<feed xmlns='http://www.w3.org/2005/Atom'>
<title>delta/python-packages/rsa-git.git/tests/test_pkcs1.py, branch version-4.8</title>
<subtitle>github.com: sybrenstuvel/python-rsa.git
</subtitle>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/python-packages/rsa-git.git/'/>
<entry>
<title>Reformatting with Black</title>
<updated>2021-03-29T21:17:55+00:00</updated>
<author>
<name>Sybren A. Stüvel</name>
<email>sybren@stuvel.eu</email>
</author>
<published>2021-03-29T21:17:55+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/python-packages/rsa-git.git/commit/?id=35e962d9ce424ef5ea35a9787b7b165fc034712d'/>
<id>35e962d9ce424ef5ea35a9787b7b165fc034712d</id>
<content type='text'>
No functional changes.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
No functional changes.
</pre>
</div>
</content>
</entry>
<entry>
<title>Clean up stdout when using unittest test runner</title>
<updated>2021-02-24T12:35:18+00:00</updated>
<author>
<name>Saif Hakim</name>
<email>saif@benchling.com</email>
</author>
<published>2021-02-17T08:08:18+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/python-packages/rsa-git.git/commit/?id=214c0f90e2dab0bc3d5a052cdf726c762cb4b74c'/>
<id>214c0f90e2dab0bc3d5a052cdf726c762cb4b74c</id>
<content type='text'>
While pytest is the preferred test runner via tox, it looks like some folks are
still running tests via `python3 setup.py test` which uses unittest and does
not have good support for capturing stdout. To make using unittest slightly
more friendly,  we further swallow stdout / stderr for cli tests, and ensure
print statements start on a newline.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
While pytest is the preferred test runner via tox, it looks like some folks are
still running tests via `python3 setup.py test` which uses unittest and does
not have good support for capturing stdout. To make using unittest slightly
more friendly,  we further swallow stdout / stderr for cli tests, and ensure
print statements start on a newline.
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix #164: Add padding length check as described by PKCS#1 v1.5</title>
<updated>2020-11-15T14:50:01+00:00</updated>
<author>
<name>Sybren A. Stüvel</name>
<email>sybren@stuvel.eu</email>
</author>
<published>2020-11-15T14:48:27+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/python-packages/rsa-git.git/commit/?id=f878c374086e672e7806fdd18401ec6b71cfa960'/>
<id>f878c374086e672e7806fdd18401ec6b71cfa960</id>
<content type='text'>
According to PKCS#1 v1.5, the padding should be at least 8 bytes long.
See https://tools.ietf.org/html/rfc8017#section-7.2.2 step 3 for more info.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
According to PKCS#1 v1.5, the padding should be at least 8 bytes long.
See https://tools.ietf.org/html/rfc8017#section-7.2.2 step 3 for more info.
</pre>
</div>
</content>
</entry>
<entry>
<title>Limit SHA3 support to Python 3.6+</title>
<updated>2020-06-11T18:22:30+00:00</updated>
<author>
<name>Sybren A. Stüvel</name>
<email>sybren@stuvel.eu</email>
</author>
<published>2020-06-11T18:22:01+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/python-packages/rsa-git.git/commit/?id=9032802c2574bc4538f8f54843fd1996aaf396e4'/>
<id>9032802c2574bc4538f8f54843fd1996aaf396e4</id>
<content type='text'>
The third-party library that adds support for this to Python 3.5 is a
binary package, and thus breaks the pure-Python nature of Python-RSA.

This should fix [#147](https://github.com/sybrenstuvel/python-rsa/issues/147).
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The third-party library that adds support for this to Python 3.5 is a
binary package, and thus breaks the pure-Python nature of Python-RSA.

This should fix [#147](https://github.com/sybrenstuvel/python-rsa/issues/147).
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix CVE-2020-13757: detect cyphertext modifications by prepending zero bytes</title>
<updated>2020-06-03T12:57:17+00:00</updated>
<author>
<name>Sybren A. Stüvel</name>
<email>sybren@stuvel.eu</email>
</author>
<published>2020-06-03T12:39:23+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/python-packages/rsa-git.git/commit/?id=93af6f2f89a9bf28361e67716c4240e691520f30'/>
<id>93af6f2f89a9bf28361e67716c4240e691520f30</id>
<content type='text'>
Reject cyphertexts that have been modified by prepending zero bytes, by
checking the cyphertext length against the expected size (given the
decryption key). This resolves CVE-2020-13757.

The same approach is used when verifying a signature.

Thanks Carnil for pointing this out on https://github.com/sybrenstuvel/python-rsa/issues/146
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Reject cyphertexts that have been modified by prepending zero bytes, by
checking the cyphertext length against the expected size (given the
decryption key). This resolves CVE-2020-13757.

The same approach is used when verifying a signature.

Thanks Carnil for pointing this out on https://github.com/sybrenstuvel/python-rsa/issues/146
</pre>
</div>
</content>
</entry>
<entry>
<title>Drop character encoding markers for Python 2.x</title>
<updated>2020-06-03T11:15:34+00:00</updated>
<author>
<name>Andrey Semakin</name>
<email>and-semakin@ya.ru</email>
</author>
<published>2019-11-07T06:29:53+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/python-packages/rsa-git.git/commit/?id=1473cb8599c44cffad56cecbe32c467d64f00247'/>
<id>1473cb8599c44cffad56cecbe32c467d64f00247</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Add support for SHA3 hashing</title>
<updated>2019-08-04T15:47:26+00:00</updated>
<author>
<name>Sybren A. Stüvel</name>
<email>sybren@stuvel.eu</email>
</author>
<published>2019-08-04T15:43:55+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/python-packages/rsa-git.git/commit/?id=3c5ee594a2e38b27f086d042d9d2b9d7d0d0269d'/>
<id>3c5ee594a2e38b27f086d042d9d2b9d7d0d0269d</id>
<content type='text'>
This is based on https://github.com/sybrenstuvel/python-rsa/pull/96, with
a few improvements:
  - The minimum of one use of SHA3 in a unit test, to at least touch it at
    some point.
  - Documented the support of SHA3.
  - Only install the third-party library required by Python 3.5 when we're
    running on Python 3.5. Newer Python versions support SHA3 natively.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This is based on https://github.com/sybrenstuvel/python-rsa/pull/96, with
a few improvements:
  - The minimum of one use of SHA3 in a unit test, to at least touch it at
    some point.
  - Documented the support of SHA3.
  - Only install the third-party library required by Python 3.5 when we're
    running on Python 3.5. Newer Python versions support SHA3 natively.
</pre>
</div>
</content>
</entry>
<entry>
<title>Removed compatibility code for Python 2.7 and 3.4</title>
<updated>2019-08-04T15:05:58+00:00</updated>
<author>
<name>Sybren A. Stüvel</name>
<email>sybren@stuvel.eu</email>
</author>
<published>2019-08-04T13:02:20+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/python-packages/rsa-git.git/commit/?id=ded036cf988b0cf4b20002d88434282f30762638'/>
<id>ded036cf988b0cf4b20002d88434282f30762638</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Changed unittest to cover the new SHA-224 hash method</title>
<updated>2018-02-05T12:59:52+00:00</updated>
<author>
<name>Sybren A. Stüvel</name>
<email>sybren@stuvel.eu</email>
</author>
<published>2018-02-05T12:34:10+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/python-packages/rsa-git.git/commit/?id=da7145a8835820d63539909cfe5dcc8954e4013a'/>
<id>da7145a8835820d63539909cfe5dcc8954e4013a</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Support signing a pre-calculated hash (#87)</title>
<updated>2017-05-07T09:39:47+00:00</updated>
<author>
<name>Justin Simon</name>
<email>jls5177@gmail.com</email>
</author>
<published>2017-05-07T09:39:47+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/python-packages/rsa-git.git/commit/?id=425eb24854f1c3397aaaba61fa1cf71c76b27c4b'/>
<id>425eb24854f1c3397aaaba61fa1cf71c76b27c4b</id>
<content type='text'>
* Split the hashing out of the sign method

This code change adds support to split the hashing of a message
and the actual signing of the message.

* Updating unit test and documentation

This commit updates the unit test and usage docs. In addition,
This change removes a redundant error check inside rsa.sign().

* Refactore unit tests and code comments

Removed the print statements from the unit test and refactored a
few code comments to improve readability.

* Rename hash function

The new hash function had the same name as a function in the
standard library. This commit changes the name to avoid conflicts.

* Rename hash function to compute_hash()

This commit renames the hash function to compute_hash().
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
* Split the hashing out of the sign method

This code change adds support to split the hashing of a message
and the actual signing of the message.

* Updating unit test and documentation

This commit updates the unit test and usage docs. In addition,
This change removes a redundant error check inside rsa.sign().

* Refactore unit tests and code comments

Removed the print statements from the unit test and refactored a
few code comments to improve readability.

* Rename hash function

The new hash function had the same name as a function in the
standard library. This commit changes the name to avoid conflicts.

* Rename hash function to compute_hash()

This commit renames the hash function to compute_hash().
</pre>
</div>
</content>
</entry>
</feed>
