ubiq-security 1.0.2 → 1.0.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 97aa80db52e77adb021ed791c52ca09b12bea36fd82d402fca9506e8fcac253d
-  data.tar.gz: b421f79fe3e7630dc3b20fc588156c679f60914ecf880c9f799d3861a4d1d9a2
+  metadata.gz: 0f4746f4365946e670135c9534728814a0b3981e782b3fc71bd2bd87da81e726
+  data.tar.gz: 3da4e66a2f415885871a4c8c2a8d486f2cf6b80c977c9ba8c2e235dc72082605
 SHA512:
-  metadata.gz: 2d6d1136d3db18adf77b492c8369feb76d448fc263e5178be4b896a3c2767ee872700eb2832f8acd7d2ec99f3779e478da4a6172072e1613e72dd7815ff4d2e4
-  data.tar.gz: 12cc028eed9331209b3198ceb4b82dc3fd019da29d2148b02923d955a2439d18cb84f8ba2e435d34ba6da2eb8bbb815f0545d67ef4aa567968ae3cf2bdab31c6
+  metadata.gz: 78f11f87fcf7df82d9f2c4c31bea91ca85cce962444256a99a708c730461e0d7e1236a0d3b938cc135c654b9f1f1d155d634b0c0062ec1093c7583f51e002686
+  data.tar.gz: b4cf969644f184c2d311ab900ed07baab367f8e396df04013af145ee37aa872eba5a57694e8aeacce68ca020fd74ea6074e8588f302f36f8b7dd23557e34be6a

data/CHANGELOG.md

@@ -0,0 +1,15 @@
+# Changelog
+
+## 1.0.7 - 2021-02-11
+* Gemfile / dependency cleanup
+
+## 1.0.6 - 2020-10-28
+* Change to MIT license
+
+## 1.0.5 - 2020-09-23
+* Remove dead code
+* Pass client library name and version to server
+* Added AAD information to ciphers for encrypt and decrypt
+
+## 1.0.1 - 2020-08-20
+* Initial Version

data/Gemfile

@@ -7,4 +7,6 @@ gemspec
   gem "rspec", "~> 3.0"
   gem "rb-readline"
   gem "httparty"
+  gem "webrick"
+  gem "activesupport"
 

data/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2020- Ubiq Security, Inc. (https://ubiqsecurity.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

data/README.md

@@ -31,8 +31,11 @@ To build and install directly from a clone of the gitlab repository source:
 ```sh
 git clone https://gitlab.com/ubiqsecurity/ubiq-ruby.git
 cd ubiq-ruby
-rake install:local
+bundle install
+gem build ubiq-security.gemspec
+gem install ./ubiq-security*.gem
 ```
+You may need to run the `gem install` commands above using sudo.
 
 
 ## Usage
@@ -82,7 +85,7 @@ Pass credentials and data into the encryption function.  The encrypted data will
 
 
 ```ruby
-require "ubiq-security"
+require 'ubiq-security'
 include Ubiq
 
 encrypted_data = encrypt(credentials, plaintext_data)
@@ -94,7 +97,7 @@ encrypted_data = encrypt(credentials, plaintext_data)
 Pass credentials and encrypted data into the decryption function.  The plaintext data will be returned.
 
 ```ruby
-require "ubiq-security"
+require 'ubiq-security'
 include Ubiq
 
 plaintext_data = decrypt(credentials, encrypted_data)
@@ -111,7 +114,7 @@ plaintext_data = decrypt(credentials, encrypted_data)
 
 
 ```ruby
-require "ubiq-security"
+require 'ubiq-security'
 include Ubiq
 
 # Process 1 MiB of plaintext data at a time
@@ -127,7 +130,7 @@ BLOCK_SIZE = 1024 * 1024
    # Loop until the end of the input file is reached
     until infile.eof?
       chunk = infile.read BLOCK_SIZE
-      encrypted_data += encryption.update(chunk))
+      encrypted_data += encryption.update(chunk)
     end
     # Make sure any additional encrypted data is retrieved from encryption instance
     encrypted_data += encryption.end()
@@ -146,7 +149,7 @@ BLOCK_SIZE = 1024 * 1024
 
 
 ```ruby
-require "ubiq-security"
+require 'ubiq-security'
 include Ubiq
 
 # Process 1 MiB of encrypted data at a time
@@ -158,7 +161,7 @@ BLOCK_SIZE = 1024 * 1024
     decryption = Decryption(credentials)
 
     # Start the decryption and get any header information
-    plaintext_data = decryption.begin())
+    plaintext_data = decryption.begin()
 
     # Loop until the end of the input file is reached
     until infile.eof?
@@ -179,7 +182,7 @@ BLOCK_SIZE = 1024 * 1024
 [bundler]: https://bundler.io
 [rubygems]: https://rubygems.org
 [gem]: https://rubygems.org/gems/uniq-security
-[dashboard]:https://dev.ubiqsecurity.com/docs/dashboard
+[dashboard]:https://dashboard.ubiqsecurity.com/
 [credentials]:https://dev.ubiqsecurity.com/docs/how-to-create-api-keys
 [apidocs]:https://dev.ubiqsecurity.com/docs/api
 

data/lib/ubiq-security.rb

@@ -1,18 +1,3 @@
-# Copyright 2020 Ubiq Security, Inc., Proprietary and All Rights Reserved.
-#
-# NOTICE:  All information contained herein is, and remains the property
-# of Ubiq Security, Inc. The intellectual and technical concepts contained
-# herein are proprietary to Ubiq Security, Inc. and its suppliers and may be
-# covered by U.S. and Foreign Patents, patents in process, and are
-# protected by trade secret or copyright law. Dissemination of this
-# information or reproduction of this material is strictly forbidden
-# unless prior written permission is obtained from Ubiq Security, Inc.
-#
-# Your use of the software is expressly conditioned upon the terms
-# and conditions available at:
-#
-#     https://ubiqsecurity.com/legal
-
 # frozen_string_literal: true
 
 require 'ubiq/version'

data/lib/ubiq/algo.rb

@@ -1,19 +1,3 @@
-# Copyright 2020 Ubiq Security, Inc., Proprietary and All Rights Reserved.
-#
-# NOTICE:  All information contained herein is, and remains the property
-# of Ubiq Security, Inc. The intellectual and technical concepts contained
-# herein are proprietary to Ubiq Security, Inc. and its suppliers and may be
-# covered by U.S. and Foreign Patents, patents in process, and are
-# protected by trade secret or copyright law. Dissemination of this
-# information or reproduction of this material is strictly forbidden
-# unless prior written permission is obtained from Ubiq Security, Inc.
-#
-# Your use of the software is expressly conditioned upon the terms
-# and conditions available at:
-#
-#     https://ubiqsecurity.com/legal
-#
-
 # frozen_string_literal: true
 
 require 'active_support/all'
@@ -23,7 +7,11 @@ module Ubiq
   # Class to provide some basic information mapping between an
   # encryption algorithm name and the cooresponding
   # key size, initialization vector length, and tag
+
   class Algo
+
+    UBIQ_HEADER_V0_FLAG_AAD = 0b00000001
+
     def set_algo
       @algorithm = {
         'aes-256-gcm' => {
@@ -33,10 +21,27 @@ module Ubiq
           key_length: 32,
           iv_length: 12,
           tag_length: 16
+        },
+        'aes-128-gcm' => {
+          id: 1,
+          algorithm: OpenSSL::Cipher::AES128,
+          mode: OpenSSL::Cipher::AES128.new(:GCM),
+          key_length: 16,
+          iv_length: 12,
+          tag_length: 16
         }
       }
     end
 
+    def find_alg(id)
+      set_algo.each do |k,v|
+        if v[:id] == id
+           return k
+         end
+      end
+      "unknown"
+    end
+
     def get_algo(name)
       set_algo[name]
     end

data/lib/ubiq/auth.rb

@@ -1,19 +1,3 @@
-# Copyright 2020 Ubiq Security, Inc., Proprietary and All Rights Reserved.
-#
-# NOTICE:  All information contained herein is, and remains the property
-# of Ubiq Security, Inc. The intellectual and technical concepts contained
-# herein are proprietary to Ubiq Security, Inc. and its suppliers and may be
-# covered by U.S. and Foreign Patents, patents in process, and are
-# protected by trade secret or copyright law. Dissemination of this
-# information or reproduction of this material is strictly forbidden
-# unless prior written permission is obtained from Ubiq Security, Inc.
-#
-# Your use of the software is expressly conditioned upon the terms
-# and conditions available at:
-#
-#     https://ubiqsecurity.com/legal
-#
-
 # frozen_string_literal: true
 
 require 'active_support/all'
@@ -48,6 +32,7 @@ module Ubiq
 
       # Initialize the headers object to be returned via this method
       all_headers = {}
+      all_headers['user-agent'] = 'ubiq-ruby/' + Ubiq::VERSION
       # The content type of request
       all_headers['content-type'] = 'application/json'
       # The request target calculated above(reqt)
@@ -74,7 +59,7 @@ module Ubiq
       all_headers.delete('(created)')
       all_headers.delete('(request-target)')
       all_headers.delete('host')
-      
+
       # Build the Signature header itself
       all_headers['signature']  = 'keyId="' + papi + '"'
       all_headers['signature'] += ', algorithm="hmac-sha512"'
@@ -87,9 +72,13 @@ module Ubiq
       return all_headers
     end
 
+    # Only want to return port in the URI if the
+    # host contained one, otherwise let gateway resolve it
     def self.get_host(host)
       uri = URI(host)
-      return "#{uri.hostname}:#{uri.port}"
+      ret = uri.hostname.to_s
+      ret += ":#{uri.port}" if host.match(/:[0-9]+/)
+      ret
     end
 
     def self.get_date

data/lib/ubiq/credentials.rb

@@ -1,24 +1,7 @@
-# Copyright 2020 Ubiq Security, Inc., Proprietary and All Rights Reserved.
-#
-# NOTICE:  All information contained herein is, and remains the property
-# of Ubiq Security, Inc. The intellectual and technical concepts contained
-# herein are proprietary to Ubiq Security, Inc. and its suppliers and may be
-# covered by U.S. and Foreign Patents, patents in process, and are
-# protected by trade secret or copyright law. Dissemination of this
-# information or reproduction of this material is strictly forbidden
-# unless prior written permission is obtained from Ubiq Security, Inc.
-#
-# Your use of the software is expressly conditioned upon the terms
-# and conditions available at:
-#
-#     https://ubiqsecurity.com/legal
-#
-
 # frozen_string_literal: true
 
 require 'configparser'
 require 'rb-readline'
-require 'byebug'
 require_relative './host.rb'
 
 

data/lib/ubiq/decrypt.rb

@@ -1,23 +1,6 @@
-# Copyright 2020 Ubiq Security, Inc., Proprietary and All Rights Reserved.
-#
-# NOTICE:  All information contained herein is, and remains the property
-# of Ubiq Security, Inc. The intellectual and technical concepts contained
-# herein are proprietary to Ubiq Security, Inc. and its suppliers and may be
-# covered by U.S. and Foreign Patents, patents in process, and are
-# protected by trade secret or copyright law. Dissemination of this
-# information or reproduction of this material is strictly forbidden
-# unless prior written permission is obtained from Ubiq Security, Inc.
-#
-# Your use of the software is expressly conditioned upon the terms
-# and conditions available at:
-#
-#     https://ubiqsecurity.com/legal
-#
-
 # frozen_string_literal: true
 
 require 'rb-readline'
-require 'byebug'
 require 'httparty'
 require 'active_support/all'
 require_relative './auth.rb'
@@ -123,10 +106,10 @@ module Ubiq
         # and the key?
         if @data.length > struct_length
           # Unpack the values packed in encryption
-          version, flag_for_later, algorithm_id, iv_length, key_length = packed_struct.unpack('CCCCn')
+          version, flags, algorithm_id, iv_length, key_length = packed_struct.unpack('CCCCn')
 
-          # verify flag and version are 0
-          raise 'invalid encryption header' if (version != 0) || (flag_for_later != 0)
+          # verify flag are correct and version is 0
+          raise 'invalid encryption header' if (version != 0 ) || ((flags & ~Algo::UBIQ_HEADER_V0_FLAG_AAD) != 0)
 
           # Does the buffer contain the entire header?
           if @data.length > struct_length + iv_length + key_length
@@ -165,7 +148,8 @@ module Ubiq
                 @key['client_id'] = client_id
                 @key['session'] = response['encryption_session']
 
-                @key['algorithm'] = 'aes-256-gcm'
+                # Get the algorithm name from the internal algorithm id in the header
+                @key['algorithm'] = Algo.new.find_alg(algorithm_id)
 
                 encrypted_private_key = response['encrypted_private_key']
                 # Decrypt the encryped private key using SRSA
@@ -194,6 +178,15 @@ module Ubiq
             if @key.present?
               @algo = Algo.new.get_algo(@key['algorithm'])
               @key['dec'] = Algo.new.decryptor(@algo, @key['raw'], iv)
+              # Documentation indicates the auth_data has to be set AFTER auth_tag
+              # but we get an OpenSSL error when it is set AFTER an update call.
+              # Checking OpenSSL documentation, there is not a requirement to set
+              # auth_data before auth_tag so Ruby documentation seems to be
+              # wrong.  This approach works and is compatible with the encrypted
+              # data produced by the other languages' client library
+              if (flags & Algo::UBIQ_HEADER_V0_FLAG_AAD) != 0
+                 @key['dec'].auth_data = packed_struct + iv + encrypted_key
+              end
               @key['uses'] += 1
             end
           end

data/lib/ubiq/encrypt.rb

@@ -1,23 +1,6 @@
-# Copyright 2020 Ubiq Security, Inc., Proprietary and All Rights Reserved.
-#
-# NOTICE:  All information contained herein is, and remains the property
-# of Ubiq Security, Inc. The intellectual and technical concepts contained
-# herein are proprietary to Ubiq Security, Inc. and its suppliers and may be
-# covered by U.S. and Foreign Patents, patents in process, and are
-# protected by trade secret or copyright law. Dissemination of this
-# information or reproduction of this material is strictly forbidden
-# unless prior written permission is obtained from Ubiq Security, Inc.
-#
-# Your use of the software is expressly conditioned upon the terms
-# and conditions available at:
-#
-#     https://ubiqsecurity.com/legal
-#
-
 # frozen_string_literal: true
 
 require 'rb-readline'
-require 'byebug'
 require 'httparty'
 require 'active_support/all'
 require_relative './auth.rb'
@@ -128,7 +111,9 @@ module Ubiq
       @enc, @iv = Algo.new.encryptor(@algo, @key['raw'])
 
       # Pack the result into bytes to get a byte string
-      struct = [0, 0, @algo[:id], @iv.length, @key['encrypted'].length].pack('CCCCn')
+      struct = [0, Algo::UBIQ_HEADER_V0_FLAG_AAD, @algo[:id], @iv.length, @key['encrypted'].length].pack('CCCCn')
+
+      @enc.auth_data = struct + @iv + @key['encrypted']
       @encryption_started = true
       return struct + @iv + @key['encrypted']
     end

data/lib/ubiq/host.rb

@@ -1,18 +1,5 @@
-# Copyright 2020 Ubiq Security, Inc., Proprietary and All Rights Reserved.
-#
-# NOTICE:  All information contained herein is, and remains the property
-# of Ubiq Security, Inc. The intellectual and technical concepts contained
-# herein are proprietary to Ubiq Security, Inc. and its suppliers and may be
-# covered by U.S. and Foreign Patents, patents in process, and are
-# protected by trade secret or copyright law. Dissemination of this
-# information or reproduction of this material is strictly forbidden
-# unless prior written permission is obtained from Ubiq Security, Inc.
-#
-# Your use of the software is expressly conditioned upon the terms
-# and conditions available at:
-#
-#     https://ubiqsecurity.com/legal
-#
+# frozen_string_literal: true
+
 module Ubiq
-  UBIQ_HOST = 'api.ubiqsecurity.com:8811'
+  UBIQ_HOST = 'api.ubiqsecurity.com'
 end

data/lib/ubiq/version.rb

@@ -1,21 +1,5 @@
-# Copyright 2020 Ubiq Security, Inc., Proprietary and All Rights Reserved.
-#
-# NOTICE:  All information contained herein is, and remains the property
-# of Ubiq Security, Inc. The intellectual and technical concepts contained
-# herein are proprietary to Ubiq Security, Inc. and its suppliers and may be
-# covered by U.S. and Foreign Patents, patents in process, and are
-# protected by trade secret or copyright law. Dissemination of this
-# information or reproduction of this material is strictly forbidden
-# unless prior written permission is obtained from Ubiq Security, Inc.
-#
-# Your use of the software is expressly conditioned upon the terms
-# and conditions available at:
-#
-#     https://ubiqsecurity.com/legal
-#
-
 # frozen_string_literal: true
 
 module Ubiq
-  VERSION = '1.0.2'
+  VERSION = '1.0.7'
 end

data/ubiq-security.gemspec

@@ -10,7 +10,7 @@ Gem::Specification.new do |spec|
   spec.description   = "Provide data encryption to any application with a couple of API calls.  " \
                        "See https://www.ubiqsecurity.com for details."
   spec.homepage      = "https://dev.ubiqsecurity.com/docs/ruby-library"
-  spec.license       = "Nonstandard"
+  spec.license       = "MIT"
   spec.required_ruby_version = Gem::Requirement.new(">= 2.3.0")
 
   spec.metadata["homepage_uri"] = spec.homepage
@@ -27,4 +27,8 @@ Gem::Specification.new do |spec|
   spec.require_paths = ["lib"]
   spec.add_runtime_dependency 'rb-readline', '~> 0.2', '>= 0.2'
   spec.add_runtime_dependency 'httparty', '~> 0.15', '>= 0.15'
+  spec.add_runtime_dependency 'webrick', '~> 1.7'
+  spec.add_runtime_dependency 'activesupport', '>= 6.1'
+  spec.add_runtime_dependency 'configparser', '>= 0.1'
+  spec.add_runtime_dependency 'tzinfo-data', '>= 1'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: ubiq-security
 version: !ruby/object:Gem::Version
-  version: 1.0.2
+  version: 1.0.7
 platform: ruby
 authors:
 - Ubiq Security, Inc.
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2020-08-20 00:00:00.000000000 Z
+date: 2021-02-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rb-readline
@@ -50,6 +50,62 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '0.15'
+- !ruby/object:Gem::Dependency
+  name: webrick
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.7'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.7'
+- !ruby/object:Gem::Dependency
+  name: activesupport
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '6.1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '6.1'
+- !ruby/object:Gem::Dependency
+  name: configparser
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0.1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0.1'
+- !ruby/object:Gem::Dependency
+  name: tzinfo-data
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1'
 description: Provide data encryption to any application with a couple of API calls.  See
   https://www.ubiqsecurity.com for details.
 email:
@@ -58,9 +114,10 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- CHANGELOG.md
 - CODE_OF_CONDUCT.md
 - Gemfile
-- LICENSE.txt
+- LICENSE
 - README.md
 - Rakefile
 - lib/ubiq-security.rb
@@ -74,7 +131,7 @@ files:
 - ubiq-security.gemspec
 homepage: https://dev.ubiqsecurity.com/docs/ruby-library
 licenses:
-- Nonstandard
+- MIT
 metadata:
   homepage_uri: https://dev.ubiqsecurity.com/docs/ruby-library
   source_code_uri: https://gitlab.com/ubiqsecurity/ubiq-ruby

data/LICENSE.txt

@@ -1,17 +0,0 @@
-
- Copyright 2020 Ubiq Security, Inc., Proprietary and All Rights Reserved.
-
- NOTICE:  All information contained herein is, and remains the property
- of Ubiq Security, Inc. The intellectual and technical concepts contained
- herein are proprietary to Ubiq Security, Inc. and its suppliers and may be
- covered by U.S. and Foreign Patents, patents in process, and are
- protected by trade secret or copyright law. Dissemination of this
- information or reproduction of this material is strictly forbidden
- unless prior written permission is obtained from Ubiq Security, Inc.
-
- Your use of the software is expressly conditioned upon the terms
- and conditions available at:
-
-     https://ubiqsecurity.com/legal
-
-