Path: csiph.com!goblin2!goblin1!goblin.stu.neva.ru!peer02.fr7!futter-mich.highwinds-media.com!news.highwinds-media.com!fu-berlin.de!uni-berlin.de!not-for-mail From: Paul Kehrer Newsgroups: comp.lang.python.announce Subject: PyCA cryptography 1.6 released Date: Mon, 21 Nov 2016 19:34:40 -0800 Lines: 39 Approved: python-announce-list@python.org Message-ID: References: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 X-Trace: news.uni-berlin.de fEVR/a1nt6+Ka0jjKEhWOQsyEx79xesKmyx/FjWQ9TsQ== Return-Path: X-Original-To: python-announce-list@python.org Delivered-To: python-announce-list@mail.python.org X-Spam-Status: OK 0.006 X-Spam-Evidence: '*H*': 0.99; '*S*': 0.00; 'deprecated': 0.07; 'subject:released': 0.07; 'python': 0.09; 'attribute.': 0.09; 'garbage': 0.09; 'macos': 0.09; 'encoding': 0.15; 'pushed': 0.15; '1.1.0': 0.16; '1.7': 0.16; 'certificate.': 0.16; 'deadlock': 0.16; 'iterable': 0.16; 'openssl': 0.16; 'pyinstaller': 0.16; 'pypi.': 0.16; 'pypy.': 0.16; 'python-based': 0.16; 'subject:1.6': 0.16; 'sfxlen:2': 0.16; 'url:)': 0.17; 'attribute': 0.18; 'windows': 0.20; 'changes': 0.20; 'to:2**1': 0.21; 'accepts': 0.22; 'developers.': 0.22; 'planned': 0.22; 'url:io': 0.23; 'fix': 0.23; 'message-id:@mail.gmail.com': 0.25; 'becomes': 0.27; 'switch': 0.27; 'weeks': 0.28; 'occurred': 0.29; 'signatures': 0.29; 'workaround': 0.29; 'to:no real name:2**1': 0.29; 'next': 0.32; 'volume': 0.32; 'received:google.com': 0.32; 'url:en': 0.33; 'could': 0.34; 'skip:& 10': 0.35; 'replaced': 0.35; 'release': 0.35; 'version': 0.37; "didn't": 0.37; 'some': 0.39; 'large': 0.39; 'application': 0.39; 'to:addr:python.org': 0.39; 'proto:https': 0.40; 'standard': 0.40; 'received:io': 0.40; 'received:psf.io': 0.40; 'collection': 0.60; 'back': 0.60; 'your': 0.60; 'skip:n 10': 0.63; 'our': 0.63; 'cut': 0.64; 'accessed': 0.66; '2-3': 0.71; 'to:addr:python-announce-list': 0.71; '1.6': 0.84; 'bundling': 0.84; 'lock.': 0.84; 'verifying': 0.84; 'cryptography': 0.91 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:mime-version:date:message-id:subject:to; bh=bDdMB9bkfuHkRvSYrcINn9dQfiIukU9AxKyJb1f/YTc=; b=yONFKdgazGpHJUZRPc5O20Fo3fM4YpvmHcgSbd4oes4RWk/9PccwumGt6uUSnsgqFM KYkho+k5842QQje67pl/c025cghfVRVGvDMFcRENuOxRouQ4aJhLt6nz3Tgdmv4KS78e cXuKQp3s93pddNwEqCOCNtDUOfpHwf7t3v7BkhNhSZQPkHAkaWVF4K6v58U6tAgZRcaW ZpefTQ/ZM2GBa4En+VwWhtz8OtxPiabwvdnjC9c6pFagyZKMTxIQZdCwNit2JS/31Srr m+aJ6Aa5Pfx9nyfksAO6MclWECnhPU/mtscXjPoEamusyd/XXvIz8qqk5SDjZsJvPgIc vdbg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:mime-version:date:message-id:subject:to; bh=bDdMB9bkfuHkRvSYrcINn9dQfiIukU9AxKyJb1f/YTc=; b=LRvssEKo3teZpceiSzRoj+f0U6QYyQ96eeEBGq1MagMRMbfEx5UFE0MR6sbRQlTiQF ve/2tfD+gvXWIMT7V8F76uyxNzRpWzDMZUJfzhhu7YaGGHNxYoTnO6swXSsAiXBzrPdR DZ+SahX2LNu5m3snLW6xpeGx+HENd2wupy8XIJy25beLFo4PPMtKrD7tHwI97smpXqxZ hTh7oMuwQZ0oK0dYzW2lDdS9UFlLoyyOMoTPBVnZicckTjjeagosVvu1pfcVD+8Wq1Iz ZEn2/ly2Myou8afN+LUbjtqmKBGR+NswuABKcXNi1LHC9TOYVLLTaXC1EsRt3J+xSNyQ bcjg== X-Gm-Message-State: AKaTC01CPq2DySWNtEMvqVGCTq857Q/LeLgrzj6/Twb0AbD4dxdlpzvyRNoR8G7nF5mUAA+P5eEm1kDGVdMr7g== X-Received: by 10.55.109.199 with SMTP id i190mr18760148qkc.287.1479785681430; Mon, 21 Nov 2016 19:34:41 -0800 (PST) X-Mailer: Airmail (397) X-Mailman-Approved-At: Wed, 23 Nov 2016 08:39:25 -0500 X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: python-announce-list@python.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Announcement-only list for the Python programming language List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-Mailman-Original-Message-ID: X-Received-Bytes: 6439 X-Received-Body-CRC: 1636085239 Xref: csiph.com comp.lang.python.announce:2321 PyCA cryptography 1.6 has been released to PyPI. cryptography is a package which provides cryptographic recipes and primitives to Python developers. Our goal is for it to be your "cryptographic standard library". We support Python 2.6-2.7, Python 3.3+, and PyPy. Changelog (https://cryptography.io/en/latest/changelog/): * Deprecated support for OpenSSL 1.0.0. Support will be removed in cryptography 1.7. * Replaced the Python-based OpenSSL locking callbacks with a C version to fix a potential deadlock that could occur if a garbage collection cycle occurred while inside the lock. * Added support for BLAKE2b and BLAKE2s when using OpenSSL 1.1.0. * Added signature_algorithm_oid support to Certificate. * Added signature_algorithm_oid support to CertificateSigningRequest. * Added signature_algorithm_oid support to CertificateRevocationList. * Added support for Scrypt when using OpenSSL 1.1.0. * Added a workaround to improve compatibility with Python application bundling tools like PyInstaller and cx_freeze. * Added support for generating a random_serial_number(). * Added support for encoding IPv4Network and IPv6Network in X.509 certificates for use with NameConstraints. * Added public_bytes() to Name. * Added RelativeDistinguishedName * DistributionPoint now accepts RelativeDistinguishedName for relative_name. Deprecated use of Name as relative_name. * Name now accepts an iterable of RelativeDistinguishedName. RDNs can be accessed via the rdns attribute. When constructed with an iterable of NameAttribute, each attribute becomes a single-valued RDN. * Added derive_private_key(). * Added support for signing and verifying RSA, DSA, and ECDSA signatures with Prehashed digests. Due to the volume of changes in this release the switch to bundling OpenSSL 1.1.0 in the macOS and Windows wheels has been pushed back to version 1.8. 1.7 is tentatively planned to be out in the next 2-3 weeks with some large features that didn't make the cut for this release. -Paul Kehrer (reaperhulk)