delta/python-packages/passlib.git/admin, branch stable foss.heptapod.net: python-libs/passlib docs: pypi redirect msg replaced w/ cloud_sptheme's auto_redirect helper, 2017-04-05T14:53:56+00:00 Eli Collins elic@assurancetechnologies.com 2017-04-05T14:53:56+00:00 54de92308b187bc677759db28d4173019ba77549 building now uses $SPHINX_BUILD_TAGS env var. 
building now uses $SPHINX_BUILD_TAGS env var.
bumped to 1.7.1, related doc updates 2017-01-31T02:41:18+00:00 Eli Collins elic@assurancetechnologies.com 2017-01-31T02:41:18+00:00 0a760240fefb05c02a645cea05e49d68e457ee03 






Per issue 83, all "harden_verify" code is now deprecated & a noop.
2017-01-29T21:27:43+00:00

Eli Collins
elic@assurancetechnologies.com

2017-01-29T21:27:43+00:00

83d4c5b5237129e246536b7d686e7d79c4bc0fd2

will be removed completely in 1.8.

Rationale:
Aside from the arguments in issue 83, performed a timing analysis,
and decided harden_verify framework wasn't going to be easily workable
to prevent a timing attack anyways (see attached admin/plot_verify_timing.py script).

Changes:
* dummy_verify() has been kept around, but now uses .verify() against a dummy hash,
which is guaranteed to have correct timing (though wastes cpu cycles).

* Removed most harden_verify code, treating it as NOOP just like min_verify_time.
  Similarly, removed most documentation references to.





will be removed completely in 1.8.

Rationale:
Aside from the arguments in issue 83, performed a timing analysis,
and decided harden_verify framework wasn't going to be easily workable
to prevent a timing attack anyways (see attached admin/plot_verify_timing.py script).

Changes:
* dummy_verify() has been kept around, but now uses .verify() against a dummy hash,
which is guaranteed to have correct timing (though wastes cpu cycles).

* Removed most harden_verify code, treating it as NOOP just like min_verify_time.
  Similarly, removed most documentation references to.







setup.py: fixed hg revision stamping so builds from sdist don't try to
2016-12-05T17:37:19+00:00

Eli Collins
elic@assurancetechnologies.com

2016-12-05T17:37:19+00:00

f5992a60837a4da87dd50843d7cb29ae8f9c9286

re-append hg revision; relocated code to ._setup helper package.





re-append hg revision; relocated code to ._setup helper package.







setup: refresh of build scripts, updated version stamping procedure
2016-11-23T04:36:42+00:00

Eli Collins
elic@assurancetechnologies.com

2016-11-23T04:36:42+00:00

5c6cc85b4db476241067f444b4f76b0db0dbbd5e












hash: fix PyCharm autocompletion of passlib.hash
2016-11-11T02:05:57+00:00

Eli Collins
elic@assurancetechnologies.com

2016-11-11T02:05:57+00:00

003bbda05ba729bda00351d846d12920646f4c81

Issue for a while has been that IDEs such as PyCharm can't detect
autocompletion in 'passlib.hash', because the module is replaced
w/ a lazy-loading object, that breaks it's source inspection.

As workaround, that module now contains a block listing all the imports
explicitly.  This block is trapped in a "if False:" block so it will do nothing,
but that seems sufficient for PyCharm to autocomplete with.

Script "admin/regen.py" can be used to autogenerate this list when registry.py changes.





Issue for a while has been that IDEs such as PyCharm can't detect
autocompletion in 'passlib.hash', because the module is replaced
w/ a lazy-loading object, that breaks it's source inspection.

As workaround, that module now contains a block listing all the imports
explicitly.  This block is trapped in a "if False:" block so it will do nothing,
but that seems sufficient for PyCharm to autocomplete with.

Script "admin/regen.py" can be used to autogenerate this list when registry.py changes.







pbkdf2: removed support for M2Crypto backend -- was only useful for sha1
2016-06-20T16:18:10+00:00

Eli Collins
elic@assurancetechnologies.com

2016-06-20T16:18:10+00:00

0adeaeee12a34b6dfada9869673f5b20f1a054fc

(a border case anyways), and hashlib or fastpbkdf2 are much better choices
for this use case.





(a border case anyways), and hashlib or fastpbkdf2 are much better choices
for this use case.







pbkdf2_hmac: now supports hashlib.pbkdf2_hmac() and fastpbkdf2 as backends.
2016-06-20T16:07:21+00:00

Eli Collins
elic@assurancetechnologies.com

2016-06-20T16:07:21+00:00

9088b88b4180603b2596acbe67083a4a37ab2365

* digest code now checks for fastpbkdf2 & hashlib backends
* tests: added some more test vectors from fastpbkdf2
* to match hashlib, now throwing OverflowError on large keylens, not ValueError.
* to match hashlib, now throwing ValueError on keylen=0, previously returned b""





* digest code now checks for fastpbkdf2 & hashlib backends
* tests: added some more test vectors from fastpbkdf2
* to match hashlib, now throwing OverflowError on large keylens, not ValueError.
* to match hashlib, now throwing ValueError on keylen=0, previously returned b""







crypto/pbkdf2: refactored to use 3 different builtin backends, added benchmark tests.
2016-06-18T18:26:29+00:00

Eli Collins
elic@assurancetechnologies.com

2016-06-18T18:26:29+00:00

62c6506310c796137f94323d285159131873e353

this includes some temp code, committing to test on various systems.





this includes some temp code, committing to test on various systems.







renamed PasswordHandler.replace() back to PasswordHandler.using()
2016-06-15T22:07:59+00:00

Eli Collins
elic@assurancetechnologies.com

2016-06-15T22:07:59+00:00

ce23c2ab15e70b612cbd902bf0513c0cf6d734e9

this basically reversed rev 5c41b0153d4f; after using it a bit more,
decided the name didn't indicate as well what the method was doing.





this basically reversed rev 5c41b0153d4f; after using it a bit more,
decided the name didn't indicate as well what the method was doing.