signing 0.0.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 27be608b8ac3aee608f4310beeb4ce80a6de6cb9
+  data.tar.gz: 4451fb4fbcc524f46218ebca1ae617493982d0a0
+SHA512:
+  metadata.gz: 2b1fff1e92c316a64b60b9dad4251d03b28b769be9e3aa2f6731aa66cf75cb5463f02baabcdbe93fe52c9ca8935e8e1b5895cbdfa52a11eea1150e87bec5f984
+  data.tar.gz: 575a9dea70071b0c1b1e299cf3a7d90c423202d0b92b139291b00f473aa0575c67fa6f21b2fe25a065d392ec2adbb2cce8e04dce3b317e0dd064387204451ab5

data/.gems

@@ -0,0 +1 @@
+cutest -v 1.2.1

data/.gitignore

@@ -0,0 +1,2 @@
+pkg
+.gs

data/Rakefile

@@ -0,0 +1,8 @@
+require "cutest"
+
+task :test do
+  Cutest.run(Dir["test/*.rb"])
+end
+
+task :default => :test
+

data/Readme.md

@@ -0,0 +1,30 @@
+# signing
+
+Sign and unsign your data.
+
+## Usage
+
+```ruby
+require "signing"
+include Signing
+
+signer = Signer.new("secret", "salt")
+
+# sign
+signed_value = signer.sign("value")
+
+# unsign
+signer.unsign(signed_value) # returns "value"
+```
+
+## Installation
+
+Install it using rubygems.
+
+```
+$ gem install signing
+```
+
+## License
+
+MIT

data/lib/signing.rb

@@ -0,0 +1,54 @@
+require "base64"
+require "digest/hmac"
+require "digest/sha1"
+
+module Signing
+  def self.base64_encode(string)
+    Base64.urlsafe_encode64(string).gsub(/(=*$)/, "")
+  end
+
+  def self.base64_decode(string)
+    Base64.urlsafe_decode64(string + "=" * (-string.length % 4))
+  end
+
+  # constant-time comparison to prevent timing attacks
+  def self.compare(a, b)
+    len_eq = a.length == b.length
+    res = len_eq ? 0 : 1
+    left = len_eq ? a : b
+    (0...left.length).each { |i| res |= a[i].ord ^ b[i].ord }
+    res == 0
+  end
+
+  class Signer
+    def initialize(secret, salt)
+      @secret = secret
+      @salt = salt
+      @sep = "."
+    end
+
+    def sign(value)
+      value = Signing::base64_encode(value)
+      value + @sep + get_signature(value)
+    end
+
+    def unsign(signed_value)
+      return false if not signed_value.include? @sep
+
+      value, s, sig = signed_value.rpartition(@sep)
+      if Signing::compare(sig, get_signature(value))
+        return Signing::base64_decode(value)
+      end
+
+      false
+    end
+
+    private
+
+    def get_signature(value)
+      key = Digest::SHA1.digest("#{@salt}signer#{@secret}")
+      mac = Digest::HMAC.digest(value, key, Digest::SHA1)
+      Signing::base64_encode(mac)
+    end
+  end
+end

data/signing.gemspec

@@ -0,0 +1,13 @@
+# encoding: utf-8
+
+Gem::Specification.new do |s|
+  s.name              = "signing"
+  s.version           = "0.0.1"
+  s.summary           = "Sign and unsign your data."
+  s.description       = "Sign and unsign your data."
+  s.authors           = ["Gustavo Leguizamon"]
+  s.email             = ["leguizamon.gustavo@gmail.com"]
+  s.homepage          = "https://github.com/goopi/signing"
+  s.files             = `git ls-files`.split("\n")
+  s.license           = "MIT"
+end

data/test/signing_test.rb

@@ -0,0 +1,38 @@
+require File.expand_path("../lib/signing", File.dirname(__FILE__))
+include Signing
+
+scope do
+  setup do
+    {
+      :value => "hi",
+      :signed_value => "aGk.H9tzyMqq_e4j8yH-0KfNTZvoNBk",
+      :secret => "secret",
+      :salt => "salt"
+    }
+  end
+
+  test "should sign the value" do |params|
+    s = Signer.new(params[:secret], params[:salt])
+    signed_value = s.sign(params[:value])
+    assert_equal signed_value, params[:signed_value]
+
+    s = Signer.new("othersecret", params[:salt])
+    signed_value = s.sign(params[:value])
+    assert signed_value != params[:signed_value]
+
+    s = Signer.new(params[:secret], "othersalt")
+    signed_value = s.sign(params[:value])
+    assert signed_value != params[:signed_value]
+  end
+
+  test "should unsign the signed value" do |params|
+    s = Signer.new(params[:secret], params[:salt])
+    assert_equal params[:value], s.unsign(params[:signed_value])
+
+    s = Signer.new("othersecret", params[:salt])
+    assert_equal false, s.unsign(params[:signed_value])
+
+    s = Signer.new(params[:secret], "othersalt")
+    assert_equal false, s.unsign(params[:signed_value])
+  end
+end

metadata

@@ -0,0 +1,51 @@
+--- !ruby/object:Gem::Specification
+name: signing
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+platform: ruby
+authors:
+- Gustavo Leguizamon
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2013-09-16 00:00:00.000000000 Z
+dependencies: []
+description: Sign and unsign your data.
+email:
+- leguizamon.gustavo@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- .gems
+- .gitignore
+- Rakefile
+- Readme.md
+- lib/signing.rb
+- signing.gemspec
+- test/signing_test.rb
+homepage: https://github.com/goopi/signing
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.1.3
+signing_key: 
+specification_version: 4
+summary: Sign and unsign your data.
+test_files: []