yaml_vault 0.4.0 → 0.4.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: feb23fdc41a0c8b4d2ad603d468c584c33cf275c
-  data.tar.gz: 6e0248a09212c74ea1fb361e4db929ff00bf1aaa
+  metadata.gz: 10122ee4034384fdfb8e7c9d77c5f18a923b94a2
+  data.tar.gz: 3b805a5feda21783340cb71855e9b9a48daad551
 SHA512:
-  metadata.gz: 05dd4cc17dc4e036065eb14767c9af4d9958261aaeb081952d70c017b50f384845ce86de2e7d0d27d1d9b140b60c68c79e7e2df01e9a7e401170afd6cc534ba2
-  data.tar.gz: b7a243da6d3573a61131c7d10eebf1ea1d73501d1a1caa1de367ecf1a7d048437dbcffd357a8e8a0bd7ad078a1bb9fe90e3bb6d95b510acf406ee8e796b39a3a
+  metadata.gz: b12a970f34f02aa18aa63400b22de1d7a48936110346c693fc93708ea5dde8a5902893eb58b2e7d785ab119c2f0a4e2c3cde77b1067fbd9da35975ae125eac81
+  data.tar.gz: 350904118d1b600095a0ac764e02eb9c91b4d441fb983189396f2bcd48b4496988d91921748a4797b7cff2b6a277e4f12e8ccb1e9dbe42ec44951f6d19d59255

data/exe/yaml_vault

@@ -14,6 +14,7 @@ class YamlVault::Cli < Thor
   class_option :cipher, type: :string, desc: "Encrypt cipher (see. OpenSSL::Cipher.ciphers)", default: "aes-256-cbc"
   class_option :key_len, type: :numeric, desc: "key length of cipher", default: 32
   class_option :digest, type: :string, desc: "Sign digest algorithm (see. OpenSSL::Digest.constants)", default: "SHA256"
+  class_option :signature_key_len, type: :numeric, desc: "key length of signature", default: 64
   class_option :use_sign_passphrase, type: :boolean, default: false
 
   class_option :aws_kms_key_id, type: :string
@@ -31,7 +32,8 @@ class YamlVault::Cli < Thor
       options[:cryptor],
       passphrase: passphrase,
       sign_passphrase: sign_passphrase,
-      salt: options[:salt], cipher: options[:cipher], key_len: options[:key_len], digest: options[:digest],
+      salt: options[:salt], cipher: options[:cipher], key_len: options[:key_len],
+      digest: options[:digest], signature_key_len: options[:signature_key_len],
       aws_kms_key_id: options[:aws_kms_key_id],
       aws_region: options[:aws_region],
       aws_access_key_id: options[:aws_access_key_id],

data/lib/yaml_vault/version.rb

@@ -1,3 +1,3 @@
 module YamlVault
-  VERSION = "0.4.0"
+  VERSION = "0.4.1"
 end

data/lib/yaml_vault.rb

@@ -17,7 +17,7 @@ module YamlVault
 
     def initialize(
       yaml_content, keys, cryptor_name = nil,
-      passphrase: nil, sign_passphrase: nil, salt: nil, cipher: "aes-256-cbc", key_len: 32, digest: "SHA256",
+      passphrase: nil, sign_passphrase: nil, salt: nil, cipher: "aes-256-cbc", key_len: 32, signature_key_len: 64, digest: "SHA256",
       aws_kms_key_id: nil, aws_region: nil, aws_access_key_id: nil, aws_secret_access_key: nil
     )
       @data = YAML.load(yaml_content)
@@ -28,6 +28,7 @@ module YamlVault
       @salt = salt.to_s
       @cipher = cipher
       @key_len = key_len
+      @signature_key_len = signature_key_len
       @digest = digest
 
       @aws_kms_key_id = aws_kms_key_id
@@ -63,11 +64,11 @@ module YamlVault
     def get_cryptor(name)
       case name
       when "simple"
-        ValueCryptor::Simple.new(@passphrase, @sign_passphrase, @salt, @cipher, @digest, @key_len)
+        ValueCryptor::Simple.new(@passphrase, @sign_passphrase, @salt, @cipher, @digest, @key_len, @signature_key_len)
       when "aws-kms", "kms"
         ValueCryptor::KMS.new(@aws_kms_key_id, region: @aws_region, aws_access_key_id: @aws_access_key_id, aws_secret_access_key: @aws_secret_access_key)
       else
-        ValueCryptor::Simple.new(@passphrase, @sign_passphrase, @salt, @cipher, @digest, @key_len)
+        ValueCryptor::Simple.new(@passphrase, @sign_passphrase, @salt, @cipher, @digest, @key_len, @signature_key_len)
       end
     end
 
@@ -112,9 +113,9 @@ module YamlVault
 
     module ValueCryptor
       class Simple
-        def initialize(passphrase, sign_passphrase, salt, cipher, digest, key_size = 32)
+        def initialize(passphrase, sign_passphrase, salt, cipher, digest, key_size = 32, signature_key_size = 64)
           key = ActiveSupport::KeyGenerator.new(passphrase).generate_key(salt, key_size)
-          signature_key = ActiveSupport::KeyGenerator.new(sign_passphrase).generate_key(salt, key_size) if sign_passphrase
+          signature_key = ActiveSupport::KeyGenerator.new(sign_passphrase).generate_key(salt, signature_key_size) if sign_passphrase
 
           if signature_key
             @cryptor = ActiveSupport::MessageEncryptor.new(key, signature_key, cipher: cipher, digest: digest)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: yaml_vault
 version: !ruby/object:Gem::Version
-  version: 0.4.0
+  version: 0.4.1
 platform: ruby
 authors:
 - joker1007