Mailman 3 March 2017 - Cryptography-dev

Failed: Cryptography (latest)
by Read the Docs March 23, 2017

March 23, 2017

Build Failed for Cryptography (latest) You can find out more about this failure here: https://readthedocs.org/projects/cryptography/builds/5186794/ If you have questions, a good place to start is the FAQ: https://docs.readthedocs.org/en/latest/faq.html Keep documenting, Read the Docs -- http://readthedocs.org

1 0

Failed: Cryptography (latest)
by Read the Docs March 23, 2017

March 23, 2017

Build Failed for Cryptography (latest) You can find out more about this failure here: https://readthedocs.org/projects/cryptography/builds/5186792/ If you have questions, a good place to start is the FAQ: https://docs.readthedocs.org/en/latest/faq.html Keep documenting, Read the Docs -- http://readthedocs.org

1 0

Elliptic curve ECIES implementation
by French, Adam March 21, 2017

March 21, 2017

Hi everyone, I’m currently working on a project where I need to use the cryptography library to encrypt/decrypt a message using an elliptic curve key pair. The ‘Asymmetric algorithms’ -> ‘RSA’ section of the official documentation includes sections on RSA encryption/decryption using the OAEP scheme. In contrast, the ‘Asymmetric algorithms’ -> ‘Elliptic curve cryptography’ section has no similar operations such as ECIES encryption and decryption. I’ve written an implementation of the ECIES scheme for elliptic curve key pairs which builds on the other primitives available through the cryptography library. My boss is happy for me to spend some time creating a pull request to share the implementation with the community. Do people feel there would be sufficient interest for this to be worthwhile? Is there a roadmap for elliptic curve functionality that I should be aware of? It would be great to know how the project intends to extend the elliptic curve interfaces in the future. Thank you very much for your help. Cheers, Adam

3 2

Is SHA-1 secure when used in HMAC and PBKDF2?
by David Lord March 16, 2017

March 16, 2017

Hello cryptography, Over at the Flask repos, we've had a number of requests to use SHA-256 instead of SHA-1 in a couple places. Werkzeug defaults to SHA-1 as part of PBKDF2 to generate password hashes. ItsDangerous defaults to SHA-1 as part of HMAC signatures. After some discussion I concluded that as used in those two methods, SHA-1's collision issues were not relevant. However, I'd like to get a second opinion from the cryptography experts. I can change the default to SHA-256, but if it's not actually making things more secure then that's just increasing time and space for no reason. Thanks, David

5 5

PyCA cryptography 1.8 (and 1.8.1) released
by Paul Kehrer March 10, 2017

March 10, 2017

PyCA cryptography 1.8 (and 1.8.1) has been released to PyPI. cryptography is a package which provides cryptographic recipes and primitives to Python developers. Our goal is for it to be your "cryptographic standard library". We support Python 2.6-2.7, Python 3.3+, and PyPy. Changelog: 1.8.1 * Fixed macOS wheels to properly link against 1.1.0 rather than 1.0.2. 1.8 * Added support for Python 3.6. * Windows and macOS wheels now link against OpenSSL 1.1.0. * macOS wheels are no longer universal. This change significantly shrinks the size of the wheels. Users on macOS 32-bit Python (if there are any) should migrate to 64-bit or build their own packages. * Changed ASN.1 dependency from pyasn1 to asn1crypto resulting in a general performance increase when encoding/decoding ASN.1 structures. Also, the ``pyasn1_modules`` test dependency is no longer required. * Added support for update_into on CipherContext. * Added DHPrivateKeyWithSerialization.private_bytes. * Added DHPublicKeyWithSerialization.public_bytes * load_pem_private_key and load_der_private_key now require that ``password`` must be bytes if provided. Previously this was documented but not enforced. * Added support for subgroup order in Diffie-Hellman key exchange. Thanks to all the contributors on this release! -Paul Kehrer (reaperhulk)

1 0

Re: [Cryptography-dev] Cryptography-dev Digest, Vol 44, Issue 1
by Mark Anson March 7, 2017

March 7, 2017

John thanks for the feedback. I spent a few hours exploring different solutions and worked out a solution that I will be able to use. Many thanks, Mark [MarkAnson:ENCRYPTIC.NET <http://encryptic.net/>;Curve:secp521r1] ----BEGIN PUBLIC KEY----- MIGbMBAGByqGSM49AgEGBSuBBAAjA4GGAAQBvDNxSKWXATRo4UGaDf09pwwlrjGg UnZNNO_GLgJfo1_qDBPEMEWMywsQe7OjjgymaR00k4G3MrTi3JwPFi4Y6-AB0n-q MAnZhYCU1RmQzLhRdOE1qfmhcl_gPynWHFOtyHXl7mUWXm1CwnFAztrF95BCSYqc 3R0BZGI8HzIvVpLxIoo. -----END PUBLIC KEY-----

1 0

Elliptic Curve Documentation
by Mark Anson March 7, 2017

March 7, 2017

Coming from Java and BouncyCastle, I'm having trouble learning how to implement EC using Cryptography. Is there a comprehensive tutorial anywhere? The issue I am trying to resolve is how to implement ECDH and encrypt the text of a message. Mark Anson

2 1