On The Fly Encryption, Compression, Upload To Amazon S3
•
0 likes•2,145 views
A Ruby class to upload a string of text to Amazon S3. The string could be a file or anything coming from a web browser. It's compressed and encrypted using a mix of symmetric and public key cryptography.
Recommended
More Related Content
Viewers also liked
Viewers also liked (20)
More from Paolo Montrasio
More from Paolo Montrasio (20)
Recently uploaded
Recently uploaded (20)
On The Fly Encryption, Compression, Upload To Amazon S3
- 1. On The Fly Encryption, Compression, Upload To S3 And Back paolo.montrasio@connettiva.eu connettiva.eu/rubyday2015
- 8. file file.gz.enc S3 original compressed encrypted with random symmetric key connettiva.eu/rubyday2015 symmetric key file.gz file.gz.enc initialization vector symmetric key initialization vector
- 9. file file.gz.enc S3 original compressed encrypted with random symmetric key connettiva.eu/rubyday2015 symmetric key file.gz file.gz.enc Encrypted with asymmetric key initialization vector symmetric key initialization vector
- 10. tar.gz file file.gz.enc S3 original compressed encrypted with random symmetric key connettiva.eu/rubyday2015 symmetric key file.gz file.gz.enc Encrypted with asymmetric key initialization vector symmetric key initialization vector tar.gz
- 11. tar.gz file file.gz.enc S3OpenSSL::Cipher.new("aes-256-cbc") OpenSSL::Pkey::RSA SecureRandom.uuid Digest::SHA256.hexdigest File.read("file") Zlib::Deflate Gem::Package::TarWriter Aws::S3::Client Zlib::GzipWriter connettiva.eu/rubyday2015 symmetric key file.gz file.gz.enc initialization vector symmetric key initialization vector tar.gz
- 12. $ irb require "openssl" key = OpenSSL::PKey::RSA.new 4096 open 'private_key.pem', 'w' do |io| io.write key.to_pem end open 'public_key.pem', 'w' do |io| io.write key.public_key.to_pem end connettiva.eu/rubyday2015
- 13. Using environmental variables to make it safe for production (Rails) $ export PUBLIC_KEY=public_key.pem $ export PRIVATE_KEY=private_key.pem $ export BUCKET_NAME=your-amazon-bucket # Gemfile or $ gem install "aws-sdk" -v '~> 2' connettiva.eu/rubyday2015
- 14. $ irb require "./safe_s3" s3 = SafeS3.new key = s3.upload("sensitive data") => "272ab006-c0be-4b79-97dd-8fb895af6d85... s3.download(key) => "sensitive data" s3.delete(key) connettiva.eu/rubyday2015
- 15. $ irb require "./safe_s3" s3 = SafeS3.new key = s3.upload("sensitive data") => "272ab006-c0be-4b79-97dd-8fb895af6d85... s3.download(key) => "sensitive data" s3.delete(key) connettiva.eu/rubyday2015