| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
| |
fixes #5862
|
| |
|
| |
fixes #5911
|
| | |
|
| | |
|
| |
|
| |
rfc 6960 suggests it and we want our docs to be best practice
|
| |
|
|
|
|
|
| |
* tell people SM3/SM4 are available for compat/compliance reasons
* add to changelog and linkcheck fix
* tweaked language
|
| |
|
| |
Co-authored-by: Tobias Peter <tobias.peter@infineon.com>
|
| |
|
| |
Co-authored-by: Tobias Peter <tobias.peter@infineon.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* add typehint for name
* strictly type ObjectIdentifier
* explicit reexport for mypy
* type (most) of extensions.py
* minor cleanup
* more consistently return None in constructors
* revert explicit reexport, as requested
* use _make_sequence_methods for now (#5870)
* mark oid as normal type-hinted property so that classes can access it
* fix spelling (upper case) use short form for reference
* annotate as ClassVar
* add type ignore for special extension class
|
| | |
|
| | |
|
| |
|
| |
Fix #5848
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
* change to a new version scheme
fixes #5801
* Update docs/api-stability.rst
Co-authored-by: Paul Kehrer <paul.l.kehrer@gmail.com>
* line length
Co-authored-by: Paul Kehrer <paul.l.kehrer@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
* Document that Rust is required at build time only
* Update docs/faq.rst
Co-authored-by: Paul Kehrer <paul.l.kehrer@gmail.com>
* Update docs/installation.rst
Co-authored-by: Paul Kehrer <paul.l.kehrer@gmail.com>
Co-authored-by: Paul Kehrer <paul.l.kehrer@gmail.com>
|
| |
|
| |
short version: in git commit, in changelog, in GH security advisory
|
| | |
|
| | |
|
| |
|
|
|
|
|
| |
* link a lot more things, repeat advice in more places
* updated with Christian's comments
* empty commit poor github
|
| | |
|
| |
|
|
|
| |
The Rust version in CentOS 7 SCL is too old to build cryptography.
Signed-off-by: Christian Heimes <cheimes@redhat.com>
|
| | |
|
| |
|
| |
fixes #5683
|
| |
|
|
| |
Merged into DSAParameters, just like we did years ago for everything
else. Somehow we missed this one.
|
| |
|
|
|
| |
* make PrivateKeyWithSerialization an alias of PrivateKey
* black
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Added information on what encrypt raises
Added a note on RSA's Encrypt explanation for newcomers such as myself, so that they don't have to waste 4 hours trying to figure out what is causing the ValueError like I did 😅
* Moved the note under the raises ValueError section
* Removed whitespaces causing issues
* Update rsa.rst
* Update docs/hazmat/primitives/asymmetric/rsa.rst
Co-authored-by: Paul Kehrer <paul.l.kehrer@gmail.com>
Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
Co-authored-by: Paul Kehrer <paul.l.kehrer@gmail.com>
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
* Remove Python2 from CI and code that branched on it
* Update setup.py
Co-authored-by: Hugo van Kemenade <hugovk@users.noreply.github.com>
* remove
* review feedback
Co-authored-by: Hugo van Kemenade <hugovk@users.noreply.github.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Removed unused argument.
* Added support for RSA signature recovery.
* Syntatic corrections for passing pep8 tests.
* Corrected typo.
* Added test of invalid Prehashed parameter to RSA signature recover.
* Renamed recover to a more descriptive name.
* Extended RSA signature recovery with option to return full data (not
only the digest part).
* Added missing words to pass spell check.
|
| |
|
| |
closes #5510
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* disallow p less than 512-bit on DH
OpenSSL 3.0.0 enforces this so we'll go ahead and enforce it everywhere
that's practical for us. (Note that we do not enforce on deserializing
PKCS1/PKCS8 keys in < 3.0.0, but this PR adds a test so that in the
3.0.0 support branch we can test an error path)
* missing test
* black
* _MIN_MODULUS_SIZE is now a thing
* skip on fips
|
| |
|
|
|
|
|
|
|
|
|
|
| |
* Reduce granularity of error msging when deserializing keys
In OpenSSL 3.0 it is no longer possible to determine whether the reason
a key failed to deserialize is because of an unsupported cipher. Since
we want to be more resilient to OpenSSL error code instability we'll
just remove these paths.
* black
* changelog and update docs
|
| | |
|
| | |
|
| | |
|
| |
|
|
| |
the error will be opensslv.h these days and we don't need to talk
specifically about macOS
|
| |
|
|
|
| |
* we have abi3 wheels for windows now
* Update faq.rst
|
| | |
|
| | |
|
| | |
|
| | |
|