| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Build manylinux2014 wheels (#5642) | Alex Gaynor | 2020-12-12 | 2 | -7/+6 |
| | | |||||
| * | we didn't actually commit the final doc fixes for the recover PR (#5614) | Paul Kehrer | 2020-12-09 | 1 | -9/+9 |
| | | |||||
| * | Remove __future__ import from our code (#5610) | Alex Gaynor | 2020-12-09 | 9 | -22/+0 |
| | | |||||
| * | Switch black to py36 as the minimum version (#5608) | Alex Gaynor | 2020-12-08 | 1 | -1/+1 |
| | | |||||
| * | Remove Python2 from CI and code that branched on it (#5607) | Alex Gaynor | 2020-12-08 | 2 | -11/+5 |
| | | | | | | | | | | | | | | * Remove Python2 from CI and code that branched on it * Update setup.py Co-authored-by: Hugo van Kemenade <hugovk@users.noreply.github.com> * remove * review feedback Co-authored-by: Hugo van Kemenade <hugovk@users.noreply.github.com> | ||||
| * | Add support for RSA signature recovery (#5573) | Zoltan Kelemen | 2020-12-07 | 2 | -0/+50 |
| | | | | | | | | | | | | | | | | | | | * Removed unused argument. * Added support for RSA signature recovery. * Syntatic corrections for passing pep8 tests. * Corrected typo. * Added test of invalid Prehashed parameter to RSA signature recover. * Renamed recover to a more descriptive name. * Extended RSA signature recovery with option to return full data (not only the digest part). * Added missing words to pass spell check. | ||||
| * | Document that PKCS1v1.5 is not constant time (#5600) | Alex Gaynor | 2020-12-06 | 2 | -0/+25 |
| | | | | closes #5510 | ||||
| * | Document that Firefox doesn't support unencrypted pkcs12 (#5596) | Alex Gaynor | 2020-12-01 | 1 | -0/+6 |
| | | |||||
| * | disallow p less than 512-bit on DH (#5592) | Paul Kehrer | 2020-11-29 | 1 | -0/+2 |
| | | | | | | | | | | | | | | | | | * disallow p less than 512-bit on DH OpenSSL 3.0.0 enforces this so we'll go ahead and enforce it everywhere that's practical for us. (Note that we do not enforce on deserializing PKCS1/PKCS8 keys in < 3.0.0, but this PR adds a test so that in the 3.0.0 support branch we can test an error path) * missing test * black * _MIN_MODULUS_SIZE is now a thing * skip on fips | ||||
| * | Reduce granularity of error msging when deserializing keys (#5588) | Paul Kehrer | 2020-11-26 | 1 | -5/+3 |
| | | | | | | | | | | | | | * Reduce granularity of error msging when deserializing keys In OpenSSL 3.0 it is no longer possible to determine whether the reason a key failed to deserialize is because of an unsupported cipher. Since we want to be more resilient to OpenSSL error code instability we'll just remove these paths. * black * changelog and update docs | ||||
| * | Polish up the fernet limitations language (#5577) | Alex Gaynor | 2020-11-19 | 1 | -2/+3 |
| | | |||||
| * | Remove two linkcheck ignores (#5570) | Alex Gaynor | 2020-11-13 | 1 | -4/+0 |
| | | |||||
| * | Don't tell people to use PGP, it's not good (#5543) | Alex Gaynor | 2020-11-01 | 1 | -4/+3 |
| | | |||||
| * | updated faq entry (#5541) | Paul Kehrer | 2020-10-31 | 1 | -12/+11 |
| | | | | | the error will be opensslv.h these days and we don't need to talk specifically about macOS | ||||
| * | we have abi3 wheels for windows now (#5536) | Alex Gaynor | 2020-10-31 | 1 | -6/+6 |
| | | | | | | * we have abi3 wheels for windows now * Update faq.rst | ||||
| * | tense (#5538) | Alex Gaynor | 2020-10-31 | 1 | -1/+1 |
| | | |||||
| * | Rephrase abi3 FAQ so it stays accurate (#5534) | Alex Gaynor | 2020-10-30 | 1 | -3/+3 |
| | | |||||
| * | Update installation docs for 3.5 drop (#5531) | Alex Gaynor | 2020-10-28 | 1 | -1/+1 |
| | | |||||
| * | fix Python 2 CryptographyDeprecationWarning guide (#5529) | Thomas Grainger | 2020-10-28 | 1 | -1/+1 |
| | | |||||
| * | Drop python 3.5 (#5527) | Alex Gaynor | 2020-10-28 | 1 | -1/+1 |
| | | |||||
| * | Delete all the 1.0.2 code (#5511) | Alex Gaynor | 2020-10-25 | 4 | -29/+11 |
| | | |||||
| * | Attempt to mitigate Bleichenbacher attacks on RSA decryption (#5507) | Alex Gaynor | 2020-10-25 | 1 | -0/+1 |
| | | |||||
| * | PKCS7SignatureBuilder now supports new option NoCerts when signing (#5500) | frennkie | 2020-10-25 | 1 | -0/+7 |
| | | |||||
| * | allow additional certificates to be added to a pkcs7 (#5498) | Paul Kehrer | 2020-10-25 | 1 | -0/+8 |
| | | | | | | | | * allow additional certificates to be added to a pkcs7 * be more verbose about what these additional certs might be used for * missing test | ||||
| * | PKCS7SignatureBuilder now supports three serializations (#5497) | Paul Kehrer | 2020-10-24 | 1 | -7/+14 |
| | | | | | | | | | * PKCS7SignatureBuilder now supports three serializations PEM, DER, and SMIME. SMIME embeds the S/MIME headers and has the detached signature concept. * thanks libre | ||||
| * | migrate smime builder to pkcs7 module and rename (#5496) | Paul Kehrer | 2020-10-24 | 3 | -129/+124 |
| | | | | | | * migrate smime builder to pkcs7 module and rename * missed a rename | ||||
| * | Remove bindings docs (#5469) | Alex Gaynor | 2020-09-20 | 4 | -71/+1 |
| | | |||||
| * | smime signer support (#5465) | Paul Kehrer | 2020-09-19 | 2 | -0/+129 |
| | | | | | | | | | | | | | | | | | | | | * smime signer support * fix ed25519 check * change some wording * python 2.7... * review feedback * s/secure/signed * do some verification in the tests * review feedback * doc return value | ||||
| * | add RSA 4096-bit self-signed CA for some upcoming tests (#5464) | Paul Kehrer | 2020-09-14 | 1 | -0/+4 |
| | | |||||
| * | allow bytes-like for padding (#5462) | Paul Kehrer | 2020-09-13 | 1 | -1/+2 |
| | | | | | this doesn't improve efficiency in any way (copies galore!), but it does make it consistent between a cipher context and a padding context | ||||
| * | Account for Bruce redoing his website or something (#5461) | Alex Gaynor | 2020-09-13 | 1 | -1/+1 |
| | | |||||
| * | Be clear that a lack of authentication often means you don't have secrecy ↵ | Alex Gaynor | 2020-09-05 | 1 | -1/+2 |
| | | | | | (#5454) | ||||
| * | fixed verify script that couldn't have ever worked (#5443) | Alex Gaynor | 2020-08-29 | 1 | -2/+2 |
| | | |||||
| * | update docs to not use backends (#5404) | Paul Kehrer | 2020-08-29 | 18 | -162/+56 |
| | | |||||
| * | Break users on OpenSSL 1.0.2 (#5438) | Alex Gaynor | 2020-08-28 | 2 | -1/+15 |
| | | | | fixes #5432 | ||||
| * | add some words about separating ECDH and ECDSA (#5423) | Paul Kehrer | 2020-08-24 | 1 | -0/+9 |
| | | | | | | | * add some words about separating ECDH and ECDSA * Thomas Pornin wrote some good words about why you should try not to mix your ECDH and ECDSA keys. | ||||
| * | Docs testing (#5413) | Paul Kehrer | 2020-08-16 | 2 | -3/+6 |
| | | | | | | | | | | | | | | * document we test on aarch64 even odds this angers the spellchecker * Just as my previous commit msg prophesied * Update docs/spelling_wordlist.txt Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com> Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com> | ||||
| * | update submitting patches docs to be a bit more true (#5407) | Paul Kehrer | 2020-08-16 | 1 | -4/+3 |
| | | | | For now best practice is that they should be optional. | ||||
| * | HOTP and TOTP should also have optional backends (#5402) | Paul Kehrer | 2020-08-15 | 1 | -6/+6 |
| | | |||||
| * | add changelog and update backend docs for optional change (#5401) | Paul Kehrer | 2020-08-15 | 1 | -3/+6 |
| | | |||||
| * | make backend arg optional for rsa (#5396) | Paul Kehrer | 2020-08-15 | 1 | -6/+6 |
| | | |||||
| * | optional backend for dh, dsa, ec (#5395) | Paul Kehrer | 2020-08-15 | 3 | -26/+26 |
| | | |||||
| * | optional backend for hash, cipher, cmac, hmac, keywrap (#5394) | Paul Kehrer | 2020-08-15 | 5 | -16/+16 |
| | | |||||
| * | make backend optional in serialization (#5392) | Paul Kehrer | 2020-08-15 | 1 | -18/+18 |
| | | |||||
| * | x509 optional backend args (#5390) | Paul Kehrer | 2020-08-15 | 1 | -22/+22 |
| | | |||||
| * | remove KDF backend requirements (#5389) | Paul Kehrer | 2020-08-14 | 1 | -20/+18 |
| | | |||||
| * | Update which PyPy versions we test against (#5377) | Alex Gaynor | 2020-08-05 | 1 | -1/+1 |
| | | | | refs #5376 | ||||
| * | support PKCS7 certificate parsing (#5371) | Paul Kehrer | 2020-08-04 | 1 | -0/+50 |
| | | | | | | | | | | | | | | * support PKCS7 certificate parsing * refcounts are different in 1.0.2 * rename the functions * black * empty commit * review feedback | ||||
| * | add docker builders, migrate travis to focal by default (#5372) | Paul Kehrer | 2020-08-03 | 1 | -1/+1 |
| | | | | | | | | * add docker builders, migrate travis to focal by default * get it right * use older versions where necessary | ||||
| * | add basic PKCS7 test vectors (#5370) | Paul Kehrer | 2020-08-02 | 1 | -0/+8 |
| | | |||||
