vault-tree 0.1.0 → 0.3.3

data/lib/vault-tree/util/json.rb

@@ -1,4 +1,5 @@
 require 'json'
+
 module VaultTree
   module Support
     module JSON

data/lib/vault-tree/{config → util}/string.rb

@@ -4,7 +4,7 @@ class String
   end
 
   def extract_ancestor_id
-    self.gsub(/(CONTENTS\[\')|(\'\])/,'').strip
+    self.gsub(/((CONTENTS|KEY)\[\')|(\'\])/,'').strip
   end
 
   def checksum
@@ -18,8 +18,4 @@ class String
   def camelize
     self.split("_").each {|s| s.capitalize! }.join("")
   end
-
-  def has_ancestor?
-    self.include? 'CONTENTS'
-  end
 end

data/lib/vault-tree/version.rb

@@ -1,3 +1,3 @@
 module VaultTree
-  VERSION = '0.1.0'
+  VERSION = '0.3.3'
 end

data/spec/assembled_shamir_key_spec.rb

@@ -0,0 +1,79 @@
+require 'rspec'
+RSpec.configure{ |config| config.color_enabled = true }
+require_relative '../lib/vault-tree/lock_smith/assembled_shamir_key'
+
+module VaultTree
+  module Crypto
+    describe AssembledShamirKey do
+
+      describe '#assemble' do
+
+        context 'with 3 out of 5 secrets' do
+          before :each do
+            s = SecretSharing::Shamir.new(5,3)
+            s.create_random_secret
+            @established_secret = s.secret.to_s
+            @expected_digest = LockSmith.new(message: @established_secret).secure_hash
+            @key_shares = s.shares[0..2].map{|s| s.to_s}
+            @assembled_key = AssembledShamirKey.new(key_shares: @key_shares)
+          end
+
+          it 'recovers a hash of the shared secret' do
+            @assembled_key.assemble.should == @expected_digest
+          end
+        end
+
+        context 'with 5 out of 5 secrets' do
+          before :each do
+            s = SecretSharing::Shamir.new(5,5)
+            s.create_random_secret
+            @established_secret = s.secret.to_s
+            @expected_digest = LockSmith.new(message: @established_secret).secure_hash
+            @key_shares = s.shares[0..4].map{|s| s.to_s}
+            @assembled_key = AssembledShamirKey.new(key_shares: @key_shares)
+          end
+
+          it 'recovers a hash of the shared secret' do
+            @assembled_key.assemble.should == @expected_digest
+          end
+        end
+
+        context 'with 2 out of 2 secrets' do
+          before :each do
+            s = SecretSharing::Shamir.new(2,2)
+            s.create_random_secret
+            @established_secret = s.secret.to_s
+            @expected_digest = LockSmith.new(message: @established_secret).secure_hash
+            @key_shares = s.shares[0..1].map{|s| s.to_s}
+            @assembled_key = AssembledShamirKey.new(key_shares: @key_shares)
+          end
+
+          it 'recovers a hash of the shared secret' do
+            @assembled_key.assemble.should == @expected_digest
+          end
+        end
+
+        context 'in exceptional situations' do
+
+          it 'throws an exception on init if one of the shares is not a string' do
+            s = SecretSharing::Shamir.new(5,3)
+            s.create_random_secret
+            @established_secret = s.secret.to_s
+            @expected_digest = LockSmith.new(message: @established_secret).secure_hash
+            @key_shares = s.shares[0..2].map{|s| s.to_s}
+
+            # Replace the last string with just an object
+            @key_shares[2] = Object.new
+            expect{AssembledShamirKey.new(key_shares: @key_shares)}.to raise_error(TypeError)
+          end
+
+          it 'throws an exception if the key shares are nil' do
+            @key_shares = nil
+            expect{AssembledShamirKey.new(key_shares: @key_shares)}.to raise_error(TypeError)
+          end
+        end
+
+      end
+    end
+  end
+end

data/spec/generated_shamir_key_spec.rb

@@ -0,0 +1,52 @@
+require 'rspec'
+RSpec.configure{ |config| config.color_enabled = true }
+require_relative '../lib/vault-tree/lock_smith/generated_shamir_key'
+
+module VaultTree
+  module Crypto
+    describe GeneratedShamirKey do
+
+      describe '#generate | #assemble' do
+
+        context 'with 3 out of 5 secrets' do
+          it 'recovers a hash of the shared secret' do
+            generated_key = GeneratedShamirKey.new(outstanding_shares: 5, recovery_threshold: 3)
+            expected_digest = generated_key.key
+            key_shares = generated_key.shares
+            assembled_key = AssembledShamirKey.new(key_shares: key_shares)
+            assembled_key.assemble.should == expected_digest
+          end
+
+          it 'recovers a hash of the shared secret when the shares are requested before the key' do
+            generated_key = GeneratedShamirKey.new(outstanding_shares: 5, recovery_threshold: 3)
+            key_shares = generated_key.shares
+            expected_digest = generated_key.key
+            assembled_key = AssembledShamirKey.new(key_shares: key_shares)
+            assembled_key.assemble.should == expected_digest
+          end
+        end
+
+        context 'with 5 out of 5 secrets' do
+          it 'recovers a hash of the shared secret' do
+            generated_key = GeneratedShamirKey.new(outstanding_shares: 5, recovery_threshold: 5)
+            expected_digest = generated_key.key
+            key_shares = generated_key.shares
+            assembled_key = AssembledShamirKey.new(key_shares: key_shares)
+            assembled_key.assemble.should == expected_digest
+          end
+        end
+
+        context 'with 2 out of 2 secrets' do
+          it 'recovers a hash of the shared secret' do
+            generated_key = GeneratedShamirKey.new(outstanding_shares: 2, recovery_threshold: 2)
+            expected_digest = generated_key.key
+            key_shares = generated_key.shares
+            assembled_key = AssembledShamirKey.new(key_shares: key_shares)
+            assembled_key.assemble.should == expected_digest
+          end
+        end
+
+      end
+    end
+  end
+end

data/spec/lock_smith_spec.rb

@@ -0,0 +1,90 @@
+require 'rspec'
+RSpec.configure{ |config| config.color_enabled = true }
+
+require_relative '../lib/vault-tree/lock_smith'
+
+module VaultTree
+  describe LockSmith do
+
+    describe '#symmetric_encrypt | #symmetric_decrypt' do
+      it 'encrypt and decrypt a simple message' do
+        secret_key = LockSmith.new(message: 'my_secret_key').secure_hash
+        cipher_text = LockSmith.new(message: 'Secret Message', secret_key: secret_key).symmetric_encrypt
+        recovered_msg = LockSmith.new(cipher_text: cipher_text, secret_key: secret_key).symmetric_decrypt
+        recovered_msg.should == 'Secret Message'
+      end
+    end
+
+    describe '#asymmetric_encrypt  | #asymmetric_decrypt' do
+      it 'bob can encrypt with alice pub key and Alice can decrypt' do
+        alice_priv_key = LockSmith.new().generate_private_key
+        alice_pub_key = LockSmith.new(private_key: alice_priv_key).generate_public_key
+        alice_pub_key = LockSmith.new(private_key: alice_priv_key).generate_public_key
+        bob_priv_key = LockSmith.new().generate_private_key
+        bob_pub_key = LockSmith.new(private_key: bob_priv_key).generate_public_key
+        cipher_text = LockSmith.new(message: 'Secret Message', public_key: alice_pub_key, private_key: bob_priv_key).asymmetric_encrypt
+        bob_pub_key = LockSmith.new(private_key: bob_priv_key).generate_public_key
+        recovered_msg = LockSmith.new(cipher_text: cipher_text, public_key: bob_pub_key, private_key: alice_priv_key).asymmetric_decrypt
+        recovered_msg.should == 'Secret Message'
+      end
+    end
+
+    describe '#sign_message | #verify_message' do
+      it 'sign and verify a message' do
+        msg = 'My Message to Sign!'
+        sk = LockSmith.new().generate_signing_key
+        vk = LockSmith.new(signing_key: sk).generate_verify_key
+        sig = LockSmith.new(signing_key: sk, message: msg).sign_message
+        LockSmith.new(verify_key: vk, message: msg, signature: sig).verify_message.should be true
+      end
+    end
+
+    describe '#split_secret | #combine_secret_shares' do
+
+      context 'with 3 out of 5 secrets' do
+        it 'recovers the shared secret' do
+          pending
+          secret_key = LockSmith.new().generate_secret_key
+          secret_shares = LockSmith.new(message: secret_key, outstanding_secret_shares: 5, secret_recovery_threshold: 3).split_secret
+          combined_secret = LockSmith.new(message: secret_key, secret_shares: secret_shares).combine_secret_shares
+          combined_secret.should == secret_key
+        end
+      end
+
+      context 'with 5 out of 5 secrets' do
+        it 'recovers the shared secret' do
+          pending
+        end
+      end
+
+      context 'with 2 out of 2 secrets' do
+        it 'recovers the shared secret' do
+          pending
+        end
+      end
+
+      context 'in exceptional situations' do
+
+        it 'throws an exception on init if one of the shares is not a string' do
+          pending
+          s = SecretSharing::Shamir.new(5,3)
+          s.create_random_secret
+          @established_secret = s.secret.to_s
+          @expected_digest = LockSmith.new(message: @established_secret).secure_hash
+          @key_shares = s.shares[0..2].map{|s| s.to_s}
+
+          # Replace the last string with just an object
+          @key_shares[2] = Object.new
+          expect{AssembledShamirKey.new(key_shares: @key_shares)}.to raise_error(TypeError)
+        end
+
+        it 'throws an exception if the key shares are nil' do
+          pending
+          @key_shares = nil
+          expect{AssembledShamirKey.new(key_shares: @key_shares)}.to raise_error(TypeError)
+        end
+      end
+    end
+
+  end
+end

data/spec/secret_sharing_spec.rb

@@ -0,0 +1,43 @@
+require 'rspec'
+RSpec.configure{ |config| config.color_enabled = true }
+require 'secretsharing'
+
+describe 'Secret Sharing Test Run' do
+  describe 'from the README' do
+
+    it 'demo the gem use' do
+
+      # create an object for 3 out of 5 secret sharing
+      s = SecretSharing::Shamir.new(5,3)
+
+      # create a random secret (returns the secret)
+      s.create_random_secret
+
+      # show secret
+      #puts s.secret
+      created_secret = s.secret
+
+      # show password representation of secret (Base64)
+      #puts s.secret_password
+
+      # show shares
+      #s.shares.each { |share| puts share }
+
+      # recover secret from shares
+      s2 = SecretSharing::Shamir.new(3)
+
+      # Accepts SecretSharing::Shamir::Share objects or
+      # string representations thereof
+
+      # In this case we are useing the string representation
+      s2 << s.shares[0].to_s
+      s2 << s.shares[2].to_s
+      s2 << s.shares[4].to_s
+      assembled_secret = s2.secret
+      #puts assembled_secret
+
+      #Compare assembled to created
+      assembled_secret.should == created_secret
+    end
+  end
+end

data/support/scripts/libsodium_ubuntu.sh

@@ -19,7 +19,7 @@ sudo apt-get install devscripts debhelper build-essential
 
 # Build and Install libsodium
 export NAME=libsodium
-export VERSION=0.4.2
+export VERSION=0.4.3
 export DEBVERSION=${VERSION}-1
 #Download and extract the archive
 if [ ! -f ${NAME}_${VERSION}.orig.tar.gz ]

data/vault-tree.gemspec

@@ -18,9 +18,10 @@ Gem::Specification.new do |spec|
   spec.test_files    = spec.files.grep(%r{^(test|spec|features)/})
   spec.require_paths = ["lib"]
 
-  spec.add_dependency "rbnacl", "1.1.0"
-  spec.add_dependency "require_all"
+  spec.add_dependency "rbnacl", "2.0.0"
+  spec.add_dependency "secretsharing", "0.3"
   spec.add_development_dependency "bundler", "~> 1.3"
   spec.add_development_dependency "rspec"
   spec.add_development_dependency "cucumber"
+  spec.add_development_dependency "relish"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: vault-tree
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.3.3
   prerelease: 
 platform: ruby
 authors:
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2013-11-11 00:00:00.000000000 Z
+date: 2014-02-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rbnacl
@@ -18,7 +18,7 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.1.0
+        version: 2.0.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -26,23 +26,23 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.1.0
+        version: 2.0.0
 - !ruby/object:Gem::Dependency
-  name: require_all
+  name: secretsharing
   requirement: !ruby/object:Gem::Requirement
     none: false
     requirements:
-    - - ! '>='
+    - - '='
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '0.3'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     none: false
     requirements:
-    - - ! '>='
+    - - '='
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '0.3'
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
@@ -91,6 +91,22 @@ dependencies:
     - - ! '>='
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: relish
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
 description: Vault Tree is a Ruby library for executing distributed cryptographic
   contracts.
 email:
@@ -100,23 +116,56 @@ extensions: []
 extra_rdoc_files: []
 files:
 - .gitignore
+- CHANGE_LOG.md
 - Gemfile
 - Gemfile.lock
 - LICENSE.txt
 - README.md
 - Rakefile
 - VagrantFile
-- features/core.feature
+- features/.nav
+- features/contracts/asymmetric_vault.feature
+- features/contracts/block_chain_key_transfer.feature
+- features/contracts/one_two_three.feature
+- features/contracts/readme.md
+- features/contracts_and_vaults.md
+- features/contributing_to_vault_tree.md
+- features/decision_tree.md
+- features/enforcement_problem.md
 - features/exceptions.feature
+- features/install_and_usage.md
+- features/keywords/assembled_shamir_key.feature
+- features/keywords/contents.feature
+- features/keywords/decryption_key.feature
+- features/keywords/dh_key.feature
+- features/keywords/external_data.feature
+- features/keywords/generated_shamir_key.feature
+- features/keywords/key.feature
+- features/keywords/master_passphrase.feature
+- features/keywords/public_encryption_key.feature
+- features/keywords/random_number.feature
+- features/keywords/readme.md
+- features/keywords/split_key.feature
+- features/keywords/unlocked.feature
+- features/manipulating_contracts.md
+- features/readme.md
+- features/steps/asymmetric_vault.steps.rb
+- features/steps/block_chain_key_transfer.steps.rb
 - features/steps/core.steps.rb
 - features/steps/exceptions.steps.rb
+- features/steps/one_two_three.steps.rb
+- features/steps/secret_sharing.steps.rb
+- features/support/contract_fixtures/asymmetric_vault.0.1.0.json
+- features/support/contract_fixtures/blank_simple_test_contract.json
+- features/support/contract_fixtures/block_chain_key_transfer.0.1.0.json
+- features/support/contract_fixtures/broken_contract.json
+- features/support/contract_fixtures/one_two_three.0.7.0.json
+- features/support/contract_fixtures/simple_test_contract.json
+- features/support/contract_fixtures/template.json
 - features/support/env.rb
+- features/what_is_vault_tree.md
 - features/world.rb
 - lib/vault-tree.rb
-- lib/vault-tree/config/dependencies.rb
-- lib/vault-tree/config/lib.rb
-- lib/vault-tree/config/path_helpers.rb
-- lib/vault-tree/config/string.rb
 - lib/vault-tree/contract/close_validator.rb
 - lib/vault-tree/contract/contract.rb
 - lib/vault-tree/contract/contract_presenter.rb
@@ -125,6 +174,8 @@ files:
 - lib/vault-tree/contract/open_validator.rb
 - lib/vault-tree/contract/vault.rb
 - lib/vault-tree/exceptions/empty_vault.rb
+- lib/vault-tree/exceptions/exception_template.erb
+- lib/vault-tree/exceptions/failed_unlock_attempt.rb
 - lib/vault-tree/exceptions/fill_attempt_master_password.rb
 - lib/vault-tree/exceptions/invalid_signature.rb
 - lib/vault-tree/exceptions/malformed_json.rb
@@ -135,35 +186,34 @@ files:
 - lib/vault-tree/exceptions/unsupported_keyword.rb
 - lib/vault-tree/exceptions/vault_does_not_exist.rb
 - lib/vault-tree/exceptions/vault_tree_exception.rb
+- lib/vault-tree/keywords/assembled_shamir_key.rb
+- lib/vault-tree/keywords/contents.rb
 - lib/vault-tree/keywords/decryption_key.rb
+- lib/vault-tree/keywords/dh_key.rb
 - lib/vault-tree/keywords/external_data.rb
+- lib/vault-tree/keywords/generated_shamir_key.rb
+- lib/vault-tree/keywords/key.rb
 - lib/vault-tree/keywords/keyword.rb
 - lib/vault-tree/keywords/keyword_interpreter.rb
 - lib/vault-tree/keywords/master_passphrase.rb
 - lib/vault-tree/keywords/public_encryption_key.rb
 - lib/vault-tree/keywords/random_number.rb
-- lib/vault-tree/keywords/shared_key.rb
+- lib/vault-tree/keywords/split_key.rb
 - lib/vault-tree/keywords/unlocked.rb
-- lib/vault-tree/keywords/vault_contents.rb
-- lib/vault-tree/lock_smith/asymmetric_cipher.rb
-- lib/vault-tree/lock_smith/crypto_hash.rb
-- lib/vault-tree/lock_smith/digital_signature.rb
-- lib/vault-tree/lock_smith/encryption_key_pair.rb
+- lib/vault-tree/lock_smith.rb
+- lib/vault-tree/lock_smith/assembled_shamir_key.rb
+- lib/vault-tree/lock_smith/dh_key_pair.rb
+- lib/vault-tree/lock_smith/generated_shamir_key.rb
 - lib/vault-tree/lock_smith/null_vault.rb
-- lib/vault-tree/lock_smith/random_number.rb
-- lib/vault-tree/lock_smith/shared_key_pair.rb
-- lib/vault-tree/lock_smith/signing_key_pair.rb
-- lib/vault-tree/lock_smith/symmetric_cipher.rb
+- lib/vault-tree/lock_smith/split_key.rb
+- lib/vault-tree/path_helpers.rb
 - lib/vault-tree/util/json.rb
+- lib/vault-tree/util/string.rb
 - lib/vault-tree/version.rb
-- spec/app/locksmith/asymmetric_cipher_spec.rb
-- spec/app/locksmith/signing_key_pair_spec.rb
-- spec/spec_helper.rb
-- spec/support/fixtures/blank_simple_test_contract.json
-- spec/support/fixtures/broken_contract.json
-- spec/support/fixtures/one_two_three-0.5.0.EXP.json
-- spec/support/fixtures/reference_contract.1.0.0.json
-- spec/support/fixtures/simple_test_contract.json
+- spec/assembled_shamir_key_spec.rb
+- spec/generated_shamir_key_spec.rb
+- spec/lock_smith_spec.rb
+- spec/secret_sharing_spec.rb
 - support/cookbooks/ark/.gitignore
 - support/cookbooks/ark/.kitchen.yml
 - support/cookbooks/ark/.travis.yml
@@ -288,18 +338,50 @@ signing_key:
 specification_version: 3
 summary: The Self Enforcing Contract
 test_files:
-- features/core.feature
+- features/.nav
+- features/contracts/asymmetric_vault.feature
+- features/contracts/block_chain_key_transfer.feature
+- features/contracts/one_two_three.feature
+- features/contracts/readme.md
+- features/contracts_and_vaults.md
+- features/contributing_to_vault_tree.md
+- features/decision_tree.md
+- features/enforcement_problem.md
 - features/exceptions.feature
+- features/install_and_usage.md
+- features/keywords/assembled_shamir_key.feature
+- features/keywords/contents.feature
+- features/keywords/decryption_key.feature
+- features/keywords/dh_key.feature
+- features/keywords/external_data.feature
+- features/keywords/generated_shamir_key.feature
+- features/keywords/key.feature
+- features/keywords/master_passphrase.feature
+- features/keywords/public_encryption_key.feature
+- features/keywords/random_number.feature
+- features/keywords/readme.md
+- features/keywords/split_key.feature
+- features/keywords/unlocked.feature
+- features/manipulating_contracts.md
+- features/readme.md
+- features/steps/asymmetric_vault.steps.rb
+- features/steps/block_chain_key_transfer.steps.rb
 - features/steps/core.steps.rb
 - features/steps/exceptions.steps.rb
+- features/steps/one_two_three.steps.rb
+- features/steps/secret_sharing.steps.rb
+- features/support/contract_fixtures/asymmetric_vault.0.1.0.json
+- features/support/contract_fixtures/blank_simple_test_contract.json
+- features/support/contract_fixtures/block_chain_key_transfer.0.1.0.json
+- features/support/contract_fixtures/broken_contract.json
+- features/support/contract_fixtures/one_two_three.0.7.0.json
+- features/support/contract_fixtures/simple_test_contract.json
+- features/support/contract_fixtures/template.json
 - features/support/env.rb
+- features/what_is_vault_tree.md
 - features/world.rb
-- spec/app/locksmith/asymmetric_cipher_spec.rb
-- spec/app/locksmith/signing_key_pair_spec.rb
-- spec/spec_helper.rb
-- spec/support/fixtures/blank_simple_test_contract.json
-- spec/support/fixtures/broken_contract.json
-- spec/support/fixtures/one_two_three-0.5.0.EXP.json
-- spec/support/fixtures/reference_contract.1.0.0.json
-- spec/support/fixtures/simple_test_contract.json
+- spec/assembled_shamir_key_spec.rb
+- spec/generated_shamir_key_spec.rb
+- spec/lock_smith_spec.rb
+- spec/secret_sharing_spec.rb
 has_rdoc: