trocla 0.7.0 → 0.8.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1e516b5dbf1bdca34c4c47a440672337c3c7f8694593ff2b06ae2a2602a6b907
-  data.tar.gz: ce60947349c3faf08f7d0cda00fa3ddeeae6c09a1b8f8947695134c74e72b101
+  metadata.gz: 23d5e8dfd009afd3c57c7621398d319cb5ccc503a2d8af485c32d99593ecd5c3
+  data.tar.gz: a8390bafef25e87f0c21c2a2e5c5035fcbb54e7dd2eb2ce337142dae6412e0ac
 SHA512:
-  metadata.gz: 900ce53ad161c3a8819353205c685ebae03d95f303df6af34e5cd4771ab1fc4711684aad9411bdd9aab85d8426873ea179a03f288b47e38c9351b1c49c757528
-  data.tar.gz: eb344684031b86e4e56cd75c2530f9542d051fc1e395141c4c68070f03e4ba53784d6bdfcdbcf08d563af62e770526b1a7e2d9a1ac56c7daf6371ac6120a5397
+  metadata.gz: bb1442e7ce601a9c057c3df1dfba3eef8d59c0bb09112b30258978beff97e3f65bb38b3908db8e4f54ec90681fb5a3b4a355341c621273b34a2c540266a4251c
+  data.tar.gz: d8bc6e8656184fe454b3716cf137f48d1e2aa46ffdf368b4af528363fde7f159b17d8c5ea729792b7eac34d10d1610f05da35d33a09381d78ba52e0c69eda8f1

data/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## to 0.8.0
+
+* Add Argon2 format - Fixes [#84](https://github.com/duritong/trocla/issues/84)
+* Add yescrypt format - Fixes [#81](https://github.com/duritong/trocla/issues/81) - not supported on Jruby
+
 ## to 0.7.0
 
 * bump support for various dependencies and ruby versions

data/README.md

@@ -174,6 +174,17 @@ Password hashes for PostgreSQL servers. Since postgesql 10 you can use the sha25
 You are able to tune the [cost factor of bcrypt](https://github.com/codahale/bcrypt-ruby#cost-factors) by passing the option `cost`.
 Note: ruby bcrypt does not support a [cost > 31](https://github.com/codahale/bcrypt-ruby/blob/master/lib/bcrypt/password.rb#L45).
 
+### argon2
+
+You are able to tune argon2 options by passing the option `argon2` with what the [Argon2](https://github.com/technion/ruby-argon2?tab=readme-ov-file#usage) rubygem supports.
+
+### yescrypt
+
+You are able to tune the cost factor of yescrypt by passing the option `cost`.
+Note: yescrypt does not support a cost > 11
+
+**Important:** Since we are using [XCrypt](https://github.com/rkh/ruby-xcrypt) gem, which calls out to libxcrypt through FFI, you cannot use the yecrypt format on JRuby installations, aka. OpenVox Server installations. If you want to deliver yescrypt hashes in your Puppet manifests, you need to generate the yescrypt hash in a Ruby MRI installation, once the hash is in the trocla database a OpenVox Server can just fetch it.
+
 ### x509
 
 This format takes a set of additional options. Required are:
@@ -247,7 +258,6 @@ Output render options are:
 ## Installation
 
 * Debian has trocla within its sid-release: `apt-get install trocla`
-* For RHEL/CentOS 7 there is a [copr reporisotry](https://copr.fedoraproject.org/coprs/duritong/trocla/). Follow the help there to integrate the repository and install trocla.
 * Trocla is also distributed as gem: `gem install trocla`
 
 ## Configuration
@@ -420,6 +430,6 @@ See [Changelog](CHANGELOG.md)
 
 ## Copyright
 
-Copyright (c) 2011-2015 mh. See LICENSE.txt for
+Copyright (c) 2011-2026 mh. See LICENSE.txt for
 further details.
 

data/lib/trocla/formats/argon2.rb

@@ -0,0 +1,7 @@
+class Trocla::Formats::Argon2 < Trocla::Formats::Base
+  expensive true
+  require 'argon2'
+  def format(plain_password, options = {})
+    Argon2::Password.create(plain_password,options['argon2'] || {})
+  end
+end

data/lib/trocla/formats/yescrypt.rb

@@ -0,0 +1,9 @@
+class Trocla::Formats::Yescrypt < Trocla::Formats::Base
+  expensive true
+  require 'xcrypt' unless Object.const_defined?(:RUBY_ENGINE) and RUBY_ENGINE == 'jruby'
+  def format(plain_password, options = {})
+    raise 'Not supported on Jruby' if Object.const_defined?(:RUBY_ENGINE) and RUBY_ENGINE == 'jruby'
+    raise "Unsupported cost factor" if options['cost'] && options['cost'] > 11
+    XCrypt.yescrypt(plain_password, cost: options['cost'])
+  end
+end

data/lib/trocla/version.rb

@@ -3,7 +3,7 @@
 class Trocla
   module VERSION
     MAJOR = 0
-    MINOR = 7
+    MINOR = 8
     PATCH = 0
     BUILD = nil
 

metadata

@@ -1,13 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: trocla
 version: !ruby/object:Gem::Version
-  version: 0.7.0
+  version: 0.8.0
 platform: ruby
 authors:
 - mh
+autorequire:
 bindir: bin
 cert_chain: []
-date: 1980-01-02 00:00:00.000000000 Z
+date: 2026-04-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: highline
@@ -93,6 +94,34 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '0.2'
+- !ruby/object:Gem::Dependency
+  name: argon2
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.3'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.3'
+- !ruby/object:Gem::Dependency
+  name: xcrypt
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.2'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.2'
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
@@ -168,6 +197,7 @@ files:
 - lib/trocla/encryptions/none.rb
 - lib/trocla/encryptions/ssl.rb
 - lib/trocla/formats.rb
+- lib/trocla/formats/argon2.rb
 - lib/trocla/formats/bcrypt.rb
 - lib/trocla/formats/md5crypt.rb
 - lib/trocla/formats/mysql.rb
@@ -180,6 +210,7 @@ files:
 - lib/trocla/formats/sshkey.rb
 - lib/trocla/formats/wireguard.rb
 - lib/trocla/formats/x509.rb
+- lib/trocla/formats/yescrypt.rb
 - lib/trocla/hooks.rb
 - lib/trocla/store.rb
 - lib/trocla/stores.rb
@@ -195,6 +226,7 @@ metadata:
   homepage_uri: https://tech.immerda.ch/2011/12/trocla-get-hashed-passwords-out-of-puppet-manifests/
   source_code_uri: https://github.com/duritong/trocla
   changelog_uri: https://github.com/duritong/trocla/blob/master/CHANGELOG.md
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -202,14 +234,15 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 2.5.0
+      version: '3.0'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.3
+rubygems_version: 3.5.22
+signing_key:
 specification_version: 4
 summary: Trocla a simple password generator and storage
 test_files: []