This is a Ruby (with Rust backend) client for the CipherStash encrypted, searchable data store.


This client is currently in a "late-alpha" state. While we're happy for you to use it, and most things work, there are a couple of things missing. If something not on the list below is broken for you, please report an issue.

At present, interacting with collections or records created with StashJS is not supported.


As cipherstash-client uses Rust-based libraries (ore-rs and enveloperb) for its underlying cryptography, installation can be a bit trickier than for most gems.

We provide pre-built native gems, which contain the underlying cryptographic primitive code pre-compiled, for platforms we officially support. Those platforms are:

  • Linux x86_64 and aarch64 ("arm64"); and
  • macOS x86_64 and arm64



For platforms we don't (yet) officially support, you will need to have at least Rust 1.59.0 installed. If you are on an arm64 machine (M1 Mac, for example) you will need to be running a recent Rust nightly for SIMD intrinsics support.

Da gem! Da gem!

Once the above pre-requisites are all sorted, you can go ahead and install cipherstash-client itself.

The basic option is to install it as a gem directly:

gem install cipherstash-client

There's also the wonders of the Gemfile:

gem 'cipherstash-client'

If you're the sturdy type that likes to run from git:

rake install

Or, if you've eschewed the convenience of Rubygems entirely, then you presumably know what to do already.


Getting Off The Ground

First off, you need to load the library and a client:

require "cipherstash/client"

stash =

This will pick up your configuration from the default profile; if you want to specify a different profile to load:

stash = "bob")

Alternately, you can also set all configuration via environment variables. See the CipherStash Client Configuration reference for more details.


All data in CipherStash is stored in collections. You can load all collections:

stash.collections  # => [<collection>, <collection>, ...]

Or you can load a single collection, if you know its name:

collection = stash.collection("movies")

Inserting Records

To insert a record:

collection.insert({ foo: "bar", baz: "wombat" })


A query is a set of constraints applied to the records in a collection. Constraints are defined in a block passed to Collection#query, like so:

collection.query do |movies|
  movies.exactTitle("Star Trek: The Motion Picture")

Multiple constraints will be ANDed together, and so the above query will not return any records because "Star Trek: The Motion Picture" was made before 1990.

API Documentation

The auto-generated API documentation should provide complete documentation of all public methods and classes.

Need help?

Head over to our support forum, and we'll get back to you super quick!


Please see for general contribution guidelines.

Making a Release

If you have push access to the GitHub repository, you can make a release by doing the following:

  1. Run git version-bump -n <major|minor|patch> (see the semver spec for what each of major, minor, and patch version bumps represent).

  2. Write a changelog for the release, in Git commit style (headline on the first line, blank line, then Markdown text as you see fit). Save/exit your editor. This will automatically push the newly-created annotated tag, which will in turn kick off a release build of the gem and push it to

  3. Run rake release to automagically create a new GitHub release for the project.

... and that's it!


Unless otherwise stated, everything in this repo is covered by the following copyright notice:

Copyright (C) 2022  CipherStash Inc.

This program is free software: you can redistribute it and/or modify it
under the terms of the GNU General Public License version 3, as
published by the Free Software Foundation.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
along with this program.  If not, see <>.