{"repo":"reidmorrison/symmetric-encryption","free":true,"listed":false,"github":"https://github.com/reidmorrison/symmetric-encryption","clone":"git clone https://github.com/reidmorrison/symmetric-encryption.git","description":"Encrypt data at rest in Ruby and Rails, with keys held outside your source code.","language":"Ruby","stars":475,"topics":["encryption","ruby","openssl","symmetric-keys","compliance","pci"],"license":"Apache-2.0","category":"security-tools","readme_excerpt":"Symmetric Encryption Encrypt data at rest in Ruby and Rails, with keys held outside your source code. Active Record attributes and Mongoid fields. Passwords in database.yml and other configuration files. Entire files and streams, of any size, without loading them into memory. Keys in a keystore: a file, an environment variable, AWS KMS, or Google Cloud KMS. Key rotation without downtime, since every encrypted value records which key encrypted it. Documentation: encryption.reidmorrison.com Do you need it? Rails 7 added Active Record encryption. If everything you need to encrypt is an Active Record attribute, use that instead. It is built in, and it is maintained by the Rails team. This gem covers what it does not: Mongoid fields, whole files and streams, standalone Ruby, passwords decrypted before Rails has finished booting, keys held in a cloud KMS, and rotating the key of a value that has to stay queryable. See Do you need it? for the full comparison. Quick start ruby gem \"symmetric-encryption\" Generate a configuration file and a key for every environment: symmetric-encryption --generate --app-name my app Encrypt an Active Record attribute. The column is a string , since the encrypted value is text: ruby class Person \"123456789\" Continue with the Guide, which builds up from here one step at a time. Documentation Guide — the library, one step at a time. Configuration — the configuration file and every keystore. Rails — encrypted Active Record attributes. Mongoid — encrypted M","default_branch":null,"files":null,"tree":[],"storefront":"/r/reidmorrison","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/reidmorrison/symmetric-encryption/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}