 | 
             
              # Generate a random alphanumeric string.
         | 
| 226 347 | 
             
              #
         | 
| 227 348 | 
             
              # The argument _n_ specifies the length, in characters, of the alphanumeric
         | 
| 228 349 | 
             
              # string to be generated.
         | 
| 350 | 
            +
              # The argument _chars_ specifies the character list which the result is
         | 
| 351 | 
            +
              # consist of.
         | 
| 229 352 | 
             
              #
         | 
| 230 353 | 
             
              # If _n_ is not specified or is nil, 16 is assumed.
         | 
| 231 354 | 
             
              # It may be larger in the future.
         | 
| 232 355 | 
             
              #
         | 
| 233 | 
            -
              # The result may contain A-Z, a-z and 0-9.
         | 
| 356 | 
            +
              # The result may contain A-Z, a-z and 0-9, unless _chars_ is specified.
         | 
| 234 357 | 
             
              #
         | 
| 235 358 | 
             
              #   require 'random/formatter'
         | 
| 236 359 | 
             
              #
         | 
| @@ -238,8 +361,13 @@ module Random::Formatter | |
| 238 361 | 
             
              #   # or
         | 
| 239 362 | 
             
              #   prng = Random.new
         | 
| 240 363 | 
             
              #   prng.alphanumeric(10) #=> "i6K93NdqiH"
         | 
| 241 | 
            -
               | 
| 364 | 
            +
              #
         | 
| 365 | 
            +
              #   Random.alphanumeric(4, chars: [*"0".."9"]) #=> "2952"
         | 
| 366 | 
            +
              #   # or
         | 
| 367 | 
            +
              #   prng = Random.new
         | 
| 368 | 
            +
              #   prng.alphanumeric(10, chars: [*"!".."/"]) #=> ",.,++%/''."
         | 
| 369 | 
            +
              def alphanumeric(n = nil, chars: ALPHANUMERIC)
         | 
| 242 370 | 
             
                n = 16 if n.nil?
         | 
| 243 | 
            -
                choose( | 
| 371 | 
            +
                choose(chars, n)
         | 
| 244 372 | 
             
              end
         | 
| 245 373 | 
             
            end
         | 
    
        data/lib/securerandom.rb
    CHANGED
    
    | @@ -39,28 +39,28 @@ require 'random/formatter' | |
| 39 39 | 
             
            # +NotImplementedError+ is raised.
         | 
| 40 40 |  | 
| 41 41 | 
             
            module SecureRandom
         | 
| 42 | 
            +
             | 
| 43 | 
            +
              # The version
         | 
| 44 | 
            +
              VERSION = "0.3.1"
         | 
| 45 | 
            +
             | 
| 42 46 | 
             
              class << self
         | 
| 47 | 
            +
                # Returns a random binary string containing +size+ bytes.
         | 
| 48 | 
            +
                #
         | 
| 49 | 
            +
                # See Random.bytes
         | 
| 43 50 | 
             
                def bytes(n)
         | 
| 44 51 | 
             
                  return gen_random(n)
         | 
| 45 52 | 
             
                end
         | 
| 46 53 |  | 
| 47 54 | 
             
                private
         | 
| 48 55 |  | 
| 56 | 
            +
                # :stopdoc:
         | 
| 57 | 
            +
             | 
| 58 | 
            +
                # Implementation using OpenSSL
         | 
| 49 59 | 
             
                def gen_random_openssl(n)
         | 
| 50 | 
            -
                  @pid = 0 unless defined?(@pid)
         | 
| 51 | 
            -
                  pid = $$
         | 
| 52 | 
            -
                  unless @pid == pid
         | 
| 53 | 
            -
                    now = Process.clock_gettime(Process::CLOCK_REALTIME, :nanosecond)
         | 
| 54 | 
            -
                    OpenSSL::Random.random_add([now, @pid, pid].join(""), 0.0)
         | 
| 55 | 
            -
                    seed = Random.urandom(16)
         | 
| 56 | 
            -
                    if (seed)
         | 
| 57 | 
            -
                      OpenSSL::Random.random_add(seed, 16)
         | 
| 58 | 
            -
                    end
         | 
| 59 | 
            -
                    @pid = pid
         | 
| 60 | 
            -
                  end
         | 
| 61 60 | 
             
                  return OpenSSL::Random.random_bytes(n)
         | 
| 62 61 | 
             
                end
         | 
| 63 62 |  | 
| 63 | 
            +
                # Implementation using system random device
         | 
| 64 64 | 
             
                def gen_random_urandom(n)
         | 
| 65 65 | 
             
                  ret = Random.urandom(n)
         | 
| 66 66 | 
             
                  unless ret
         | 
| @@ -86,6 +86,9 @@ module SecureRandom | |
| 86 86 | 
             
                  end
         | 
| 87 87 | 
             
                end
         | 
| 88 88 |  | 
| 89 | 
            +
                # :startdoc:
         | 
| 90 | 
            +
             | 
| 91 | 
            +
                # Generate random data bytes for Random::Formatter
         | 
| 89 92 | 
             
                public :gen_random
         | 
| 90 93 | 
             
              end
         | 
| 91 94 | 
             
            end
         | 
    
        data/securerandom.gemspec
    CHANGED
    
    | @@ -1,6 +1,13 @@ | |
| 1 | 
            +
            name = File.basename(__FILE__, ".gemspec")
         | 
| 2 | 
            +
            version = ["lib", Array.new(name.count("-")+1).join("/")].find do |dir|
         | 
| 3 | 
            +
              break File.foreach(File.join(__dir__, dir, "#{name.tr('-', '/')}.rb")) do |line|
         | 
| 4 | 
            +
                /^\s*VERSION\s*=\s*"(.*)"/ =~ line and break $1
         | 
| 5 | 
            +
              end rescue nil
         | 
| 6 | 
            +
            end
         | 
| 7 | 
            +
             | 
| 1 8 | 
             
            Gem::Specification.new do |spec|
         | 
| 2 | 
            -
              spec.name          =  | 
| 3 | 
            -
              spec.version       =  | 
| 9 | 
            +
              spec.name          = name
         | 
| 10 | 
            +
              spec.version       = version
         | 
| 4 11 | 
             
              spec.authors       = ["Tanaka Akira"]
         | 
| 5 12 | 
             
              spec.email         = ["akr@fsij.org"]
         | 
| 6 13 |  | 
    
        metadata
    CHANGED
    
    | @@ -1,14 +1,14 @@ | |
| 1 1 | 
             
            --- !ruby/object:Gem::Specification
         | 
| 2 2 | 
             
            name: securerandom
         | 
| 3 3 | 
             
            version: !ruby/object:Gem::Version
         | 
| 4 | 
            -
              version: 0. | 
| 4 | 
            +
              version: 0.3.1
         | 
| 5 5 | 
             
            platform: ruby
         | 
| 6 6 | 
             
            authors:
         | 
| 7 7 | 
             
            - Tanaka Akira
         | 
| 8 8 | 
             
            autorequire:
         | 
| 9 9 | 
             
            bindir: exe
         | 
| 10 10 | 
             
            cert_chain: []
         | 
| 11 | 
            -
            date:  | 
| 11 | 
            +
            date: 2023-12-16 00:00:00.000000000 Z
         | 
| 12 12 | 
             
            dependencies: []
         | 
| 13 13 | 
             
            description: Interface for secure random number generator.
         | 
| 14 14 | 
             
            email:
         | 
| @@ -17,6 +17,7 @@ executables: [] | |
| 17 17 | 
             
            extensions: []
         | 
| 18 18 | 
             
            extra_rdoc_files: []
         | 
| 19 19 | 
             
            files:
         | 
| 20 | 
            +
            - ".document"
         | 
| 20 21 | 
             
            - ".github/dependabot.yml"
         | 
| 21 22 | 
             
            - ".github/workflows/test.yml"
         | 
| 22 23 | 
             
            - ".gitignore"
         | 
| @@ -26,6 +27,7 @@ files: | |
| 26 27 | 
             
            - Rakefile
         | 
| 27 28 | 
             
            - bin/console
         | 
| 28 29 | 
             
            - bin/setup
         | 
| 30 | 
            +
            - docs/random.rb
         | 
| 29 31 | 
             
            - lib/random/formatter.rb
         | 
| 30 32 | 
             
            - lib/securerandom.rb
         | 
| 31 33 | 
             
            - rakelib/epoch.rake
         | 
| @@ -52,7 +54,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement | |
| 52 54 | 
             
                - !ruby/object:Gem::Version
         | 
| 53 55 | 
             
                  version: '0'
         | 
| 54 56 | 
             
            requirements: []
         | 
| 55 | 
            -
            rubygems_version: 3. | 
| 57 | 
            +
            rubygems_version: 3.5.0.dev
         | 
| 56 58 | 
             
            signing_key:
         | 
| 57 59 | 
             
            specification_version: 4
         | 
| 58 60 | 
             
            summary: Interface for secure random number generator.
         |