symmetric-encryption.yml

#
# Symmetric Encryption for Ruby
#
---
# For the development and test environments the test symmetric encryption keys
# can be placed directly in the source code.
# And therefore no RSA private key is required
development:         &development_defaults
  key:               1234567890ABCDEF1234567890ABCDEF
  iv:                1234567890ABCDEF
  cipher_name:       aes-128-cbc
  encoding:          :base64strict
  always_add_header: true

test:
  <<: *development_defaults

release:
  # Since the key to encrypt and decrypt with must NOT be stored along with the
  # source code, we only hold a RSA key that is used to unlock the file
  # containing the actual symmetric encryption key
  private_rsa_key: |
    -----BEGIN RSA PRIVATE KEY-----
    MIIEowIBAAKCAQEAyHvPuKHcwk7FPZp9cOYrHVVkZl/+V0VIQRxFQGmj3XtV48Ww
    p0Z3UcrEg+dQSATOSTqnahIut4S31qzmHh9cUX6dsPxPXITvojA8hxcv7tokspay
    /yLNfrE0nVnzjQtB2z/Iae2ty50dJX/XYnQDoXhLBHv9CeQMwdPQN718MI7X8/4U
    hvJ26hBdzukBIAFk2rtsnLN6rSsmw7R4OrTLhGU40zkJm75hHQZsbYIkAuoB0s/P
    hiA8IhwhdLqnVrUxRjLrN6Tx+Z4RGLm023ner9t3kXdGay3+3TmayYT4Tg7kjU9q
    VsJRcEZB2NW/qDOrwiU0XcLQodh0j1JYELJPqwIDAQABAoIBAC/86tiv7c6Y2j+H
    pjUK8xD/apvSqGetTsE/ChiD8NRH/GQb4s/3XwI1/dnw2VeTxujiYEZUedg1rWd2
    VVKqgQeEviwqCLkFnPJ+h05yr2eF0bjpt4i4hOWpdwWfDVwacLYRS2CHos0VG2/p
    bN3FFUVmLNay8vuWGbOfhryA36Qjb/fI1BoMWjRrQMOIGpXG4wStw6GFDNYX+tBj
    ucgg7yHgQkwUT0zU5UXpwPRxM2eSA9X91ifM9sCD7CtS1yjPfytHFwpaKZTclRWC
    tR3LPNHPUMeTLzTBUUKFETl5z0HoAneHkSoRJMhhAAeUrr0fKIJSR3AgDi6rMur7
    XCsV9/kCgYEA+a5he3MIQTM+9kfeCBy2eQVeubQ7CvEagRt7sjDllJ9acakViI1P
    ebd5gD3jG67VRUOGCyQ2HdfJUqIBOzgv/Brqq2LVou6YHfljXjgDI2UMA0AAuU4W
    OPR7RpaBqe9FwgkwctBcelKhqn81MXwcNwvYtwCTdLkmstBPGDDIxa0CgYEAzY6x
    Txad0LfSgtl1C7/SOjjMfzhsc8u32wgF8+GnBBA3aIYWdXeoEYk9f73O6mtDiJUz
    eP5VIYOC7BRcMu0LxsoUoFo3YK8LmNfDsyTm+0/VoTbY1EyW8t8Pkf3LmLmyIoo5
    S3onQilY7bO6/MEvmRzNrUEfyRKpRw4bh7RnJbcCgYEAy702Iqw9YibVC9adIXV8
    mMh/AX5GZ6lSfWPVzhQEYwCdpv3YanMVFTdYWAMoHWDO+xQcf17vIe8BgwJbit1Q
    mqHEOFIQDkIvstXb9fgy52D/Km/Bp3RGwfcN2Q3bhLWQ8MLa2/WWYOKotR3UZCro
    QyrRjpNTv/2NzIAa6px0WIkCgYAZArGkM9ZD3PnqHddV9KL5nouTNyRK+pCGP/Wp
    dN1Da02ylA4LgOGcMJyg/FE+yIpRBgZbRGbLSxsU6m1FbP4v08qqsA9o3iOFF0ui
    cm0ASvhtQyUiv6bmKinU05KAJKf99998xYIdVLaTRXkM49yMvqpv2Cqr5m9eS+Mh
    odujBQKBgB8sWbveQNlRgDCTY/BJgq/LbgoAe6zyh0CrvcY7RxNh/fbUt/n+QZD9
    6j+EAEmRJ5f8sTZ7Dt5drDhLvDlzoOqgCfZkV9LkfUFLKyNrX8LKaPgiO0cJlCsF
    0l6hfM8tt1AD3AHMTCcdLlPKnrhWg4cWMR6czVLzeUftrWUCFLDv
    -----END RSA PRIVATE KEY-----


  # List Symmetric Key files in the order of current / latest first
  ciphers:
    -
      # Filename containing Symmetric Encryption Key encrypted using the
      # RSA public key derived from the private key above
      key_filename:      /Users/chussenot/keys/praditus_platform_release.key
      iv_filename:       /Users/chussenot/keys/praditus_platform_release.iv
      cipher_name:       aes-256-cbc
      encoding:          :base64strict
      version:           1
      always_add_header: true

production:
  # Since the key to encrypt and decrypt with must NOT be stored along with the
  # source code, we only hold a RSA key that is used to unlock the file
  # containing the actual symmetric encryption key
  private_rsa_key: |
    -----BEGIN RSA PRIVATE KEY-----
    MIIEowIBAAKCAQEAnQoqfz+CCD9bXJIoFJXril1hJBBlTCqPubEviWa1qSR8+7hC
    VfD7BRBxCc5oMHt2RsqQKQ2QTOIajjv3xWX2Dsw4B04P9ma6NRAWuceF4HY1pZgw
    g4oD6jQ0oBy/kR0rydt1tKZUQJpO8BeMCnx6sbLhNd0RqZZmYjv7muUWWA5cpfOX
    ZJneCtszW2DpnfUEM6xjaoSWvzwwiYsOilCyy4c2wNNsVVILIlZp8HTeKUIqgu2o
    bDgd0q2fMoZ2O8/oCwWpAmAgC/wuOig7jnLIh8dco2SEGe6zmYLEpLPhF5eso4/W
    iXeKSO1yA1AFyGQyUZ5yQtekgGV4XLEBCpdS2wIDAQABAoIBAA0z+5qzNjWHTiEc
    UK5aZHE/pJkpn7qloWvVT8/XiNJttOxc84bSOeiVF0vhxLS+zJTrFu+8qjMsl1r6
    A7ze868O0G8cyw7GWEV50s9PzRuwFJaVkw6cHfQk63/CqwCCWVohT2YezdqYnqZk
    9Gs1SAOErJagvYlqkbUUofTF6fkBKmSrDehwXqxoDAAkhTzBf1rxT0v4QjiYCy4P
    qE+1WyY7D1hnj9RY1xafxNJ6ZP9h3VfQWmXmUt5QAkHjCzz0MyYgahFpQP/uqNPv
    56hWppnRBmtwx23p3jCEoGqhOcRvRbp3Z+kN0pD3la1MJFVYnjbxquFQEbjDDJrY
    GGeZJ8ECgYEAy9Wx8MIdaRjoACm/ABAN36oT2kefMU5/2SiLCLA6fyy/x75n5Sv+
    s4jX5fcPw6SJlrY9K7fX9ZnwN6Uy2u7RV8+PWrvgj5B/uBDKoDytZDXvSdBLrUf3
    53q3eMzGpKvxP1n5nwFccWU74+jMpdMy1+nc0RUqDqjeD64PdM8Q5hECgYEAxTqt
    gazhaUs269Itar/cW847+WtlV0bQy27+Dd9mEx3i9U57IMQCbvKo0hwvI+n3RBZk
    AKRcCGmrQhv+h+FS7ohr+31yWbI7qN6HiImyHQbflthWf7hZqVl7nmSIxNiBn0qm
    Lpb8W5IZ4GQ1bjLZSJWqUHoEDC+VSKEIKySvzisCgYEAptXky+OGAQSSt7dzjtCV
    GnFxyGKA6PGQcSTfD6B2cKsm2Y1+KjRlR3uFAsPCUma0+vd0f/j8uRhjZpg/VLTO
    AepwMlq+haNG9lhAEQE5BmGi1q63kj/qp7toumYZXKUjU7AIQV3y1Rl/+J4OCtgf
    sFvJEhUZlGAhSYI1Qm1NLpECgYAGZqwg7Ep4j19d8flVYJq3RA9APhMQ7RRztct7
    CcgXUL3/9ica3iGyFiASiaWiBcLnq85dEviFsWBEigINyOtXIIhYpi6i6Jz1ExvU
    +5sTRBjXnXfZN1N5opTXhC3ILbqvP8367x2Ln0dFuBrf07inmWvopr0g5B51N/y6
    4bru9wKBgD+os6wMAEJfbAAff1EsK90Puv4unQX0EQhUrLanMhFHoZXhAWcZHaAl
    xeZbDm7/CaS05ESSd01B/2p6/93tHN4B1Fekm4VJh9zmuf2E/7WLqdxKxZQIUAYB
    L7FrN/WEnMQHZ3grKVmZPmqXpZL+Cg1HUVCg6ro3OxTQlfo4O/Ju
    -----END RSA PRIVATE KEY-----


  # List Symmetric Key files in the order of current / latest first
  ciphers:
    -
      # Filename containing Symmetric Encryption Key encrypted using the
      # RSA public key derived from the private key above
      key_filename:      /Users/chussenot/keys/praditus_platform_production.key
      iv_filename:       /Users/chussenot/keys/praditus_platform_production.iv
      cipher_name:       aes-256-cbc
      encoding:          :base64strict
      version:           1
      always_add_header: true