Sha256: c7aba451040653ee9ccbe8e8acffa9720bc6d14a7650a735f7f9b66770210b32
Contents?: true
Size: 1.77 KB
Versions: 4
Compression:
Stored size: 1.77 KB
Contents
require "openssl"
module Authlogic
module CryptoProviders
# This encryption method is reversible if you have the supplied key. So in order to
# use this encryption method you must supply it with a key first. In an initializer,
# or before your application initializes, you should do the following:
#
# Authlogic::CryptoProviders::AES256.key = "my really long and unique key, preferably a bunch of random characters"
#
# My final comment is that this is a strong encryption method, but its main weakness
# is that it's reversible. If you do not need to reverse the hash then you should
# consider Sha512 or BCrypt instead.
#
# Keep your key in a safe place, some even say the key should be stored on a separate
# server. This won't hurt performance because the only time it will try and access the
# key on the separate server is during initialization, which only happens once. The
# reasoning behind this is if someone does compromise your server they won't have the
# key also. Basically, you don't want to store the key with the lock.
class AES256
class << self
attr_writer :key
def encrypt(*tokens)
aes.encrypt
aes.key = @key
[aes.update(tokens.join) + aes.final].pack("m").chomp
end
def matches?(crypted, *tokens)
aes.decrypt
aes.key = @key
(aes.update(crypted.unpack("m").first) + aes.final) == tokens.join
rescue OpenSSL::CipherError
false
end
private
def aes
raise ArgumentError.new("You must provide a key like #{name}.key = my_key before using the #{name}") if @key.blank?
@aes ||= OpenSSL::Cipher::Cipher.new("AES-256-ECB")
end
end
end
end
end
Version data entries
4 entries across 4 versions & 1 rubygems