Mailman 3 November 2018 - Cryptography-dev

x509 Certificate Validation
by Jeff Ortel Nov. 29, 2018

Nov. 29, 2018

Hello, our project needs a python lib to validate that a client certificate has been signed by a specific CA. Looking at the cryptography package, it does not seem support this. Any recommendations on how to proceed in the short term? Thanks, Jeff [1] https://github.com/pyca/cryptography/issues/2381

2 1

PyCA cryptography 2.4.2 released
by Paul Kehrer Nov. 21, 2018

Nov. 21, 2018

PyCA cryptography 2.4.2 has been released to PyPI. cryptography includes both high level recipes and low level interfaces to common cryptographic algorithms such as symmetric ciphers, asymmetric algorithms, message digests, X509, key derivation functions, and much more. We support Python 2.7, Python 3.4+, and PyPy. Changelog (https://cryptography.io/en/latest/changelog/#v2-4-2): * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.0j. -Paul Kehrer (reaperhulk)

1 0

PyCA cryptography 2.4.1 (and 2.4) released
by Paul Kehrer Nov. 12, 2018

Nov. 12, 2018

PyCA cryptography 2.4.1 has been released to PyPI. cryptography includes both high level recipes and low level interfaces to common cryptographic algorithms such as symmetric ciphers, asymmetric algorithms, message digests, X509, key derivation functions, and much more. We support Python 2.7, Python 3.4+, and PyPy. Changelog (https://cryptography.io/en/latest/changelog/#v2-4-1): * Fixed a build breakage in our manylinux1 wheels. Changelog (https://cryptography.io/en/latest/changelog/#v2-4): * BACKWARDS INCOMPATIBLE: Dropped support for LibreSSL 2.4.x. * Deprecated OpenSSL 1.0.1 support. OpenSSL 1.0.1 is no longer supported by the OpenSSL project. At this time there is no time table for dropping support, however we strongly encourage all users to upgrade or install cryptography from a wheel. * Added initial OCSP support. * Added support for PrecertPoison. -Paul Kehrer (reaperhulk)

1 0

Unexpected result from cryptography package
by Dinesh K. Somani Nov. 3, 2018

Nov. 3, 2018

Hi I am a new user of py-cryptography. I am finding that even the encrypted token is modified at end, it still decrypts OK. How so? Here is a test script from cryptography.fernet import Fernet f = Fernet( Fernet.generate_key() ) word = b"very secret thing" print("encrypting...", word) token = f.encrypt( word ) print("decrypting...", len(token), token,) reword = f.decrypt( token ) print("works as expected" if reword == word else "oops!") modtoken = str.encode( token.decode() + "?abcd." ) print("modified token, appended stuff") print("decrypting...", len(modtoken), modtoken) reword = f.decrypt( modtoken ) print("whoops! still decrypts ok" if reword == word else "good boy!") and the output was encrypting... b'very secret thing' decrypting... 120 b'gAAAAABb3TIJLCgbVdq-CgQ3V7V3eehQ02h_O70iZkCjd6KCU9GsErog-c-LluWITQg5lTsp5ldoTc0J_XdFCd-jhoJPOYAKyQbzbHDJZKTGORIJSflO1do=' works as expected modified token, appended stuff decrypting... 126 b'gAAAAABb3TIJLCgbVdq-CgQ3V7V3eehQ02h_O70iZkCjd6KCU9GsErog-c-LluWITQg5lTsp5ldoTc0J_XdFCd-jhoJPOYAKyQbzbHDJZKTGORIJSflO1do=?abcd.' whoops! still decrypts ok Is this expected behavior? If so, how do I check if the token is not modified between encrypt and decrypt? python 3.6.6 on ubuntu under WSL Regards Dinesh

2 1