Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | fix signature of EllipticCurvePublicKey.verify() (#5808) | Markus Wamser | 2021-02-10 | 1 | -1/+1 |
| | | | The signature change was introduced in https://github.com/pyca/cryptography/pull/5729 but is inconsistent with respect to related methods, breaks backward compatibility and compatibility with the OpenSSL backend (and maybe other backends) when named arguments are used. | ||||
* | fixed a circular import error (due to type hints) (#5800) | Alex Gaynor | 2021-02-09 | 1 | -2/+2 |
| | | | | fixes #5794 closes #5795 | ||||
* | fix import cycle with asymmetricpadding (#5758) | Paul Kehrer | 2021-02-07 | 3 | -10/+19 |
| | | | | | * fix import cycle with asymmetricpadding * Update src/cryptography/hazmat/primitives/_asymmetric.py | ||||
* | port changelog and fix back to master for CVE-2020-36242 (#5748) | Paul Kehrer | 2021-02-07 | 1 | -1/+1 |
| | |||||
* | Added typing for a bunch of random stuff (#5743) | Alex Gaynor | 2021-02-04 | 7 | -27/+42 |
| | |||||
* | Added typing for more of ciphers (#5738) | Alex Gaynor | 2021-02-01 | 5 | -29/+43 |
| | |||||
* | Added typing for a bunch of methods (#5737) | Alex Gaynor | 2021-02-01 | 7 | -23/+26 |
| | |||||
* | rsa type hinting (#5733) | Paul Kehrer | 2021-02-01 | 3 | -68/+182 |
| | | | | | | | | | | | | | | | | | | | * rsa type hinting * remove unused import * missed return type * type fixes * ignores no longer required * black gets me every time * Update src/cryptography/hazmat/backends/openssl/rsa.py Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com> Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com> | ||||
* | KDF type hinting (#5735) | Paul Kehrer | 2021-02-01 | 7 | -67/+115 |
| | | | | | | | * KDF type hinting * more types * less contortions | ||||
* | add optional block_size to the HashAlgorithm interface (#5736) | Paul Kehrer | 2021-02-01 | 1 | -0/+14 |
| | | | This makes typing ConcatKDF easier | ||||
* | type hints for asym utils (#5734) | Paul Kehrer | 2021-02-01 | 1 | -3/+5 |
| | |||||
* | x25519/x448 type hints (#5731) | Paul Kehrer | 2021-01-31 | 4 | -36/+68 |
| | | | | | * x25519 type hints * x448 type hints | ||||
* | poly1305 type hints (#5732) | Paul Kehrer | 2021-01-31 | 1 | -6/+6 |
| | |||||
* | add type hinting for ed25519 (#5728) | Paul Kehrer | 2021-01-31 | 2 | -20/+37 |
| | |||||
* | add EC type hinting (#5729) | Paul Kehrer | 2021-01-31 | 2 | -60/+146 |
| | |||||
* | ed448 type hints (#5730) | Paul Kehrer | 2021-01-31 | 2 | -20/+37 |
| | |||||
* | dsa type hinting (#5726) | Paul Kehrer | 2021-01-31 | 3 | -127/+139 |
| | |||||
* | reorg some types to prevent an import cycle (#5727) | Paul Kehrer | 2021-01-31 | 2 | -1/+57 |
| | |||||
* | DH types (#5725) | Paul Kehrer | 2021-01-31 | 2 | -93/+118 |
| | |||||
* | remove DSAParametersWithNumbers (#5724) | Paul Kehrer | 2021-01-31 | 2 | -3/+4 |
| | | | | Merged into DSAParameters, just like we did years ago for everything else. Somehow we missed this one. | ||||
* | type updates from turning on unchecked-defs on tests (#5720) | Paul Kehrer | 2021-01-31 | 6 | -44/+30 |
| | | | test changes themselves will be in a separate PR | ||||
* | make PrivateKeyWithSerialization an alias of PrivateKey (#5722) | Paul Kehrer | 2021-01-31 | 9 | -27/+29 |
| | | | | | * make PrivateKeyWithSerialization an alias of PrivateKey * black | ||||
* | add serialization type hinting (#5718) | Paul Kehrer | 2021-01-30 | 5 | -35/+134 |
| | | | | | | | | | * add serialization type hinting * reorganize to prevent circular dependency * review feedback * damn you black | ||||
* | type hinting for symmetric ciphers (#5719) | Paul Kehrer | 2021-01-30 | 5 | -117/+153 |
| | | | | | * type hinting for symmetric ciphers * make our interface verifier happy | ||||
* | add type hints for twofactor (#5717) | Paul Kehrer | 2021-01-30 | 3 | -15/+39 |
| | | | | | * add type hints for twofactor * fix import ordering | ||||
* | Apply type annotations to x509 ct and ocsp (#5712) | Alex Gaynor | 2021-01-30 | 2 | -39/+43 |
| | |||||
* | add typing to padding and constant time modules (#5714) | Paul Kehrer | 2021-01-30 | 2 | -34/+51 |
| | |||||
* | add typing to keywrap (#5715) | Paul Kehrer | 2021-01-30 | 1 | -6/+19 |
| | |||||
* | type hinting for hashes, hmac, and cmac (#5713) | Paul Kehrer | 2021-01-30 | 6 | -57/+56 |
| | |||||
* | Apply type annotations to the core x509 types (#5711) | Alex Gaynor | 2021-01-30 | 2 | -84/+85 |
| | |||||
* | Introduce the most very basic mypy type checking (#5706) | Alex Gaynor | 2021-01-28 | 3 | -37/+35 |
| | | | Nothing is really annotated, just getting to clean. | ||||
* | Add ssl version constants (#5662) | Maximilian Hils | 2020-12-21 | 1 | -0/+1 |
| | | | | | | | | | | | | | | | * add ssl version constants * try to fix ci * try harder to fix ci * security: if unavailable, set protocol constants to nonexistent version * make linter happy * remove dtls constants * remove superfluous comment | ||||
* | Update APIs to use non-deprecated OpenSSL ones where possible (#5633) | Alex Gaynor | 2020-12-10 | 3 | -7/+7 |
| | | | cherry picked from #4920 | ||||
* | Complete removal of py2 (#5533) | Alex Gaynor | 2020-12-09 | 26 | -215/+102 |
| | | | | | * Drop Python 2 * Black everything | ||||
* | we didn't actually commit the final doc fixes for the recover PR (#5614) | Paul Kehrer | 2020-12-09 | 1 | -1/+1 |
| | |||||
* | Remove utils.int_from_bytes (#5609) | Alex Gaynor | 2020-12-09 | 3 | -5/+5 |
| | |||||
* | Remove __future__ import from our code (#5610) | Alex Gaynor | 2020-12-09 | 70 | -81/+0 |
| | |||||
* | Switch black to py36 as the minimum version (#5608) | Alex Gaynor | 2020-12-08 | 2 | -2/+2 |
| | |||||
* | Remove Python2 from CI and code that branched on it (#5607) | Alex Gaynor | 2020-12-08 | 4 | -56/+17 |
| | | | | | | | | | | | | | * Remove Python2 from CI and code that branched on it * Update setup.py Co-authored-by: Hugo van Kemenade <hugovk@users.noreply.github.com> * remove * review feedback Co-authored-by: Hugo van Kemenade <hugovk@users.noreply.github.com> | ||||
* | Add support for RSA signature recovery (#5573) | Zoltan Kelemen | 2020-12-07 | 3 | -12/+70 |
| | | | | | | | | | | | | | | | | | | * Removed unused argument. * Added support for RSA signature recovery. * Syntatic corrections for passing pep8 tests. * Corrected typo. * Added test of invalid Prehashed parameter to RSA signature recover. * Renamed recover to a more descriptive name. * Extended RSA signature recovery with option to return full data (not only the digest part). * Added missing words to pass spell check. | ||||
* | Added tls bindings for new OpenSSL APIs (#5595) | Alex Gaynor | 2020-12-01 | 1 | -0/+10 |
| | | | | fixes #5379 closes #5483 | ||||
* | fixes #4531 -- support encoding SCTs in certificates (#5594) | Alex Gaynor | 2020-11-30 | 2 | -3/+17 |
| | |||||
* | disallow p less than 512-bit on DH (#5592) | Paul Kehrer | 2020-11-29 | 2 | -2/+15 |
| | | | | | | | | | | | | | | | | * disallow p less than 512-bit on DH OpenSSL 3.0.0 enforces this so we'll go ahead and enforce it everywhere that's practical for us. (Note that we do not enforce on deserializing PKCS1/PKCS8 keys in < 3.0.0, but this PR adds a test so that in the 3.0.0 support branch we can test an error path) * missing test * black * _MIN_MODULUS_SIZE is now a thing * skip on fips | ||||
* | don't require errors to be on the stack when loading a key (#5590) | Paul Kehrer | 2020-11-26 | 1 | -2/+1 |
| | | | | | In OpenSSL 3.0.0 no error is added in many cases for this path and since we don't do anything with the error anyway we should just consume and move on | ||||
* | Reduce granularity of error msging when deserializing keys (#5588) | Paul Kehrer | 2020-11-26 | 1 | -17/+9 |
| | | | | | | | | | | | | * Reduce granularity of error msging when deserializing keys In OpenSSL 3.0 it is no longer possible to determine whether the reason a key failed to deserialize is because of an unsupported cipher. Since we want to be more resilient to OpenSSL error code instability we'll just remove these paths. * black * changelog and update docs | ||||
* | in OpenSSL 1.1.0+ error strings are automatically loaded (#5587) | Paul Kehrer | 2020-11-26 | 1 | -2/+0 |
| | |||||
* | Always rely on OpenSSL's builtin locking callbacks (#5561) | Alex Gaynor | 2020-11-11 | 2 | -29/+1 |
| | |||||
* | Fix broken links (#5552) | Felix Fontein | 2020-11-10 | 1 | -5/+8 |
| | | | | | * Fix broken links. * Shorter lines. | ||||
* | GCM IV size limits (#5553) | Paul Kehrer | 2020-11-09 | 2 | -7/+9 |
| | | | | | | | | | | | | * GCM IV size limits OpenSSL 3.0.0 is going to enforce these size limits so we might as well put them in now. * fix the tests * black * these cases can't happen if we're limiting IV size already | ||||
* | padding: Tip-toe around bytes subclasses. (#5548) | Benjamin Peterson | 2020-11-04 | 1 | -2/+8 |
| | | | | | This change allows future's newbytes class to be padded again. Fixes https://github.com/pyca/cryptography/issues/5547. |