decryption failed? about lockbox HOT 6 CLOSED

Hey @birthdaycorp, if ENV['LOCKBOX_KEY'] is your master key, check out the section on key separation: https://github.com/ankane/lockbox#key-separation

from lockbox.

Re LOCKBOX_MASTER_KEY: that makes more sense, and the link above still applies.

Re missing attribute: attribute_ciphertext only applies to encrypted database fields, not encrypted uploads. The readme has instructions in the CarrierWave section for how to present encrypted uploads to users.

from lockbox.

Thank you for the response! The key is actually LOCKBOX_MASTER_KEY. Does that make any difference? Additionally, I'm using Carrierwave, and I want to display the decrypted files in the view. Model.attribute_ciphertext returns the cipher, but calling the encrypted attribute like Model.attribute returns a missing attribute error. Is that expected?

from lockbox.

Hmm, I'm afraid I'm still confused by the suggestions in the doc. Assuming that the class I'm using lockbox for looks like this...

class License < ApplicationRecord
 encrypts :doc_front
 encrypts :doc_back
end

...it seems safe to assume that that controller action would be written like this:

send_data @user.license.doc_front.read, type: @user.license.doc_front.content_type

Yet this is where I get that missing_attribute: 'doc_front' error.

from lockbox.

Check out the CarrierWave docs, as they don't mention using the encrypts method: https://github.com/ankane/lockbox#carrierwave

If you need additional help, please use Stack Overflow.

from lockbox.

So just to be clear then: if I am encrypting a file upload with CarrierWave, there is no reason to add a _ciphertext to the database field? Thanks!

from lockbox.