session_keys 1.0.0 → 2.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
-SHA1:
-  metadata.gz: e0173c199f8a44a3f43f5ddb65c1252e30ceeeb6
-  data.tar.gz: 4685fc8e3585592c591ca82e2cbcce91b40c9aa7
+SHA256:
+  metadata.gz: 492fed533423f557f0649bd834bc4ce34013755357390b68d219ac377322eadf
+  data.tar.gz: 80dd7dc2bf69e690875a0c616ebcb7da962bf97bef04a104c881648fd26c644b
 SHA512:
-  metadata.gz: a169ab65770b8c88d64e3ab03fd7d1060e22233fe036e353b52d35bf993201ddcf508c9040d0c2fb8a68374d6ea3fb14a0f01647cdab1c208928ec591196e2a8
-  data.tar.gz: ddadf6ca0160a531406c98f8b9ca9af1c1b5acf41ba12244e0540f56dd4c8cf77ea6e98f824cc79bc8a41d649d8804eadc74e048987802faca70efacfea2ff72
+  metadata.gz: f7b26489cbd83fc0280eb59de5ebe0718233f53c0d6e51709aa6ec1a05b802faf1dc6b92d15b4527d95dfb98268301550d0f169163ce510cd12be84428a8e0c0
+  data.tar.gz: 7bc4f325f71b443b292f81aadef08ace1654e61d9b9e3e9e146f8686fcd6c705ba7b3aa47e2cb35bdbf70a1c3217d35bd68aede0d07a8c2c589a43f8c87d78ac

data/.codeclimate.yml

@@ -0,0 +1,17 @@
+---
+engines:
+  duplication:
+    enabled: true
+    config:
+      languages:
+        ruby:
+          mass_threshold: 30
+  fixme:
+    enabled: true
+  rubocop:
+    enabled: true
+ratings:
+  paths:
+  - lib/**
+exclude_paths:
+- test/

data/.rubocop.yml

@@ -743,7 +743,7 @@ Style/LineEndConcatenation:
                  line end.
   Enabled: false
 
-Style/MethodCallParentheses:
+Style/MethodCallWithoutArgsParentheses:
   Description: 'Do not use parentheses for method calls with no arguments.'
   StyleGuide: 'https://github.com/bbatsov/ruby-style-guide#no-args-no-parens'
   Enabled: false

data/.ruby-version

@@ -1 +1 @@
-2.3.1
+2.6.0

data/.travis.yml

@@ -1,5 +1,9 @@
 language: ruby
 rvm:
-  - 2.2.5
-  - 2.3.1
-before_install: gem install bundler -v 1.12.1
+  - 2.3
+  - 2.4
+  - 2.5
+  - 2.6
+before_install:
+  - sudo apt-get install -y libsodium-dev
+  - gem install bundler -v 2.0.2

data/CHANGELOG.md

@@ -1,5 +1,11 @@
 # CHANGELOG
 
+## v2.0.0 (8/23/2019)
+
+- Update rbnacl. Now requires separate install of libsodium.
+- Minor testing tweaks to modernize supported Ruby versions.
+- Minor code climate lint cleanups.
+
 ## v1.0.0 (9/8/2016)
 
 - Major refactor and simplification

data/Gemfile

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 source 'https://rubygems.org'
 
 # Specify your gem's dependencies in session_keys.gemspec

data/README.md

@@ -1,7 +1,6 @@
 # sessionKeys (Ruby)
 
 [![Gem Version](https://badge.fury.io/rb/session_keys.svg)](https://badge.fury.io/rb/session_keys)
-[![Dependency Status](https://gemnasium.com/badges/github.com/grempe/session-keys-rb.svg)](https://gemnasium.com/github.com/grempe/session-keys-rb)
 [![Build Status](https://travis-ci.org/grempe/session-keys-rb.svg?branch=master)](https://travis-ci.org/grempe/session-keys-rb)
 [![Coverage Status](https://coveralls.io/repos/github/grempe/session-keys-rb/badge.svg?branch=master)](https://coveralls.io/github/grempe/session-keys-rb?branch=master)
 [![Code Climate](https://codeclimate.com/github/grempe/session-keys-rb/badges/gpa.svg)](https://codeclimate.com/github/grempe/session-keys-rb)
@@ -25,25 +24,27 @@ project [grempe/session-keys-js](https://github.com/grempe/session-keys-js)
 
 Add this line to your application's Gemfile:
 
-``` ruby
+```ruby
 gem 'session_keys'
 ```
 
 And then execute:
 
-``` text
+```text
 $ bundle
 ```
 
 Or install it yourself as:
 
-``` text
+```text
 $ gem install session_keys
 ```
 
 ## Usage
 
-``` ruby
+```ruby
+require 'session_keys'
+
 SessionKeys.generate('user@example.com', 'my strong passphrase')
 
 {
@@ -75,43 +76,6 @@ output.nacl_encryption_key_pairs[1]
 output.nacl_signing_key_pairs[2]
 ```
 
-### Installation Security : Signed Ruby Gem
-
-The SessionKeys gem is cryptographically signed. To be sure the gem you install hasn’t
-been tampered with you can install it using the following method:
-
-Add required public keys (if you haven’t already) as trusted certificates
-
-```
-# Caveat: Gem certificates are trusted globally, such that adding a
-# cert.pem for one gem automatically trusts all gems signed by that cert.
-gem cert --add <(curl -Ls https://raw.githubusercontent.com/cryptosphere/rbnacl/master/bascule.cert)
-gem cert --add <(curl -Ls https://raw.github.com/grempe/session-keys-rb/master/certs/gem-public_cert_grempe.pem)
-```
-
-To install, it is possible to specify either `HighSecurity` or `MediumSecurity`
-mode. Since the `session_keys` gem depends on one or more gems that are not cryptographically
-signed you will likely need to use `MediumSecurity`. You should receive a warning
-if any signed gem does not match its signature.
-
-``` text
-# All dependent gems must be signed and verified.
-gem install session_keys -P HighSecurity
-```
-
-``` text
-# All signed dependent gems must be verified.
-gem install session_keys -P MediumSecurity
-```
-
-``` text
-# Same as above, except Bundler only recognizes
-# the long --trust-policy flag, not the short -P
-bundle --trust-policy MediumSecurity
-```
-
-You can [learn more about security and signed Ruby Gems](http://guides.rubygems.org/security/).
-
 ### Installation Security : Signed Git Commits
 
 Most, if not all, of the commits and tags to the repository for this code are

data/RELEASE.md

@@ -18,10 +18,10 @@ $ git push
 
 Check for regressions in automated tests:
 
-* [https://travis-ci.org/grempe/session-keys-rb](https://travis-ci.org/grempe/session-keys-rb)
-* [https://coveralls.io/github/grempe/session-keys-rb?branch=master](https://coveralls.io/github/grempe/session-keys-rb?branch=master)
-* [https://codeclimate.com/github/grempe/session-keys-rb](https://codeclimate.com/github/grempe/session-keys-rb)
-* [http://inch-ci.org/github/grempe/session-keys-rb](http://inch-ci.org/github/grempe/session-keys-rb)
+- [https://travis-ci.org/grempe/session-keys-rb](https://travis-ci.org/grempe/session-keys-rb)
+- [https://coveralls.io/github/grempe/session-keys-rb?branch=master](https://coveralls.io/github/grempe/session-keys-rb?branch=master)
+- [https://codeclimate.com/github/grempe/session-keys-rb](https://codeclimate.com/github/grempe/session-keys-rb)
+- [http://inch-ci.org/github/grempe/session-keys-rb](http://inch-ci.org/github/grempe/session-keys-rb)
 
 ## Bump Version Number and edit CHANGELOG.md
 
@@ -32,49 +32,18 @@ $ vi CHANGELOG.md
 $ git add CHANGELOG.md
 ```
 
-## Local Build and Install w/ Signed Gem
-
-The `build` step should ask for PEM passphrase to sign gem. If it does
-not ask it means that the signing cert is not present.
-
-Add certs:
-
-```sh
-gem cert --add <(curl -Ls https://raw.github.com/grempe/session-keys-rb/master/certs/gem-public_cert_grempe.pem)
-gem cert --add <(curl -Ls https://raw.githubusercontent.com/cryptosphere/rbnacl/master/bascule.cert)
-```
-
-Build:
-
-```sh
-$ rake build
-Enter PEM pass phrase:
-session_keys 0.1.0 built to pkg/session_keys-0.1.0.gem.
-```
-
-Install locally w/ Cert:
-
-```sh
-$ gem uninstall session_keys
-$ rbenv rehash
-$ gem install pkg/session_keys-0.1.0.gem -P MediumSecurity
-Successfully installed session_keys-0.1.0.gem
-1 gem installed
-```
-
 ## Git Commit Version and CHANGELOG Changes, Tag and push to Github
 
 ```sh
-$ git add lib/session_keys/version.rb
-$ git add CHANGELOG.md
-$ git commit -m 'Bump version v0.1.1'
-$ git tag -s v0.1.1 -m "v0.1.1" SHA1_OF_COMMIT
+$ bundle exec rake build
+$ git commit -m 'Bump version v2.0.0'
+$ git tag -s v2.0.0 -m "v2.0.0" SHA1_OF_COMMIT
 ```
 
 Verify last commit and last tag are GPG signed:
 
 ```
-$ git tag -v v0.1.0
+$ git tag -v v2.0.0
 ...
 gpg: Good signature from "Glenn Rempe (Code Signing Key) <glenn@rempe.us>" [ultimate]
 ...
@@ -97,7 +66,7 @@ $ git push --tags
 ## Push gem to Rubygems.org
 
 ```sh
-$ gem push pkg/session_keys-0.1.0.gem
+$ gem push pkg/session_keys-2.0.0.gem
 ```
 
 Verify Gem Push at [https://rubygems.org/gems/session_keys](https://rubygems.org/gems/session_keys)

data/Rakefile

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 require 'bundler/gem_tasks'
 require 'rake/testtask'
 require 'wwtd/tasks'

data/bin/console

@@ -1,4 +1,5 @@
 #!/usr/bin/env ruby
+# frozen_string_literal: true
 
 require 'bundler/setup'
 require 'session_keys'

data/lib/session_keys.rb

@@ -1,5 +1,6 @@
+# frozen_string_literal: true
+
 require 'session_keys/version'
-require 'rbnacl/libsodium'
 require 'rbnacl'
 require 'zxcvbn'
 require 'base64'

data/lib/session_keys/version.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module SessionKeys
-  VERSION = '1.0.0'.freeze
+  VERSION = '2.0.0'
 end

data/session_keys.gemspec

@@ -1,4 +1,5 @@
-# coding: utf-8
+# frozen_string_literal: true
+
 lib = File.expand_path('../lib', __FILE__)
 $LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
 require 'session_keys/version'
@@ -9,13 +10,7 @@ Gem::Specification.new do |spec|
   spec.authors       = ['Glenn Rempe']
   spec.email         = ['glenn@rempe.us']
 
-  spec.required_ruby_version = '>= 2.1.0'
-
-  cert = File.expand_path('~/.gem-certs/gem-private_key_grempe.pem')
-  if cert && File.exist?(cert)
-    spec.signing_key = cert
-    spec.cert_chain = ['certs/gem-public_cert_grempe.pem']
-  end
+  spec.required_ruby_version = '>= 2.3.0'
 
   spec.summary = <<-EOF
     SessionKeys generates deterministic user IDs and NaCl encryption/signing
@@ -43,15 +38,13 @@ Gem::Specification.new do |spec|
   spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
   spec.require_paths = ['lib']
 
-  spec.add_dependency 'rbnacl', '~> 3.4.0'
-  spec.add_dependency 'rbnacl-libsodium', '~> 1.0'
-  spec.add_dependency 'zxcvbn-ruby', '~> 0.1'
+  spec.add_dependency 'rbnacl', '~> 7.0.0'
+  spec.add_dependency 'zxcvbn-ruby', '>= 1.0', '< 2.0'
 
-  spec.add_development_dependency 'bundler', '~> 1.12'
-  spec.add_development_dependency 'rake', '~> 11.0'
+  spec.add_development_dependency 'bundler'
+  spec.add_development_dependency 'coveralls', '~> 0.8.23'
   spec.add_development_dependency 'minitest', '~> 5.0'
-  spec.add_development_dependency 'pry', '~> 0.10'
-  spec.add_development_dependency 'coveralls', '~> 0.8'
-  spec.add_development_dependency 'coco', '~> 0.14'
-  spec.add_development_dependency 'wwtd', '~> 1.3'
+  spec.add_development_dependency 'pry', '~> 0.12'
+  spec.add_development_dependency 'rake', '~> 12.3'
+  spec.add_development_dependency 'wwtd', '~> 1.4'
 end

metadata

@@ -1,36 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: session_keys
 version: !ruby/object:Gem::Version
-  version: 1.0.0
+  version: 2.0.0
 platform: ruby
 authors:
 - Glenn Rempe
 autorequire: 
 bindir: exe
-cert_chain:
-- |
-  -----BEGIN CERTIFICATE-----
-  MIIDYDCCAkigAwIBAgIBATANBgkqhkiG9w0BAQUFADA7MQ4wDAYDVQQDDAVnbGVu
-  bjEVMBMGCgmSJomT8ixkARkWBXJlbXBlMRIwEAYKCZImiZPyLGQBGRYCdXMwHhcN
-  MTYwNDExMDI0NTU0WhcNMTcwNDExMDI0NTU0WjA7MQ4wDAYDVQQDDAVnbGVubjEV
-  MBMGCgmSJomT8ixkARkWBXJlbXBlMRIwEAYKCZImiZPyLGQBGRYCdXMwggEiMA0G
-  CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZqTH5Jf+D/W2B4BIiL49CpHa86rK/
-  oT+v3xZwuEE92lJea+ygn3IAsidVTW47AKE6Lt3UqUkGQGKxsqH/Dhir08BqjLlD
-  gBUozGZpM3B6uWZnD6QXLbOmZeGVDnwB/QDfzaawN1i3smlYxYT+KNLjl80aN3we
-  /cHAWG7JG47AF/S91mYcg1WgZnDgZt9+RyVR1AsfYbM+SidOSoXEOHPCbuUxLKJb
-  gj5ieCFhm5GNWEugvgiX/ruas+VHV0fF3fzjYlU2fZPTuQyB4UD5FWX4UqdsBf3w
-  jB94TDBsJ3FVGPbggEhLGKd8pbQmBIOqXolGaqhs7dnuf5imu5mAXHC1AgMBAAGj
-  bzBtMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgSwMB0GA1UdDgQWBBRfxEyosUbKjfFa
-  j+gae2CcT3aFCTAZBgNVHREEEjAQgQ5nbGVubkByZW1wZS51czAZBgNVHRIEEjAQ
-  gQ5nbGVubkByZW1wZS51czANBgkqhkiG9w0BAQUFAAOCAQEAzgK20+MNOknR9Kx6
-  RisI3DsioCADjGldxY+INrwoTfPDVmNm4GdTYC+V+/BvxJw1RqHjEbuXSg0iibQC
-  4vN+th0Km7dnas/td1i+EKfGencfyQyecIaG9l3kbCkCWnldRtZ+BS5EfP2ML2u8
-  fyCtze/Piovu8IwXL1W5kGZMnvzLmWxdqI3VPUou40n8F+EiMMLgd53kpzjtNOau
-  4W+mqVGOwlEGVSgI5+0SIsD8pvc62PlPWTv0kn1bcufKKCZmoVmpfbe3j4JpBInq
-  zieXiXZSAojfFx9g91fKdIrlPbInHU/BaCxXSLBwvOM0drE+c2ue9X8gB55XAhzX
-  37oBiw==
-  -----END CERTIFICATE-----
-date: 2016-09-08 00:00:00.000000000 Z
+cert_chain: []
+date: 2019-08-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rbnacl
@@ -38,70 +16,62 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.4.0
+        version: 7.0.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.4.0
+        version: 7.0.0
 - !ruby/object:Gem::Dependency
-  name: rbnacl-libsodium
+  name: zxcvbn-ruby
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '1.0'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '2.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '1.0'
-- !ruby/object:Gem::Dependency
-  name: zxcvbn-ruby
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '0.1'
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
+    - - "<"
       - !ruby/object:Gem::Version
-        version: '0.1'
+        version: '2.0'
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '1.12'
+        version: '0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '1.12'
+        version: '0'
 - !ruby/object:Gem::Dependency
-  name: rake
+  name: coveralls
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '11.0'
+        version: 0.8.23
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '11.0'
+        version: 0.8.23
 - !ruby/object:Gem::Dependency
   name: minitest
   requirement: !ruby/object:Gem::Requirement
@@ -122,56 +92,42 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.10'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '0.10'
-- !ruby/object:Gem::Dependency
-  name: coveralls
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '0.8'
+        version: '0.12'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.8'
+        version: '0.12'
 - !ruby/object:Gem::Dependency
-  name: coco
+  name: rake
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.14'
+        version: '12.3'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.14'
+        version: '12.3'
 - !ruby/object:Gem::Dependency
   name: wwtd
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.3'
+        version: '1.4'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.3'
+        version: '1.4'
 description: |2
       SessionKeys is a cryptographic tool for the deterministic generation of
       NaCl compatible Curve25519 encryption and Ed25519 digital signature keys.
@@ -189,6 +145,7 @@ extensions: []
 extra_rdoc_files: []
 files:
 - ".coco.yml"
+- ".codeclimate.yml"
 - ".gitignore"
 - ".rubocop.yml"
 - ".ruby-version"
@@ -219,7 +176,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 2.1.0
+      version: 2.3.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
@@ -227,7 +184,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.5.1
+rubygems_version: 2.7.6.2
 signing_key: 
 specification_version: 4
 summary: SessionKeys generates deterministic user IDs and NaCl encryption/signing

metadata.gz.sig

@@ -1 +0,0 @@
-S�g{��˟��{��ۂHY���:M���J���UU-�M?ǭ�F��@�W9�� �	���h��x�r}�C����N�Ǚ�6�k3�����֞������y����s��\�$i��]=��,P��������h)�