Groups > comp.lang.python.announce > #3514

PyCA cryptography 3.2 released

Path	csiph.com!fu-berlin.de!uni-berlin.de!not-for-mail
From	Paul Kehrer <paul.l.kehrer@gmail.com>
Newsgroups	comp.lang.python.announce
Subject	PyCA cryptography 3.2 released
Date	Sun, 25 Oct 2020 19:30:39 -0700
Lines	18
Approved	python-announce-list@python.org
Message-ID	<160369545037.22283.python-announce-list@python.org> (permalink)
Reply-To	python-list@python.org
Mime-Version	1.0
Content-Type	text/plain; charset="UTF-8"
Content-Transfer-Encoding	base64
X-Trace	news.uni-berlin.de egpwpQC+6Sed+JyCRmYG/A2Jv1E0UCXngu3/i9i9HfVA==
Authentication-Results	mail.python.org; dkim=pass reason="2048-bit key; unprotected key" header.d=gmail.com header.i=@gmail.com header.b=OJs9ILhT; dkim-adsp=pass; dkim-atps=neutral
X-Spam-Status	OK 0.003
X-Spam-Evidence	'H': 0.99; 'S': 0.00; 'issue.': 0.05; 'api,': 0.09; 'functions,': 0.09; 'interfaces': 0.09; 'reporting': 0.09; 'to:addr:python-announce-list': 0.09; 'python': 0.15; '3.2': 0.16; 'algorithms': 0.16; 'algorithms,': 0.16; 'constant': 0.16; 'cryptography': 0.16; 'digests,': 0.16; 'mitigate': 0.16; 'pypi.': 0.16; 'removed.': 0.16; 'required.': 0.16; 'symmetric': 0.16; 'url-ip:104.17.32.82/32': 0.16; 'url-ip:104.17.32/24': 0.16; 'url- ip:104.17.33.82/32': 0.16; 'url-ip:104.17.33/24': 0.16; 'url:latest': 0.16; 'api': 0.18; 'to:no real name:2**1': 0.23; 'cannot': 0.25; 'signing': 0.27; 'message-id:@mail.gmail.com': 0.33; 'sfxlen:2': 0.34; 'received:google.com': 0.34; 'release': 0.35; 'from:addr:gmail.com': 0.35; 'url-ip:104.17/16': 0.36; 'url:)': 0.36; 'users': 0.36; 'where': 0.37; 'basic': 0.38; 'completely': 0.61; 'future': 0.62; 'security': 0.62; 'our': 0.62; 'skip:b 10': 0.63; 'time,': 0.64; '8bit%:9': 0.66; 'credit': 0.68; 'low': 0.68; 'released': 0.75; 'more.': 0.78
DKIM-Signature	v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=Ap8lwDobblnCXXNfEfvl3lvFC34reIQpEWW2es8siXM=; b=OJs9ILhTPhzuLQE+IMqw3dDDvH/y+DJbBaX11vUxv8GzgiJ/LHu+C8PN5JJ+dT/Opm dlM1G6Wv6cmz9a0Fe32ARZWcMp6jdhmcCHHgZRcRqSIy50X3XJXoTJo9y8BC3qKLcavB WUkId322UrySnz4r90GWPn4eYTJGg+zTJKnYODJCRVdZlY331Oz3oiTg6mF953H/DyhA +Gvc8Jb04resj/fdoJqOhZPaSFSIX8fIW2FgDBnPtjciHk5LPI5pNIyAQWUYkz63zDGG BPkI/WJQpgiYoYHrc9vqnUKDKB6EguTG0sHuHnuSKEDG/qoZgki7C6MECAGwjsb0z7u2 U4oQ==
X-Google-DKIM-Signature	v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=Ap8lwDobblnCXXNfEfvl3lvFC34reIQpEWW2es8siXM=; b=jwgpqVVkUKaD0GP8NSmROyZ4TmKBq/OqItC32q+y9vsNuuAae1aIt8TEdDtZTmWjGE Ella8akcYGj6pSg4g6PXxcYL9X2n9e2rhoxIoHfj+/e6m0d8oHtGr3pHYbxhavlsHr6H zeA9/e5LPfq+Y/FZ3OavinQ4OP0aoA33rYG9MGIfiIdOFRDzESO6THwKJBd+1UoNlFk6 V6STNfMJnE9cuNJyb18VzIw93I3GCyp79LlcKDgIvMOwTzV6p/XeznkYFJNDxwyUPB3I J/kcd0PfKHKkNjsh2bbnXhm3QTcbLGbHT7Q6q7ubaFWLoq7LrrG7aj7jziMhZXtopFX8 NpZg==
X-Gm-Message-State	AOAM533jD3e5Mn0xj3qTSQiFIDx0ECOoJc7sqxD2dqrUqB5wJEyWBm1J lgIXSCBGcSfqIDtoU0AaZTDNnfKg2JQamDgvSQazvUYetPk=
X-Google-Smtp-Source	ABdhPJxa5I+3W2pHWCME4tHxu+b55XVCStsKFE3nOIHQSb23AYSo9nLO6scGQkVLVioo5WsB8vK7zRvNajRekojS354=
X-Received	by 2002:a02:c885:: with SMTP id m5mr9159974jao.72.1603679450450; Sun, 25 Oct 2020 19:30:50 -0700 (PDT)
X-MailFrom	paul.l.kehrer@gmail.com
X-Mailman-Rule-Hits	emergency
X-Mailman-Rule-Misses	dmarc-mitigation; no-senders; approved
Message-ID-Hash	2GLMP3BYZV7E7QNG4FAWCZM7HAYBFJ26
X-Message-ID-Hash	2GLMP3BYZV7E7QNG4FAWCZM7HAYBFJ26
X-Mailman-Approved-At	Mon, 26 Oct 2020 02:57:18 -0400
X-Content-Filtered-By	Mailman/MimeDel 3.3.2rc2
X-Mailman-Version	3.3.2rc2
Precedence	list
List-Id	Announcement-only list for the Python programming language <python-announce-list.python.org>
Archived-At	<https://mail.python.org/archives/list/python-announce-list@python.org/message/2GLMP3BYZV7E7QNG4FAWCZM7HAYBFJ26/>
List-Archive	<https://mail.python.org/archives/list/python-announce-list@python.org/>
List-Help	<mailto:python-announce-list-request@python.org?subject=help>
List-Post	<mailto:python-announce-list@python.org>
List-Subscribe	<mailto:python-announce-list-join@python.org>
List-Unsubscribe	<mailto:python-announce-list-leave@python.org>
Xref	csiph.com comp.lang.python.announce:3514

Show key headers only | View raw

PyCA cryptography 3.2 has been released to PyPI. cryptography includes both
high level recipes and low level interfaces to common cryptographic
algorithms such as symmetric ciphers, asymmetric algorithms, message
digests, X509, key derivation functions, and much more. We support Python
2.7, Python 3.5+, and PyPy.

Changelog (https://cryptography.io/en/latest/changelog/):
* SECURITY ISSUE: Attempted to make RSA PKCS#1v1.5 decryption more constant
time, to protect against Bleichenbacher vulnerabilities. Due to limitations
imposed by our API, we cannot completely mitigate this vulnerability and a
future release will contain a new API which is designed to be resilient to
these for contexts where it is required. Credit to Hubert Kario for
reporting the issue. CVE-2020-25659
* Support for OpenSSL 1.0.2 has been removed. Users on older versions of
OpenSSL will need to upgrade.
* Added basic support for PKCS7 signing (including SMIME) via
PKCS7SignatureBuilder.

-Paul Kehrer (reaperhulk)

Back to comp.lang.python.announce | Previous | Next | Find similar | Unroll thread

Thread

PyCA cryptography 3.2 released Paul Kehrer <paul.l.kehrer@gmail.com> - 2020-10-25 19:30 -0700

csiph-web