- New upstream release 2.6:
- Fix insecure ElGamal key generation (launchpad bug #985164, CVE-2012-2417)
- Huge documentation cleanup
- Added more tests, including test vectors from NIST 800-38A
- Remove broken MODE_PGP, which never actually worked properly
- A new mode, MODE_OPENPGP, has been added for people wishing to write
OpenPGP implementations (see also launchpad bug #996814)
- Fix: getPrime with invalid input causes Python to abort with fatal error
(launchpad bug #988431)
- Fix: Segfaults within error-handling paths (launchpad bug #934294)
- Fix: Block ciphers allow empty string as IV (launchpad bug #997464)
- Fix DevURandomRNG to work with Python3's new I/O stack
- Remove automagic dependencies on libgmp and libmpir; let the caller
disable them using args
- Many other minor bug fixes and improvements
- Drop upstream patches
- New upstream release 2.5:
- Added PKCS#1 encryption schemes (v1.5 and OAEP); we now have a decent,
easy-to-use non-textbook RSA implementation
- Added PKCS#1 signature schemes (v1.5 and PSS); v1.5 required some
extensive changes to Hash modules to contain the algorithm-specific ASN.1
OID, and to that end we now always have a (thin) Python module to hide the
one in pure C
- Added 2 standard Key Derivation Functions (PBKDF1 and PBKDF2)
- Added export/import of RSA keys in OpenSSH and PKCS#8 formats
- Added password-protected export/import of RSA keys (one old method for
PKCS#8 PEM only)
- Added ability to generate RSA key pairs with configurable public
exponent e
- Added ability to construct an RSA key pair even if only the private
exponent d is known, and not p and q
- Added SHA-2 C source code (fully from Lorenz Quack)
- Unit tests for all the above
- Updates to documentation (both inline and in Doc/pycrypt.rst)
- Minor bug fixes (setup.py and tests)
- Upstream no longer ships python-3-changes.txt
- New upstream release 2.4:
- Python 3 support! PyCrypto now supports every version of Python from 2.1
through to 3.2
- Timing-attack countermeasures in _fastmath: when built against libgmp
version 5 or later, we use mpz_powm_sec instead of mpz_powm, which should
prevent the timing attack described by Geremy Condra at PyCon 2011
- New hash modules (for Python ≥ 2.5 only): SHA224, SHA384 and SHA512
- Configuration using GNU autoconf, which should help fix a bunch of build
issues
- Support using MPIR as an alternative to GMP
- Improve the test command in setup.py, by allowing tests to be performed on
a single sub-package or module only
- Fix double-decref of "counter" when Cipher object initialization fails
- Apply patches from Debian's python-crypto 2.3-3 package:
- fix-RSA-generate-exception.patch
- epydoc-exclude-introspect.patch
- no-usr-local.patch
- Fix launchpad bug #702835: "Import key code is not compatible with GMP
library"
- More tests, better documentation, various bugfixes
- Update patch for imposing our own compiler optimization flags
- Drop lib64 patch, no longer needed
- No longer need to fix up permissions and remove shellbangs
Fixes a slew of:
"dereferencing type-punned pointer will break strict-aliasing rules"
warnings from GCC for lines of the form:
Py_INCREF(Py_True);
and
Py_INCREF(Py_False);
due to the cast from PyIntObject* to PyObject*
GCC is technically correct here; see:
http://www.python.org/dev/peps/pep-3123/
though this is unlikely to lead to non-working machine code.
- New upstream release pycrypto 2.3:
- Fix NameError when attempting to use deprecated getRandomNumber() function
- _slowmath: Compute RSA u parameter when it's not given to RSA.construct;
this makes _slowmath behave the same as _fastmath in this regard
- Make RSA.generate raise a more user-friendly exception message when the
user tries to generate a bogus-length key
- Add -c option to %setup because upstream tarball has dropped the top-level
directory
- Run benchmark as part of %check if we have python 2.4 or later
- BR: python2-devel rather than just python-devel
- Add patch to make sure we can find libgmp in 64-bit multilib environments
- New upstream release pycrypto 2.2:
- Deprecated Crypto.Util.number.getRandomNumber()
- It's been replaced by getRandomNBitInteger and getRandomInteger
- Better isPrime() and getPrime() implementations
- getStrongPrime() implementation for generating RSA primes
- Support for importing and exporting RSA keys in DER and PEM format
- Fix PyCrypto when floor division (python -Qnew) is enabled
- When building using gcc, use -std=c99 for compilation
- Update optflags patch
- Remove patches (no longer needed)
- Use new upstream URLs
- Upstream has replaced LICENSE with LEGAL/ and COPYRIGHT
- Clarify that license is mostly Public Domain, partly Python
- Add %check section and run the test suite in it
- Remove upstream's fiddling with compiler optimization flags so we get
usable debuginfo
- Filter out unwanted provides for python shared objects
- Tidy up egg-info handling
- Simplify %files list
- Pacify rpmlint as much as is reasonable
- Add dist tag
Dennis Gilmore
David Malcolm
Paul Howarth
Marcela Mašláňová
Jesse Keating
Fedora Release Engineering
dmalcolm
Paul Howarth
Bill Nottingham
Jesse Keating
Stewart Adam
Thorsten Leemhuis
Ignacio Vazquez-Abrams
David Woodhouse
Ville Skyttä