Class: Nanite::EncryptedDocument

Inherits:
Object
  • Object
show all
Defined in:
lib/nanite/security/encrypted_document.rb

Overview

Represents a signed an encrypted document that can be later decrypted using the right private key and whose signature can be verified using the right cert. This class can be used both to encrypt and sign data and to then check the signature and decrypt an encrypted document.

Class Method Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(data, certs, cipher = 'AES-256-CBC') ⇒ EncryptedDocument

Encrypt and sign data using certificate and key pair.

Arguments:

- 'data':   Data to be encrypted
- 'certs':  Recipient certificates (certificates corresponding to private
            keys that may be used to decrypt data)
- 'cipher': Cipher used for encryption, AES 256 CBC by default



18
19
20
21
22
23
 
# File 'lib/nanite/security/encrypted_document.rb', line 18

def initialize(data, certs, cipher = 'AES-256-CBC')
  cipher = OpenSSL::Cipher::Cipher.new(cipher)
  certs = [ certs ] unless certs.respond_to?(:collect)
  raw_certs = certs.collect { |c| c.raw_cert }
  @pkcs7 = OpenSSL::PKCS7.encrypt(raw_certs, data, cipher, OpenSSL::PKCS7::BINARY)
end

Class Method Details

.from_data(encrypted_data) ⇒ Object

Initialize from encrypted data.



26
27
28
29
30
 
# File 'lib/nanite/security/encrypted_document.rb', line 26

def self.from_data(encrypted_data)
  doc = EncryptedDocument.allocate
  doc.instance_variable_set(:@pkcs7, Nanite::PKCS7.new(encrypted_data))
  doc
end

Instance Method Details

#decrypted_data(key, cert) ⇒ Object

Decrypted data

Arguments:

- 'key':  Key used for decryption
- 'cert': Certificate to use for decryption



42
43
44
 
# File 'lib/nanite/security/encrypted_document.rb', line 42

def decrypted_data(key, cert)
  @pkcs7.decrypt(key.raw_key, cert.raw_cert)
end

#encrypted_data ⇒ Object

Encrypted data using DER format



33
34
35
 
# File 'lib/nanite/security/encrypted_document.rb', line 33

def encrypted_data
  @pkcs7.to_pem
end