Mailman 3 May 2015 - Cryptography-dev

ECPrivateKey form private_value
by Dario Sneidermanis May 18, 2015

May 18, 2015

Hi, I'm trying to compute an EllipticCurvePrivateKey from a private_value (d). It seems that the only way to achieve this is to create an EllipticCurvePrivateNumbers object, but the constructor takes both the private_value and the public_numbers. Why does it need the public_numbers, when it could compute them (knowing the curve), by doing d*G (G being the curve generator)? Is there any way to go from d to the ECPrivKey without doing d*G by myself? Thanks, Dario

3 5

PyCA cryptography 0.9 released
by Paul Kehrer May 14, 2015

May 14, 2015

On behalf of all the contributors I am pleased to announce the release of PyCA/cryptography (https://github.com/pyca/cryptography) 0.9! Changelog: * Removed support for Python 3.2. This version of Python is rarely used and caused support headaches. Users affected by this should upgrade to 3.3+. * Deprecated support for Python 2.6. At the time there is no time table for actually dropping support, however we strongly encourage all users to upgrade their Python, as Python 2.6 no longer receives support from the Python core team. * Add support for the SECP256K1 elliptic curve. * Fixed compilation when using an OpenSSL which was compiled with the no-comp (OPENSSL_NO_COMP) option. * Support DER serialization of public keys using the public_bytes method of RSAPublicKeyWithSerialization, DSAPublicKeyWithSerialization, and EllipticCurvePublicKeyWithSerialization. * Support DER serialization of private keys using the private_bytes method of RSAPrivateKeyWithSerialization, DSAPrivateKeyWithSerialization, and EllipticCurvePrivateKeyWithSerialization. * Add support for parsing X.509 certificate signing requests (CSRs) with load_pem_x509_csr() and load_der_x509_csr(). * Moved cryptography.exceptions.InvalidToken to cryptography.hazmat.primitives.twofactor.InvalidToken and deprecated the old location. This was moved to minimize confusion between this exception and cryptography.fernet.InvalidToken. * Added support for X.509 extensions in Certificate objects. The following extensions are supported as of this release: - BasicConstraints - AuthorityKeyIdentifier - SubjectKeyIdentifier - KeyUsage - SubjectAlternativeName - ExtendedKeyUsage - CRLDistributionPoints - AuthorityInformationAccess - CertificatePolicies Note that unsupported extensions with the critical flag raise UnsupportedExtension while unsupported extensions set to non-critical are silently ignored. Read the X.509 documentation for more information. You can also view a more attractive version of the changelog here: https://cryptography.io/en/latest/changelog/ Master will be reopening for development of the tenth release shortly. -Paul Kehrer (reaperhulk)

1 0

Interfaces for CRL handling
by Erik Trauschke May 12, 2015

May 12, 2015

Hi all, For my project I need cryptography to support basic handling of CRLs, revoked certificates and CRLDistributionPoints. I attached a patch which adds these interfaces, including test cases for it. I have never provided patches to a github project so I'm not sure how the process works. Do you have a separate place for code reviews (I haven't seen code review discussions on this list)? I would appreciate if someone could look at my changes and put them back to the gate, but let me know if I need to approach this differently. Thanks Erik

3 11

Need advice on how to get started contributing to pyca/cryptography
by Eeshan Garg May 2, 2015

May 2, 2015

Hello! I really want to contribute to pyca/cryptography. I already have a development environment setup and I have run the tests. At the PyCon sprints I worked on <https://github.com/pyca/cryptography/issues/1440>, and I also submitted a PR for it <https://github.com/pyca/cryptography/pull/1841>, but it was decided that we won't be moving forward with what I was working on. It would mean a lot to me if someone could give me some guidance and help me find something to work on and get started. :-) Thanks, Eeshan Garg

2 5