Path: csiph.com!fu-berlin.de!uni-berlin.de!not-for-mail From: Paul Kehrer Newsgroups: comp.lang.python.announce Subject: PyCA cryptography 2.1 released Date: Wed, 11 Oct 2017 06:18:08 -0700 Lines: 43 Approved: python-announce-list@python.org Message-ID: References: Mime-Version: 1.0 Content-Type: text/plain; charset="UTF-8" X-Trace: news.uni-berlin.de OAXZ1qoJIZA9U7xtBtHKDgxue110P9N2m+Hn/Zjddacg== Return-Path: X-Original-To: python-announce-list@python.org Delivered-To: python-announce-list@mail.python.org X-Spam-Status: OK 0.004 X-Spam-Evidence: '*H*': 0.99; '*S*': 0.00; 'enabling': 0.05; 'deprecated': 0.07; 'incompatible': 0.07; 'subject:released': 0.07; 'backwards': 0.09; 'caller': 0.09; 'contributors': 0.09; 'deprecated,': 0.09; 'extension.': 0.09; 'python': 0.10; 'api': 0.10; 'encoding': 0.15; 'ciphers,': 0.16; 'constructor.': 0.16; 'deprecation': 0.16; 'openssl': 0.16; 'pypi.': 0.16; 'pypy.': 0.16; 'subject:2.1': 0.16; 'symmetric': 0.16; 'sfxlen:2': 0.16; 'string': 0.17; 'to:2**1': 0.20; 'interfaces': 0.20; 'labels': 0.22; 'parsing': 0.22; 'url:io': 0.23; 'message- id:@mail.gmail.com': 0.25; 'values': 0.26; '2.1': 0.27; '2.6': 0.27; 'passing': 0.27; 'skip:u 30': 0.27; 'to:no real name:2**1': 0.29; 'related': 0.29; 'url:en': 0.30; 'installing': 0.31; 'pass': 0.31; 'received:google.com': 0.32; 'cases': 0.32; 'anyone': 0.33; 'instead,': 0.33; 'next': 0.33; 'skip:u 20': 0.34; 'necessary.': 0.35; 'thanks': 0.36; 'mode': 0.36; 'received:209.85': 0.37; 'rather': 0.37; 'received:io': 0.37; 'received:psf.io': 0.37; 'should': 0.37; 'received:ams1.psf.io': 0.38; 'received:mail1.ams1.psf.io': 0.38; 'release': 0.38; 'add': 0.38; 'common': 0.38; 'level': 0.39; 'skip:i 20': 0.39; 'proto:https': 0.39; 'received:209': 0.39; 'to:addr:python.org': 0.40; 'received:209.85.216.174': 0.63; 'high': 0.63; 'skip:n 10': 0.64; 'choose': 0.64; 'our': 0.65; 'note:': 0.65; 'subject': 0.71; 'to:addr:python-announce-list': 0.72; 'improved': 0.76; 'policy.': 0.76; 'upgrading': 0.76; 'nss': 0.84; 'low': 0.90; 'cryptography': 0.91 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:mime-version:date:message-id:subject:to; bh=zgGhSfRoDjdtbwtYvwrYMMpc8iQaQy7Z6wPMGdI1Z14=; b=lFtJap6rYSe/V5R1g1kkjYSUWaOZSkz5RYBPEE7de7u62udCK5DJSrD7wNPeZPXPCu TCW5nCiJivCi6ekIls8K2sxjWGi+q9Xo5P3MC9yhiUbstQ1VtwGXcOhRwXlCWXRp8FOI myNavnoryFS71yvO80R9+TdWYt2VCb59OUq5c6mbSji4X4mb8atfy93HziepOuuaGoBY Zv30DA/x1hqob7kqiT7Npka8BdVmI3wK2UmB5ioCzg/UveDPLb+gQaG9h6STN/1nVmNn WdtqqzNB714bmLGMzvnbhhUY3Fe+T4R3awREw3kFf4zhLfl9h3K9Q5U9O37L9WZx457o 7K4w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:mime-version:date:message-id:subject:to; bh=zgGhSfRoDjdtbwtYvwrYMMpc8iQaQy7Z6wPMGdI1Z14=; b=PAqAuwnCqytBALI3+ql3ht/lAEepSP7Wnbdn8/BZRnIgZ6zE4TY/GofrJeJPjfLM4g vL8TMMIFciRDq2e8L3q3LG+V6BTr/EMnq5nktblYcG/8NCvOBCsNnovmbOmAcNRn6myO Vi3ITBUlgaZ/MVnzhjnq5NgHirdyy+zV7uKZi1qZdKhzNP02sVlNM/AhkjDQVgGfbim+ f08uAmyxq2d/Vkn/wbyNP22FWlgyU4/QLYinUr+XZWfdMNplg3Ak6ywJUglFnFqglIur /imFxCz+GiogxaJNAXtxDMjLtOEeGCL+ECgLxcNGvjjsml6yQJB/Fwk0x6ujShYuA0W6 vy1w== X-Gm-Message-State: AMCzsaWBPOHFCck4X7eWB/hzdAxNiJkSMcqJEdN/hh97Cbbgh1/fQrgO v1q6gwUa27uHp+B+c0gWyFEijweR++K0FsEdbWXqvw== X-Google-Smtp-Source: AOwi7QA62NhrBvoa6M+U4QbU3hct9WNKaodmqAXcT0lX2+nlFfG+LqRTHsLqflSVO0erG/7oGdbWJPOp+D1UCyZGtzc= X-Received: by 10.200.43.252 with SMTP id n57mr11869205qtn.141.1507727889033; Wed, 11 Oct 2017 06:18:09 -0700 (PDT) X-Mailer: Airmail (452) X-Mailman-Approved-At: Thu, 12 Oct 2017 05:34:05 -0400 X-Content-Filtered-By: Mailman/MimeDel 2.1.24 X-BeenThere: python-announce-list@python.org X-Mailman-Version: 2.1.24 Precedence: list List-Id: Announcement-only list for the Python programming language List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-Mailman-Original-Message-ID: Xref: csiph.com comp.lang.python.announce:2652 PyCA cryptography 2.1 has been released to PyPI. cryptography includes both high level recipes and low level interfaces to common cryptographic algorithms such as symmetric ciphers, message digests, and key derivation functions. We support Python 2.6-2.7, Python 3.4+, and PyPy. NOTE: This release contains a backwards incompatible change that was not part of a deprecation cycle. Before upgrading p Changelog (https://cryptography.io/en/latest/changelog/#v2-1) * FINAL DEPRECATION Python 2.6 support is deprecated, and will be removed in the next release of cryptography. * BACKWARDS INCOMPATIBLE: Whirlpool, RIPEMD160, and UnsupportedExtension have been removed in accordance with our API stability policy. * BACKWARDS INCOMPATIBLE: DNSName.value, UniformResourceIndicator.value, and RFC822Name.value will now return an A-label string when parsing a certificate containing an internationalized domain name (IDN) or if the caller passed a U-label to the constructor. See below for additional deprecations related to this change. * Installing cryptography now requires pip 6 or newer. * Deprecated passing U-label strings to the DNSName, UniformResourceIdentifier, and RFC822Name constructors. Instead, users should pass values as A-label strings with idna encoding if necessary. This change will not affect anyone who is not processing internationalized domains. * Added support for ChaCha20. In most cases users should choose ChaCha20Poly1305 rather than using this unauthenticated form. * Added is_signature_valid() to CertificateRevocationList. * Support BLAKE2b and BLAKE2s with HMAC. * Added support for XTS mode for AES. * Added support for using labels with OAEP when using OpenSSL 1.0.2 or greater. * Improved compatibility with NSS when issuing certificates from an issuer that has a subject with non-UTF8String string types. * Add support for the DeltaCRLIndicator extension. * Add support for the TLSFeature extension. This is commonly used for enabling OCSP Must-Staple in certificates. * Add support for the FreshestCRL extension. Thanks to all the contributors in this release. -Paul Kehrer (reaperhulk)