Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Start typing a bunch of stuff from x509 extensions (#5812)master | Alex Gaynor | 2021-02-11 | 3 | -20/+65 |
| | |||||
* | Added a unit test to protect against import cycles (#5804) | Alex Gaynor | 2021-02-09 | 1 | -0/+38 |
| | |||||
* | Interface: Make annotation check optional (#5775) | Christian Heimes | 2021-02-08 | 1 | -0/+24 |
| | | | | | | | | | | | | | * Interface: Make annotation check optional Fixes: https://github.com/pyca/cryptography/issues/5774 Signed-off-by: Christian Heimes <cheimes@redhat.com> * Use param.replace() Co-authored-by: Stanislav Levin <slev@altlinux.org> Signed-off-by: Christian Heimes <cheimes@redhat.com> Co-authored-by: Stanislav Levin <slev@altlinux.org> | ||||
* | Added typing for a bunch of random stuff (#5743) | Alex Gaynor | 2021-02-04 | 4 | -7/+23 |
| | |||||
* | Added typing for more of ciphers (#5738) | Alex Gaynor | 2021-02-01 | 3 | -3/+6 |
| | |||||
* | Added typing for a bunch of methods (#5737) | Alex Gaynor | 2021-02-01 | 3 | -9/+6 |
| | |||||
* | rsa type hinting (#5733) | Paul Kehrer | 2021-02-01 | 3 | -15/+36 |
| | | | | | | | | | | | | | | | | | | | * rsa type hinting * remove unused import * missed return type * type fixes * ignores no longer required * black gets me every time * Update src/cryptography/hazmat/backends/openssl/rsa.py Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com> Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com> | ||||
* | KDF type hinting (#5735) | Paul Kehrer | 2021-02-01 | 6 | -36/+73 |
| | | | | | | | * KDF type hinting * more types * less contortions | ||||
* | type hints for asym utils (#5734) | Paul Kehrer | 2021-02-01 | 1 | -6/+6 |
| | |||||
* | x25519/x448 type hints (#5731) | Paul Kehrer | 2021-01-31 | 2 | -8/+12 |
| | | | | | * x25519 type hints * x448 type hints | ||||
* | poly1305 type hints (#5732) | Paul Kehrer | 2021-01-31 | 1 | -6/+6 |
| | |||||
* | add type hinting for ed25519 (#5728) | Paul Kehrer | 2021-01-31 | 2 | -5/+9 |
| | |||||
* | add EC type hinting (#5729) | Paul Kehrer | 2021-01-31 | 2 | -10/+14 |
| | |||||
* | ed448 type hints (#5730) | Paul Kehrer | 2021-01-31 | 1 | -4/+8 |
| | |||||
* | dsa type hinting (#5726) | Paul Kehrer | 2021-01-31 | 1 | -11/+29 |
| | |||||
* | DH types (#5725) | Paul Kehrer | 2021-01-31 | 1 | -6/+6 |
| | |||||
* | enable mypy over tests (#5721) | Paul Kehrer | 2021-01-31 | 34 | -185/+308 |
| | | | | | | | | | * clean mypy with tests dir * remove most no_type_check annotations * le sigh * remove unneeded comments | ||||
* | make PrivateKeyWithSerialization an alias of PrivateKey (#5722) | Paul Kehrer | 2021-01-31 | 2 | -11/+7 |
| | | | | | * make PrivateKeyWithSerialization an alias of PrivateKey * black | ||||
* | type hinting for symmetric ciphers (#5719) | Paul Kehrer | 2021-01-30 | 1 | -1/+1 |
| | | | | | * type hinting for symmetric ciphers * make our interface verifier happy | ||||
* | Apply type annotations to fernet (#5708) | Alex Gaynor | 2021-01-29 | 1 | -3/+3 |
| | |||||
* | Remove last large usage of parametrize with vectors (#5652) | Alex Gaynor | 2020-12-17 | 2 | -112/+106 |
| | |||||
* | xdist experiment (#5621) | Paul Kehrer | 2020-12-10 | 1 | -0/+8 |
| | | | | | | | | | | * switch to xdist in tox for faster runs * not using auto to avoid too many processes on local laptops * we need to use pytest-cov to generate coverage properly now * these env vars aren't present on no coverage builds * tox changes | ||||
* | Convert a few more high cardinality tests to use subtests (#5632) | Alex Gaynor | 2020-12-10 | 5 | -134/+134 |
| | |||||
* | we already do this check in other places (#5624) | Paul Kehrer | 2020-12-09 | 1 | -5/+1 |
| | | | | | | | | | | | | * we already do this check in other places This test is *incredibly* expensive and we already do roundtrips like this on other DH groups. To make this test less expensive and also more accurate to its name we now verify that the parameters on the generated key match * empty commit the most important CI feature | ||||
* | More test speedups via subtest + removal rather than skipping (#5617) | Paul Kehrer | 2020-12-09 | 1 | -145/+140 |
| | | | | | | | * subtests ec * continue instead of return * indentation | ||||
* | Remove AES GCM < 64-bit IV tests instead of skipping (#5620) | Paul Kehrer | 2020-12-09 | 1 | -4/+4 |
| | | | | | | | * remove AES tests we will always skip * constrain <64-bit IV vector removal to just GCM * apparently this is only used by GCM | ||||
* | subtest-ify keywrap (#5619) | Paul Kehrer | 2020-12-09 | 1 | -80/+82 |
| | |||||
* | use subtests in aead (#5618) | Paul Kehrer | 2020-12-09 | 1 | -92/+88 |
| | |||||
* | fixes #5611 -- use subtests for wycheproof tests for speed (#5616) | Alex Gaynor | 2020-12-09 | 15 | -39/+65 |
| | |||||
* | Complete removal of py2 (#5533) | Alex Gaynor | 2020-12-09 | 4 | -24/+11 |
| | | | | | * Drop Python 2 * Black everything | ||||
* | Remove utils.int_from_bytes (#5609) | Alex Gaynor | 2020-12-09 | 3 | -15/+7 |
| | |||||
* | Remove __future__ import from our code (#5610) | Alex Gaynor | 2020-12-09 | 89 | -95/+0 |
| | |||||
* | Write a bunch of primitives tests as subtests for performance (#5246) | Alex Gaynor | 2020-12-09 | 1 | -32/+40 |
| | |||||
* | Switch black to py36 as the minimum version (#5608) | Alex Gaynor | 2020-12-08 | 22 | -1054/+976 |
| | |||||
* | Remove Python2 from CI and code that branched on it (#5607) | Alex Gaynor | 2020-12-08 | 3 | -321/+149 |
| | | | | | | | | | | | | | * Remove Python2 from CI and code that branched on it * Update setup.py Co-authored-by: Hugo van Kemenade <hugovk@users.noreply.github.com> * remove * review feedback Co-authored-by: Hugo van Kemenade <hugovk@users.noreply.github.com> | ||||
* | Fixed DH tests for latest CentOS FIPS OpenSSL (#5604) | Alex Gaynor | 2020-12-08 | 3 | -7/+25 |
| | | | * Fixed DH tests for latest CentOS FIPS OpenSSL (1.1.1g) | ||||
* | Add support for RSA signature recovery (#5573) | Zoltan Kelemen | 2020-12-07 | 1 | -4/+63 |
| | | | | | | | | | | | | | | | | | | * Removed unused argument. * Added support for RSA signature recovery. * Syntatic corrections for passing pep8 tests. * Corrected typo. * Added test of invalid Prehashed parameter to RSA signature recover. * Renamed recover to a more descriptive name. * Extended RSA signature recovery with option to return full data (not only the digest part). * Added missing words to pass spell check. | ||||
* | fixes #4531 -- support encoding SCTs in certificates (#5594) | Alex Gaynor | 2020-11-30 | 1 | -0/+27 |
| | |||||
* | disallow p less than 512-bit on DH (#5592) | Paul Kehrer | 2020-11-29 | 1 | -26/+58 |
| | | | | | | | | | | | | | | | | * disallow p less than 512-bit on DH OpenSSL 3.0.0 enforces this so we'll go ahead and enforce it everywhere that's practical for us. (Note that we do not enforce on deserializing PKCS1/PKCS8 keys in < 3.0.0, but this PR adds a test so that in the 3.0.0 support branch we can test an error path) * missing test * black * _MIN_MODULUS_SIZE is now a thing * skip on fips | ||||
* | Reduce granularity of error msging when deserializing keys (#5588) | Paul Kehrer | 2020-11-26 | 1 | -4/+3 |
| | | | | | | | | | | | | * Reduce granularity of error msging when deserializing keys In OpenSSL 3.0 it is no longer possible to determine whether the reason a key failed to deserialize is because of an unsupported cipher. Since we want to be more resilient to OpenSSL error code instability we'll just remove these paths. * black * changelog and update docs | ||||
* | in OpenSSL 1.1.0+ error strings are automatically loaded (#5587) | Paul Kehrer | 2020-11-26 | 1 | -5/+0 |
| | |||||
* | Simplify wycheproof pytest code (#5579) | Alex Gaynor | 2020-11-20 | 3 | -20/+2 |
| | |||||
* | Always rely on OpenSSL's builtin locking callbacks (#5561) | Alex Gaynor | 2020-11-11 | 1 | -12/+0 |
| | |||||
* | GCM IV size limits (#5553) | Paul Kehrer | 2020-11-09 | 5 | -8/+55 |
| | | | | | | | | | | | | * GCM IV size limits OpenSSL 3.0.0 is going to enforce these size limits so we might as well put them in now. * fix the tests * black * these cases can't happen if we're limiting IV size already | ||||
* | padding: Tip-toe around bytes subclasses. (#5548) | Benjamin Peterson | 2020-11-04 | 1 | -0/+24 |
| | | | | | This change allows future's newbytes class to be padded again. Fixes https://github.com/pyca/cryptography/issues/5547. | ||||
* | Disable blinding for RSA pub keys (#5524) | Alex Gaynor | 2020-10-27 | 1 | -0/+3 |
| | |||||
* | Delete all the 1.0.2 code (#5511) | Alex Gaynor | 2020-10-25 | 5 | -39/+6 |
| | |||||
* | move blinding to __init__ on both RSA public and private (#5506) | Paul Kehrer | 2020-10-25 | 1 | -13/+11 |
| | | | | | * move blinding to __init__ on both RSA public and private * change signature to guarantee this test is testing what we think | ||||
* | PKCS7SignatureBuilder now supports new option NoCerts when signing (#5500) | frennkie | 2020-10-25 | 1 | -0/+17 |
| | |||||
* | chunking didn't actually work (#5499) | Paul Kehrer | 2020-10-25 | 1 | -0/+9 |
| |