summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Mark Python 2.7 in Pipfile, as this is a release specifically for Py 27version-4.3Sybren A. Stüvel2020-06-121-1/+1
|
* Drop support for Python 3.4Sybren A. Stüvel2020-06-124-5/+3
| | | | | Tests on Travis-CI fail on Python 3.4. Since this is an intermediary release to fix some issues for Python 2.7, I keep Python 3.4 as unsupported.
* Fix CVE-2020-13757: detect cyphertext modifications by prepending zero bytesSybren A. Stüvel2020-06-123-0/+62
| | | | | | | | | | Reject cyphertexts that have been modified by prepending zero bytes, by checking the cyphertext length against the expected size (given the decryption key). This resolves CVE-2020-13757. The same approach is used when verifying a signature. Thanks Carnil for pointing this out on https://github.com/sybrenstuvel/python-rsa/issues/146
* Choose blinding factor relatively prime to NSybren A. Stüvel2020-06-122-6/+15
| | | | This is a requirement for RSA blinding, but wasn't implemented yet.
* Bumped version to 4.3Sybren A. Stüvel2020-06-123-4/+4
|
* Add `python_requires` stanza to setup.pySybren A. Stüvel2020-06-123-0/+20
| | | | This is part of a fix for https://github.com/sybrenstuvel/python-rsa/issues/152
* Mark 4.0 as releasedversion-4.0Sybren A. Stüvel2018-09-164-5/+5
|
* Reword README.md for release of 4.0Sybren A. Stüvel2018-09-161-5/+5
|
* Declare Python 3.7 as supportedSybren A. Stüvel2018-09-161-0/+1
|
* Fixes for Travis CISybren A. Stüvel2018-09-163-7/+13
| | | | | | | | | | | | | | | | - Remove `--ignore-pipfile`. This option makes Pipenv install from the `Pipfile.lock` only, ignoring the `Pipfile` itself. In a sense this is good, because it tests with the locked dependencies. However, it breaks when you lock on Python 3.6 but test on Python 3.4 or 2.7. We'll have to re-visit this when dropping support for older Pythons. - pypy 3.6 -> 3.5 - Drop `pypy` from Travis CI testing We still test with 'pypy3.5'. However, Pipenv has an issue with pypy 2.7. See https://github.com/pypa/pipenv/issues/2449 - Pypy3.5 seems to want pathlib2 when running on Travis CI
* Remove Travis CI testing for Python 3.7Sybren A. Stüvel2018-09-161-2/+5
| | | | | | | Python 3.7 is not yet supported by Travis CI. See https://github.com/travis-ci/travis-ci/issues/9815 Also fixed a mistake in the test config.
* Typo in `.travis.yml`Sybren A. Stüvel2018-09-161-1/+1
|
* Remove unsued nose configurationJon Dufresne2018-09-161-3/+0
| | | | | The use of nose for testing was previously removed and replaced by pytest.
* speedupyjqiang2018-09-166-6/+6
| | | "if A and B" if mostly A is True then we should judge B at first
* Updated changelogSybren A. Stüvel2018-09-161-2/+2
|
* Moved `get_word_alignment()` from `_compat.py` to `machine_size.py`Sybren A. Stüvel2018-09-162-3/+77
| | | | | | In preparation of removal of Python 2.7 support, I only want to have compatibility code for Python 2.7 in `_compat.py`, and not other kinds of 'compatibility'.
* Fixed testing with Travis CI and ToxSybren A. Stüvel2018-09-165-49/+157
| | | | | | - Added missing test dependencies. - Updated `.travis.yml` and `tox.ini` to install deps and run with pipenv. - Added testing on Python 3.7.
* Transitioned from `requirements.txt` to Pipenv for package managementSybren A. Stüvel2018-07-104-6/+230
|
* Enable pip cache in Travis CIJon Dufresne2018-07-101-0/+1
| | | | | | | | Slightly speed up builds and reduce load on PyPI servers. For more information, see: https://docs.travis-ci.com/user/caching/#pip-cache
* Update all pypi.python.org URLs to pypi.orgJon Dufresne2018-06-141-2/+2
| | | | | | For details on the new PyPI, see the blog post: https://pythoninsider.blogspot.ca/2018/04/new-pypi-launched-legacy-pypi-shutting.html
* Include license file in the generated wheel packageJon Dufresne2018-06-141-0/+3
| | | | | | | | | | | | | | | | | | The wheel package format supports including the license file. This is done using the [metadata] section in the setup.cfg file. For additional information on this feature, see: https://wheel.readthedocs.io/en/stable/index.html#including-the-license-in-the-generated-wheel-file Helps the project comply with its own license: > 4. Redistribution. You may reproduce and distribute copies of the Work > or Derivative Works thereof in any medium, with or without > modifications, and in Source or Object form, provided that You meet the > following conditions: > > a. You must give any other recipients of the Work or Derivative Works > a copy of this License; and ...
* Show README.md on PyPIHugo2018-04-281-0/+5
|
* Updated CHANGELOG.md for pull request #104Sybren A. Stüvel2018-02-051-1/+2
|
* Changed unittest to cover the new SHA-224 hash methodSybren A. Stüvel2018-02-051-2/+2
|
* Add support for SHA224 for PKCS1 signaturesJoost Rijneveld2018-02-052-3/+5
|
* Remove keysize requirements / recommendationsJoost Rijneveld2018-02-051-26/+0
| | | | | | This library is probably not the right place to recommend key sizes or have discussions about the relation between key sizes and hash function outputs.
* Add support for Python 3.6Hugo2018-02-052-2/+3
|
* Remove duplicate hash method definitionJoost Rijneveld2018-02-051-10/+2
| | | | | | | There is no need to specify this list in PKCS1_v2 when it is already specified in PKCS1. This does rely on the digest_size attribute being available, but pkcs1.py already depends heavily on the specific API of hashlib.
* Fix typoHugo2018-01-244-5/+5
|
* Drop support for EOL Python 3.3Hugo2017-11-295-5/+5
|
* Use tox-travis to run tox when using TravisCI (#102)Joost Rijneveld2017-10-221-14/+8
| | | | | | | | * Use tox-travis to run tox when using TravisCI * Always run coveralls after TravisCI It appears coveralls no longer comments twice
* Prevent __pycache__ from being committed (#100)Joost Rijneveld2017-10-091-0/+1
|
* Typos (#95)David Larlet2017-08-311-2/+2
|
* Fix Shield links (#94)Florian Motlik2017-07-041-6/+3
|
* Declare Python 3.6 support (#93)Jon Banafato2017-06-291-0/+1
| | | Add Python 3.6 to the Trove classifiers in `setup.py`.
* PKCS#1 2.0: Implementation of MGF1 (#89)Michael Manganiello2017-06-103-1/+195
| | | | Implementation of the Mask Generation Function `MGF1` used in the OAEP encoding step. For more information, the MGF1 specification is at https://tools.ietf.org/html/rfc2437#section-10.2.1
* Support signing a pre-calculated hash (#87)Justin Simon2017-05-074-18/+67
| | | | | | | | | | | | | | | | | | | | | | | | | | * Split the hashing out of the sign method This code change adds support to split the hashing of a message and the actual signing of the message. * Updating unit test and documentation This commit updates the unit test and usage docs. In addition, This change removes a redundant error check inside rsa.sign(). * Refactore unit tests and code comments Removed the print statements from the unit test and refactored a few code comments to improve readability. * Rename hash function The new hash function had the same name as a function in the standard library. This commit changes the name to avoid conflicts. * Rename hash function to compute_hash() This commit renames the hash function to compute_hash().
* Ceiling division implementation (#88)Michael Manganiello2017-04-181-3/+25
| | | | Created as a new function as it will be needed by the new PKCS#1 2.0 implementation. Specifically, for the MGF1 function used in the OAEP encoding/decoding. This allows us not to have `math` dependencies
* Updated changelogSybren A. Stüvel2017-04-101-0/+6
|
* Feature request #78: Expose function to find the hash method of a signatureSybren A. Stüvel2017-04-104-3/+33
| | | | | | I've not used the name "find_method_hash" suggested in #78, as it's a bit vague. It's ok-ish for a private function `_find_method_hash`, but I thought `find_signature_hash` would be more descriptive.
* Don't print in unit testsSybren A. Stüvel2017-04-101-3/+0
|
* Removed easy_install from installation documentationSybren A. Stüvel2017-04-101-8/+3
| | | | Also worded the use of 'sudo' a bit more carefully.
* Updated year in copyright statementSybren A. Stüvel2017-04-101-1/+1
|
* Removed unused sphinx extension.Sybren A. Stüvel2017-04-101-1/+1
|
* Updated documentation for removal of bigfile/VARBLOCK support.Sybren A. Stüvel2017-04-105-108/+52
|
* Moved sphinx down to other development requirements.Sybren A. Stüvel2017-04-101-1/+2
|
* Added mock library as requirement, as it's used in unit tests.Sybren A. Stüvel2017-04-101-0/+1
|
* Use iterative zip in Python 2 (#85)Michael Manganiello2017-01-173-1/+6
| | | Good catch, thanks!
* Implementation of bitwise XOR function for bytes object (#72)Michael Manganiello2017-01-162-1/+67
|
* Create PY2 constant to simplify compatibility decisions (#82)Michael Manganiello2017-01-154-35/+31
| | | It's about time to get this merged, thanks again!
View Lorry Controller Status