aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
7 hoursBump BoringSSL and/or OpenSSL in CI (#11238)HEADmainpyca-boringbot[bot]1-4/+4
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
7 hoursBump x509-limbo and/or wycheproof in CI (#11240)pyca-boringbot[bot]1-2/+2
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
15 hoursMigrate `asn1` to declrative modules API (#11224)Alex Gaynor2-18/+9
refs #11158
15 hoursMigrate `ocsp_req` to declrative modules API (#11230)Alex Gaynor2-14/+7
refs #11158
15 hoursMigrate `verify` to declarative modules API (#11231)Alex Gaynor2-21/+12
refs #11158
20 hoursBump target-lexicon from 0.12.14 to 0.12.15 in /src/rust (#11227)dependabot[bot]1-2/+2
Bumps [target-lexicon](https://github.com/bytecodealliance/target-lexicon) from 0.12.14 to 0.12.15. - [Commits](https://github.com/bytecodealliance/target-lexicon/compare/v0.12.14...v0.12.15) --- updated-dependencies: - dependency-name: target-lexicon dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
20 hoursBump syn from 2.0.69 to 2.0.70 in /src/rust (#11229)dependabot[bot]1-2/+2
Bumps [syn](https://github.com/dtolnay/syn) from 2.0.69 to 2.0.70. - [Release notes](https://github.com/dtolnay/syn/releases) - [Commits](https://github.com/dtolnay/syn/compare/2.0.69...2.0.70) --- updated-dependencies: - dependency-name: syn dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
31 hoursMigrate `pkcs12` to declrative modules API (#11222)Alex Gaynor2-20/+9
refs #11158
31 hoursMigrate `exceptions` to declrative modules API (#11221)Alex Gaynor2-11/+6
refs #11158
31 hoursBump x509-limbo and/or wycheproof in CI (#11220)pyca-boringbot[bot]1-2/+2
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
31 hoursBegin migrating to declarative modules (#11159)Alex Gaynor1-77/+87
Refs #11158
31 hoursBump BoringSSL and/or OpenSSL in CI (#11219)pyca-boringbot[bot]1-2/+2
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
45 hoursBump nh3 from 0.2.17 to 0.2.18 in /.github/requirements (#11216)dependabot[bot]1-17/+17
Bumps [nh3](https://github.com/messense/nh3) from 0.2.17 to 0.2.18. - [Release notes](https://github.com/messense/nh3/releases) - [Commits](https://github.com/messense/nh3/compare/v0.2.17...v0.2.18) --- updated-dependencies: - dependency-name: nh3 dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
45 hoursBump cc from 1.0.104 to 1.0.105 in /src/rust (#11215)dependabot[bot]2-3/+3
Bumps [cc](https://github.com/rust-lang/cc-rs) from 1.0.104 to 1.0.105. - [Release notes](https://github.com/rust-lang/cc-rs/releases) - [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md) - [Commits](https://github.com/rust-lang/cc-rs/compare/cc-v1.0.104...cc-v1.0.105) --- updated-dependencies: - dependency-name: cc dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 daysverification: remove an error variant (#11214)William Woodruff4-13/+12
* verification: remove an error variant * lib: fix tests * lib: remove tests mod entirely Now redundant. * lib: re-add tests noxfile: mark vectors as an editable install * extensions: remove Debug impl ...requires an `ok()` in verify.
3 daysMake type signatures more explicit in internals (#11213)Alex Gaynor1-3/+9
3 daysRemove typechecking that pyo3 does automatically (#11212)Alex Gaynor2-18/+4
3 daysBump nh3 from 0.2.17 to 0.2.18 (#11211)dependabot[bot]1-1/+1
Bumps [nh3](https://github.com/messense/nh3) from 0.2.17 to 0.2.18. - [Release notes](https://github.com/messense/nh3/releases) - [Commits](https://github.com/messense/nh3/compare/v0.2.17...v0.2.18) --- updated-dependencies: - dependency-name: nh3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 daysBump pyo3 from 0.22.0 to 0.22.1 in /src/rust (#11210)dependabot[bot]4-13/+13
Bumps [pyo3](https://github.com/pyo3/pyo3) from 0.22.0 to 0.22.1. - [Release notes](https://github.com/pyo3/pyo3/releases) - [Changelog](https://github.com/PyO3/pyo3/blob/main/CHANGELOG.md) - [Commits](https://github.com/pyo3/pyo3/compare/v0.22.0...v0.22.1) --- updated-dependencies: - dependency-name: pyo3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 daysBump actions/upload-artifact in /.github/actions/upload-coverage (#11209)dependabot[bot]1-1/+1
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.3 to 4.3.4. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/65462800fd760344b1a7b4382951275a0abb4808...0b2256b8c012f0828dc542b3febcab082c67f72b) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 daysBump maturin from 1.5.0 to 1.7.0 in /.github/requirements (#11208)dependabot[bot]1-16/+15
Bumps [maturin](https://github.com/pyo3/maturin) from 1.5.0 to 1.7.0. - [Release notes](https://github.com/pyo3/maturin/releases) - [Changelog](https://github.com/PyO3/maturin/blob/main/Changelog.md) - [Commits](https://github.com/pyo3/maturin/compare/v1.5.0...v1.7.0) --- updated-dependencies: - dependency-name: maturin dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 daysBump actions/upload-artifact from 4.3.3 to 4.3.4 (#11205)dependabot[bot]2-7/+7
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.3 to 4.3.4. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/65462800fd760344b1a7b4382951275a0abb4808...0b2256b8c012f0828dc542b3febcab082c67f72b) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 daysBump ruff from 0.5.0 to 0.5.1 (#11207)dependabot[bot]1-1/+1
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.5.0 to 0.5.1. - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](https://github.com/astral-sh/ruff/compare/0.5.0...0.5.1) --- updated-dependencies: - dependency-name: ruff dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 daysBump actions/download-artifact from 4.1.7 to 4.1.8 (#11204)dependabot[bot]2-4/+4
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4.1.7 to 4.1.8. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/65a9edc5881444af0b9093a5e628f2fe47ea3b2e...fa0a91b85d4f404e444e00e005971372dc801d16) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 daysBump syn from 2.0.68 to 2.0.69 in /src/rust (#11206)dependabot[bot]1-2/+2
Bumps [syn](https://github.com/dtolnay/syn) from 2.0.68 to 2.0.69. - [Release notes](https://github.com/dtolnay/syn/releases) - [Commits](https://github.com/dtolnay/syn/compare/2.0.68...2.0.69) --- updated-dependencies: - dependency-name: syn dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 daysSpecial case nox -e local for maturin (#11203)Alex Gaynor1-8/+5
This is way faster.
4 daysBump BoringSSL and/or OpenSSL in CI (#11202)pyca-boringbot[bot]1-2/+2
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
4 daysEnforce length for CommonName (#11201)Alex Gaynor3-11/+28
fixes #10553
4 daysadd support for CipherContext.update_nonce (#10437)Paul Kehrer7-2/+205
* add support for CipherContext.reset_nonce This only supports ChaCha20 and ciphers in CTR mode. * expand tests to reset to different nonces
4 daysAdd rsa_recover_private_exponent function (#11193)Daniel Lenski5-1/+73
Given the RSA public exponent (`e`), and the RSA primes (`p`, `q`), it is possible to calculate the corresponding private exponent `d = e⁻¹ mod λ(n)` where `λ(n) = lcm(p-1, q-1)`. With this function added, it becomes possible to use the library to reconstruct an RSA private key given *only* `p`, `q`, and `e`: from cryptography.hazmat.primitives.asymmetric import rsa n = p * q d = rsa.rsa_recover_private_exponent(e, p, q) # newly-added piece iqmp = rsa.rsa_crt_iqmp(p, q) # preexisting dmp1 = rsa.rsa_crt_dmp1(d, p) # preexisting dmq1 = rsa.rsa_crt_dmq1(d, q) # preexisting assert rsa.rsa_recover_prime_factors(n, e, d) in ((p, q), (q, p)) # verify consistency privk = rsa.RSAPrivateNumbers(p, q, d, dmp1, dmq1, iqmp, rsa.RSAPublicNumbers(e, n)).private_key() Older RSA implementations, including the original RSA paper, often used the Euler totient function `ɸ(n) = (p-1) * (q-1)` instead of `λ(n)`. The private exponents generated by that method work equally well, but may be larger than strictly necessary (`λ(n)` always divides `ɸ(n)`). This commit additionally implements `_rsa_recover_euler_private_exponent`, so that tests of the internal structure of RSA private keys can allow for either the Euler or the Carmichael versions of the private exponents. It makes sense to expose only the more modern version (using the Carmichael totient function) for public usage, given that it is slightly more computationally efficient to use the keys in this form, and that some standards like FIPS 186-4 require this form. (See https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf#page=63)
5 daysSwitch to maturin. (#8815)Alex Gaynor5-62/+75
It seems to be much faster at doing things locally.
5 daysConvert the remainder of PKCS#12 encryption to Rust (#11200)Alex Gaynor9-292/+196
5 daysImplement encrypted PKCS#12 serialization in Rust (#11059)Alex Gaynor10-50/+264
5 daysBump BoringSSL and/or OpenSSL in CI (#11198)pyca-boringbot[bot]1-2/+2
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
6 daysBump certifi from 2024.6.2 to 2024.7.4 in /.github/requirements (#11197)dependabot[bot]1-3/+3
Bumps [certifi](https://github.com/certifi/python-certifi) from 2024.6.2 to 2024.7.4. - [Commits](https://github.com/certifi/python-certifi/compare/2024.06.02...2024.07.04) --- updated-dependencies: - dependency-name: certifi dependency-type: indirect update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
6 daysUse wildcard in dependabot.yml (#11185)Alex Gaynor1-3/+1
6 daysBump certifi from 2024.6.2 to 2024.7.4 (#11196)dependabot[bot]1-1/+1
Bumps [certifi](https://github.com/certifi/python-certifi) from 2024.6.2 to 2024.7.4. - [Commits](https://github.com/certifi/python-certifi/compare/2024.06.02...2024.07.04) --- updated-dependencies: - dependency-name: certifi dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
6 daysBump BoringSSL and/or OpenSSL in CI (#11194)pyca-boringbot[bot]1-4/+4
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
7 daysBump x509-limbo and/or wycheproof in CI (#11192)pyca-boringbot[bot]1-2/+2
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
7 daysBump BoringSSL and/or OpenSSL in CI (#11191)pyca-boringbot[bot]1-2/+2
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
8 daysBump setuptools from 70.1.1 to 70.2.0 in /.github/requirements (#11190)dependabot[bot]1-3/+3
Bumps [setuptools](https://github.com/pypa/setuptools) from 70.1.1 to 70.2.0. - [Release notes](https://github.com/pypa/setuptools/releases) - [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst) - [Commits](https://github.com/pypa/setuptools/compare/v70.1.1...v70.2.0) --- updated-dependencies: - dependency-name: setuptools dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
8 daysBump x509-limbo and/or wycheproof in CI (#11189)pyca-boringbot[bot]1-2/+2
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
8 daysBump BoringSSL and/or OpenSSL in CI (#11188)pyca-boringbot[bot]1-2/+2
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
9 daysBump cc from 1.0.103 to 1.0.104 in /src/rust (#11187)dependabot[bot]2-3/+3
Bumps [cc](https://github.com/rust-lang/cc-rs) from 1.0.103 to 1.0.104. - [Release notes](https://github.com/rust-lang/cc-rs/releases) - [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md) - [Commits](https://github.com/rust-lang/cc-rs/compare/cc-v1.0.103...cc-v1.0.104) --- updated-dependencies: - dependency-name: cc dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
9 daysBump BoringSSL and/or OpenSSL in CI (#11186)pyca-boringbot[bot]1-2/+2
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>
10 daysBump cc from 1.0.102 to 1.0.103 in /src/rust (#11184)dependabot[bot]2-3/+3
Bumps [cc](https://github.com/rust-lang/cc-rs) from 1.0.102 to 1.0.103. - [Release notes](https://github.com/rust-lang/cc-rs/releases) - [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md) - [Commits](https://github.com/rust-lang/cc-rs/compare/cc-v1.0.102...cc-v1.0.103) --- updated-dependencies: - dependency-name: cc dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
10 daysAdd _utc datetime methods to x509.ocsp (#11183)Magnus Watn6-37/+470
Fixes #11170.
10 daysRemove buster from CI (#11182)Alex Gaynor2-3/+2
* Remove buster from CI It is EOL * Update installation.rst
10 daysfixes #11175 -- improve error message when loading PEM public key with no ↵Alex Gaynor1-1/+3
BEGIN PUBLIC KEY (#11177)
10 daysBump BoringSSL and/or OpenSSL in CI (#11181)pyca-boringbot[bot]1-2/+2
Co-authored-by: pyca-boringbot[bot] <pyca-boringbot[bot]+106132319@users.noreply.github.com>