sixarm_ruby_password_hash 1.2.1

data.tar.gz.sig

@@ -0,0 +1 @@
+������7.c���X����!Vw��_�/YN�

data/LICENSE.txt

@@ -0,0 +1,12 @@
+LICENSE
+
+You may choose any of these licenses:
+
+  - CreativeCommons License, Non-commercial Share Alike
+  - LGPL, GNU Lesser General Public License
+  - MIT License
+  - Ruby License
+
+THIS SOFTWARE IS PROVIDED "AS IS" AND WITHOUT ANY EXPRESS OR
+IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.

data/README.rdoc

@@ -0,0 +1,34 @@
+
+= SixArm Ruby Gem: Password Hash to do secure SHA256 passwords.
+
+Author:: Joel Parker Henderson, joelparkerhenderson@gmail.com
+Copyright:: Copyright (c) 2006-2010 Joel Parker Henderson
+License:: CreativeCommons License, Non-commercial Share Alike
+License:: LGPL, GNU Lesser General Public License
+
+Password hash tool to create secure passwords,
+
+This uses SHA256 hexdigest for the cryptographic hash,
+and authenticates a password, salt, and hash.
+
+To create a password:
+  require 'sixarm_ruby_password_hash'
+  text = 'mysecret'
+  salt = 'azsxdcfv'
+  hash = PasswordHash.new(text,salt)
+
+To create a password using our helpers:
+  require 'sixarm_ruby_password_hash'
+  require 'sixarm_ruby_password_salt'
+  require 'sixarm_ruby_password_text'
+  text = PasswordText.new
+  salt = PasswordSalt.new
+  hash = PasswordHash.new(text,salt)
+
+To verify a password:
+  hash.valid?(text,salt)
+
+To verify a password from a web form for a user:
+  user = User.find(params[:id]) or raise 'user not found'
+  user.hash.valid?(params[:password],user.salt)
+

data/lib/sixarm_ruby_password_hash.rb

@@ -0,0 +1,52 @@
+=begin rdoc
+
+= SixArm Ruby Gem: Password Hash to do secure SHA256 passwords.
+
+Author:: Joel Parker Henderson, joelparkerhenderson@gmail.com
+Copyright:: Copyright (c) 2006-2010 Joel Parker Henderson
+License:: CreativeCommons License, Non-commercial Share Alike
+License:: LGPL, GNU Lesser General Public License
+
+Password hash tool to create secure passwords,
+
+This uses SHA256 hexdigest for the cryptographic hash,
+and authenticates a password, salt, and hash.
+
+To create a password:
+  require 'sixarm_ruby_password_hash'
+  text = 'mysecret'
+  salt = 'azsxdcfv'
+  hash = PasswordHash.new(text,salt)
+
+To create a password using our helpers:
+  require 'sixarm_ruby_password_hash'
+  require 'sixarm_ruby_password_salt'
+  require 'sixarm_ruby_password_text'
+  text = PasswordText.new
+  salt = PasswordSalt.new
+  hash = PasswordHash.new(text,salt)
+
+To verify a password:
+  hash.valid?(text,salt)
+
+To verify a password from a web form for a user:
+  user = User.find(params[:id]) or raise 'user not found'
+  user.hash.valid?(params[:password],user.salt)
+
+=end
+
+require 'digest/sha2'
+
+class PasswordHash < String
+
+ def initialize(text,salt)
+  text or raise "text:#{text}"
+  salt or raise "salt:#{salt}"
+  super(Digest::SHA256.hexdigest(text+salt))
+ end
+
+ def valid?(text,salt)
+  self == Digest::SHA256.hexdigest(text+salt)
+ end
+
+end

data/test/sixarm_ruby_password_hash_test.rb

@@ -0,0 +1,24 @@
+require 'test/unit'
+require 'sixarm_ruby_password_hash'
+
+class Testing < Test::Unit::TestCase
+
+ def test_new
+  p = PasswordHash.new('foo','bar')
+  assert_not_nil(p,"p")
+  assert(p.is_a?(String),"p is a string")
+ end
+
+ def test_valid
+  p = PasswordHash.new('foo','bar')
+  assert(p.valid?('foo','bar'), "p.valid? foo bar")
+ end
+
+ def test_invalid
+  p = PasswordHash.new('foo','bar')
+  assert(!p.valid?('foo','xxx'), "p.valid? foo xxx")
+  assert(!p.valid?('xxx','bar'), "p.valid? xxx bar")
+ end
+
+end
+

metadata

@@ -0,0 +1,87 @@
+--- !ruby/object:Gem::Specification 
+name: sixarm_ruby_password_hash
+version: !ruby/object:Gem::Version 
+  prerelease: false
+  segments: 
+  - 1
+  - 2
+  - 1
+  version: 1.2.1
+platform: ruby
+authors: 
+- SixArm
+autorequire: 
+bindir: bin
+cert_chain: 
+- |
+  -----BEGIN CERTIFICATE-----
+  MIIDBDCCAm2gAwIBAgIJAKPwEETU5bHoMA0GCSqGSIb3DQEBBQUAMGAxCzAJBgNV
+  BAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1TYW4gRnJhbmNp
+  c2NvMQ8wDQYDVQQKEwZTaXhBcm0xEzARBgNVBAMTCnNpeGFybS5jb20wHhcNMTAx
+  MjEzMjMyNzEzWhcNMTMwOTA4MjMyNzEzWjBgMQswCQYDVQQGEwJVUzETMBEGA1UE
+  CBMKQ2FsaWZvcm5pYTEWMBQGA1UEBxMNU2FuIEZyYW5jaXNjbzEPMA0GA1UEChMG
+  U2l4QXJtMRMwEQYDVQQDEwpzaXhhcm0uY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GN
+  ADCBiQKBgQC94mD9JDwBsunsOI0VR3CXXbOWg9cWaWciwFyJNFiM7A9I8KPLfXUw
+  QC4czUe5ZuG4WHvinrWhkrCK+1dWBqoEClxdF/FoKO5a+tonGCjjmfy81JmFjjyx
+  eTsjsHyvw+Qik9kpf9aj6+pnkNrVswgNHVea2o9yabbEiS6VSeJWoQIDAQABo4HF
+  MIHCMB0GA1UdDgQWBBQzPJtqmSgc53eDN7aSzDQwr9TALDCBkgYDVR0jBIGKMIGH
+  gBQzPJtqmSgc53eDN7aSzDQwr9TALKFkpGIwYDELMAkGA1UEBhMCVVMxEzARBgNV
+  BAgTCkNhbGlmb3JuaWExFjAUBgNVBAcTDVNhbiBGcmFuY2lzY28xDzANBgNVBAoT
+  BlNpeEFybTETMBEGA1UEAxMKc2l4YXJtLmNvbYIJAKPwEETU5bHoMAwGA1UdEwQF
+  MAMBAf8wDQYJKoZIhvcNAQEFBQADgYEAooEexP/oPam1TP71SyuhxMb+uTrZbSQe
+  jVB+ExRwWadGwaNPUA56d39qwavwP+iu+3JpeonNMVvbWXF5naCX/dNFIeREHzER
+  ZDRQYMqru9TEMna6HD9zpcstF7vwThGovlOQ+3Y6plQ4nMzipXcZ9THqs65PIL0q
+  eabwpCbAopo=
+  -----END CERTIFICATE-----
+
+date: 2010-12-13 00:00:00 -08:00
+default_executable: 
+dependencies: []
+
+description: 
+email: sixarm@sixarm.com
+executables: []
+
+extensions: []
+
+extra_rdoc_files: []
+
+files: 
+- README.rdoc
+- LICENSE.txt
+- lib/sixarm_ruby_password_hash.rb
+- test/sixarm_ruby_password_hash_test.rb
+has_rdoc: true
+homepage: http://sixarm.com/
+licenses: []
+
+post_install_message: 
+rdoc_options: []
+
+require_paths: 
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement 
+  none: false
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      segments: 
+      - 0
+      version: "0"
+required_rubygems_version: !ruby/object:Gem::Requirement 
+  none: false
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      segments: 
+      - 0
+      version: "0"
+requirements: []
+
+rubyforge_project: 
+rubygems_version: 1.3.7
+signing_key: 
+specification_version: 3
+summary: "SixArm Ruby Gem: PasswordHash class for secure password hashing with plain text and random salt"
+test_files: 
+- test/sixarm_ruby_password_hash_test.rb

metadata.gz.sig

@@ -0,0 +1 @@
+W�Eh��.�t�!�N���p��~[������/��i�'�?�dz�yb���������+<�6d
R�|�ye\d�+��tg��h0��Ww3�h��b�f�?���vؓ:����7��x��S