From paul.l.kehrer at gmail.com Sun Feb 7 14:54:34 2021 From: paul.l.kehrer at gmail.com (Paul Kehrer) Date: Sun, 7 Feb 2021 13:54:34 -0600 Subject: [Cryptography-dev] PyCA cryptography 3.3.2 and 3.4 released Message-ID: PyCA cryptography 3.3.2 and 3.4 have been released to PyPI. cryptography includes both high level recipes and low level interfaces to common cryptographic algorithms such as symmetric ciphers, asymmetric algorithms, message digests, X509, key derivation functions, and much more. 3.3.2 supports Python 2.7, Python 3.6+, and PyPy, while 3.4 supports Python 3.6+ (including PyPy3). 3.3.2 Changelog (https://cryptography.io/en/latest/changelog.html#v3-3-2): * SECURITY ISSUE: Fixed a bug where certain sequences of update() calls when symmetrically encrypting very large payloads (>2GB) could result in an integer overflow, leading to buffer overflows. CVE-2020-36242 Please note 3.3.2 is the FINAL RELEASE supporting Python 2.7. 3.4 Changelog (https://cryptography.io/en/latest/changelog.html#v3-4) * BACKWARDS INCOMPATIBLE: Support for Python 2 has been removed. * We now ship manylinux2014 wheels and no longer ship manylinux1 wheels. Users should upgrade to the latest pip to ensure this doesn?t cause issues downloading wheels on their platform. cryptography now incorporates Rust code. Users building cryptography themselves will need to have the Rust toolchain installed. Users who use an officially produced wheel will not need to make any changes. The minimum supported Rust version is 1.45.0. * cryptography now has PEP 484 type hints on nearly all of of its public APIs. Users can begin using them to type check their code with mypy. -Paul Kehrer (reaperhulk) From paul.l.kehrer at gmail.com Sun Feb 7 17:20:56 2021 From: paul.l.kehrer at gmail.com (Paul Kehrer) Date: Sun, 7 Feb 2021 16:20:56 -0600 Subject: [Cryptography-dev] PyCA cryptography 3.4.1 released Message-ID: PyCA cryptography 3.4.1 has been released to PyPI. cryptography includes both high level recipes and low level interfaces to common cryptographic algorithms such as symmetric ciphers, asymmetric algorithms, message digests, X509, key derivation functions, and much more. We support Python 3.6+, and PyPy3. Changelog (https://cryptography.io/en/latest/changelog.html#v3-4-1): * Fixed a circular import issue. * Added additional debug output to assist users seeing installation errors due to outdated pip or missing rustc. -Paul Kehrer (reaperhulk) From paul.l.kehrer at gmail.com Mon Feb 8 23:56:17 2021 From: paul.l.kehrer at gmail.com (Paul Kehrer) Date: Mon, 8 Feb 2021 22:56:17 -0600 Subject: [Cryptography-dev] PyCA cryptography 3.4.2/3.4.3 released Message-ID: PyCA cryptography 3.4.2 and 3.4.3 have been released to PyPI. cryptography includes both high level recipes and low level interfaces to common cryptographic algorithms such as symmetric ciphers, asymmetric algorithms, message digests, X509, key derivation functions, and much more. We support Python 3.6+, and PyPy3. Changelog (https://cryptography.io/en/latest/changelog.html): * [3.4.2] Improvements to make the rust transition a bit easier. This includes some better error messages and small dependency fixes. If you experience installation problems be sure to update pip first, then check the FAQ. * [3.4.3] Specify our supported Rust version (>=1.45.0) in our setup.py so users on older versions will get a clear error message. -Paul Kehrer (reaperhulk) From paul.l.kehrer at gmail.com Sat Feb 13 17:55:04 2021 From: paul.l.kehrer at gmail.com (Paul Kehrer) Date: Sat, 13 Feb 2021 16:55:04 -0600 Subject: [Cryptography-dev] PyCA cryptography 3.4.5 released Message-ID: PyCA cryptography 3.4.5 has been released to PyPI. cryptography includes both high level recipes and low level interfaces to common cryptographic algorithms such as symmetric ciphers, asymmetric algorithms, message digests, X509, key derivation functions, and much more. We support Python 3.6+, and PyPy3. Changelog (https://cryptography.io/en/latest/changelog.html#v3-4-5): * Various improvements to type hints. * Lower the minimum supported Rust version (MSRV) to >=1.41.0. This change improves compatibility with system-provided Rust on several Linux distributions. * cryptography will be switching to a new versioning scheme with its next feature release. More information is available in our API stability documentation. -Paul Kehrer (reaperhulk) From paul.l.kehrer at gmail.com Tue Feb 16 17:20:50 2021 From: paul.l.kehrer at gmail.com (Paul Kehrer) Date: Tue, 16 Feb 2021 16:20:50 -0600 Subject: [Cryptography-dev] PyCA cryptography 3.4.6 released Message-ID: PyCA cryptography 3.4.6 has been released to PyPI. cryptography includes both high level recipes and low level interfaces to common cryptographic algorithms such as symmetric ciphers, asymmetric algorithms, message digests, X509, key derivation functions, and much more. We support Python 3.6+, and PyPy3. Changelog (https://cryptography.io/en/latest/changelog.html#v3-4-6): * Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1j. -Paul Kehrer (reaperhulk)