attr_encrypted.rb in slosilo-0.1.2

- old
+ new

@@ -3,66 +3,40 @@
 module Slosilo
   # we don't trust the database to keep all backups safe from the prying eyes
   # so we encrypt sensitive attributes before storing them
   module EncryptedAttributes
     module ClassMethods
-
-      # @param options [Hash]
-      # @option :aad [#to_proc, #to_s]  Provide additional authenticated data for
-      #   encryption.  This should be something unique to the instance having
-      #   this attribute, such as a primary key; this will ensure that an attacker can't swap
-      #   values around -- trying to decrypt value with a different auth data will fail.
-      #   This means you have to be able to recover it in order to decrypt attributes.
-      #   The following values are accepted:
-      #
-      #   * Something proc-ish: will be called with self each time auth data is needed.
-      #   * Something stringish: will be to_s-d and used for all instances as auth data.
-      #     Note that this will only prevent swapping in data using another string.
-      #
-      #   The recommended way to use this option is to pass a proc-ish that identifies the record.
-      #   Note the proc-ish can be a simple method name; for example in case of a Sequel::Model:
-      #       attr_encrypted :secret, aad: :pk
       def attr_encrypted *a
-        options = a.last.is_a?(Hash) ? a.pop : {}
-        aad = options[:aad]
-        # note nil.to_s is "", which is exactly the right thing
-        auth_data = aad.respond_to?(:to_proc) ? aad.to_proc : proc{ |_| aad.to_s }
-
-        # In ruby 3 .arity for #proc returns both 1 and 2, depends on internal #proc
-        # This method is also being called with aad which is string, in such case the arity is 1
-        raise ":aad proc must take two arguments" unless (auth_data.arity.abs == 2 || auth_data.arity.abs == 1)
-
         # push a module onto the inheritance hierarchy
         # this allows calling super in classes
         include(accessors = Module.new)
         accessors.module_eval do 
           a.each do |attr|
             define_method "#{attr}=" do |value|
-              super(EncryptedAttributes.encrypt(value, aad: auth_data[self]))
+              super(EncryptedAttributes.encrypt value)
             end
             define_method attr do
-              EncryptedAttributes.decrypt(super(), aad: auth_data[self])
+              EncryptedAttributes.decrypt(super())
             end
           end
         end
       end
-
     end
     
     def self.included base
       base.extend ClassMethods
     end
 
     class << self
-      def encrypt value, opts={}
+      def encrypt value
         return nil unless value
-        cipher.encrypt value, key: key, aad: opts[:aad]
+        cipher.encrypt value, key: key
       end
       
-      def decrypt ctxt, opts={}
+      def decrypt ctxt
         return nil unless ctxt
-        cipher.decrypt ctxt, key: key, aad: opts[:aad]
+        cipher.decrypt ctxt, key: key
       end
 
       def key
         Slosilo::encryption_key || (raise "Please set Slosilo::encryption_key")
       end
@@ -80,6 +54,6 @@
       @encryption_key
     end
   end
 end
 
-Object.send :include, Slosilo::EncryptedAttributes
+Object.send:include, Slosilo::EncryptedAttributes