Mailman 3 April 2020 - Cryptography-dev

Noob question about some data that has been leaked in encrypted form
by Lucas Vazquez April 21, 2020

April 21, 2020

Hello to all devs, I'm using Fernet with Django to store some private external data in a Regulators Website. Recently, that data has been exposed in encrypted form by a mistake. Each user saw some of their data in encrypted form in the configuration view, and if it modified them, the filtered contents were modified accordingly. Could any smart user have discovered, through various changes to the fields, the secret key that I use with fernet? Have a good day

2 1

How to conver x509 PEM to DER
by Sawyer Liu April 9, 2020

April 9, 2020

Hello, I want to know how I can convert PEM file of X509 to DER file. Thanks. Best Regards Sawyer Liu(刘维峰) Microcontrollers, NXP Semiconductors 23/F, Exchange Building, No.118 Jianguo Road, Chaoyang District, Beijing, P.R.C 100022 中国北京市朝阳区建国路乙118号京汇大厦23层邮编：100022 Tel: 86-10-58798328, Fax: 86-10-58798010, Mobile: 86-1800 112 6984 E-mail: sawyer.liu(a)nxp.com<mailto:sawyer.liu@nxp.com>

2 1

PyCA cryptography 2.9 released
by Paul Kehrer April 2, 2020

April 2, 2020

PyCA cryptography 2.9 has been released to PyPI. cryptography includes both high level recipes and low level interfaces to common cryptographic algorithms such as symmetric ciphers, asymmetric algorithms, message digests, X509, key derivation functions, and much more. We support Python 2.7, Python 3.5+, and PyPy. Changelog (https://cryptography.io/en/latest/changelog/#v2-9): * BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. * BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. * BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. * Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. * BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. * Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. * Added support for parsing single_extensions in an OCSP response. * NameAttribute values can now be empty strings. -Paul Kehrer (reaperhulk)

1 0