[Cryptography-dev] Criteria for first release?

Hynek Schlawack hs at ox.cx
Thu Oct 24 18:10:25 CEST 2013


I’m not a fan of semver. The backward compat policy for a project like cryptography should be simply “don’t break it”. FWIW, I like Ubuntu’s & Twisted’s time-base versioning with possible point-releases for urgent bug fixes.


Am 24.10.2013 um 18:05 schrieb Donald Stufft <donald at stufft.io>:

> One thing we’ll need is a backwards compat policy/versioning scheme.
> 
> Personally I think semver with PEP440 syntax?
> 
> On Oct 24, 2013, at 11:27 AM, Alex Gaynor <alex.gaynor at gmail.com> wrote:
> 
>> Hi all!
>> 
>> We're at an exciting point where it's actually possible to do stuff with cryptography. You know what that means... time to start thinking about a release! I'd like us to make a list of the stuff we think should be in our first release. Here's my list:
>> 
>> * Figure out our packaging / bundling story with OpenSSL
>> * Finish binding OpenSSL to the point where JP can use it for PyOpenSSL
>> * The last two block ciphers that conch would need (CAST and Blowfish)
>> * Finalizing the iterator APIs for BlockCipher
>> * Padding APIs
>> 
>> Here's stuff I'm not sure about:
>> * Everything that conch needs (this means figuring out the API for RSA/DSA)
>> * GCM
>> * CommonCrypto backend
>> 
>> What do ya'll think, am I missing anything, do I have to much?
>> 
>> As a heads up: once we're ready to do the release and we've frozen a release-candidate I plan to investigate getting it audited.
>> 
>> Alex
>> 
>> -- 
>> "I disapprove of what you say, but I will defend to the death your right to say it." -- Evelyn Beatrice Hall (summarizing Voltaire)
>> "The people's good is the highest law." -- Cicero
>> GPG Key fingerprint: 125F 5C67 DFE9 4084
>> _______________________________________________
>> Cryptography-dev mailing list
>> Cryptography-dev at python.org
>> https://mail.python.org/mailman/listinfo/cryptography-dev
> 
> 
> -----------------
> Donald Stufft
> PGP: 0x6E3CBCE93372DCFA // 7C6B 7C5D 5E2B 6356 A926 F04F 6E3C BCE9 3372 DCFA
> 
> _______________________________________________
> Cryptography-dev mailing list
> Cryptography-dev at python.org
> https://mail.python.org/mailman/listinfo/cryptography-dev

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 235 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://mail.python.org/pipermail/cryptography-dev/attachments/20131024/4e0225d2/attachment.sig>


More information about the Cryptography-dev mailing list