From khan.m.arshad at gmail.com Thu Feb 2 20:02:11 2023 From: khan.m.arshad at gmail.com (Arshad Khan) Date: Fri, 3 Feb 2023 09:02:11 +0800 Subject: [Cryptography-dev] AES-CTR with 256 bit keys Message-ID: Hello I have a question regarding AES in python cryptography which uses a block size of 128 bits. Currently I am using 256 bit keys with AES in CTR mode. However, internally the python cryptography uses a block size of 128. My understanding is that block size and key size are the same for symmetric encryption. How does a 256 bits key work in this case? Appreciate if someone could provide some explanation about this and clear my confusion. Thanks Arshad -------------- next part -------------- An HTML attachment was scrubbed... URL: From alex.gaynor at gmail.com Thu Feb 2 20:09:34 2023 From: alex.gaynor at gmail.com (Alex Gaynor) Date: Thu, 2 Feb 2023 20:09:34 -0500 Subject: [Cryptography-dev] AES-CTR with 256 bit keys In-Reply-To: References: Message-ID: This is not correct, block size and key size are not the same thing for symmetric encryption algorithms. AES's block size is always 128-bit, it's not something cryptography chooses to use, it's the definition of the algorithm. Alex On Thu, Feb 2, 2023 at 8:02 PM Arshad Khan wrote: > > Hello > > I have a question regarding AES in python cryptography which uses a block size of 128 bits. Currently I am using 256 bit keys with AES in CTR mode. However, internally the python cryptography uses a block size of 128. My understanding is that block size and key size are the same for symmetric encryption. How does a 256 bits key work in this case? Appreciate if someone could provide some explanation about this and clear my confusion. > > Thanks > Arshad > _______________________________________________ > Cryptography-dev mailing list > Cryptography-dev at python.org > https://mail.python.org/mailman/listinfo/cryptography-dev -- All that is necessary for evil to succeed is for good people to do nothing. From khan.m.arshad at gmail.com Thu Feb 2 20:13:25 2023 From: khan.m.arshad at gmail.com (Arshad Khan) Date: Fri, 3 Feb 2023 09:13:25 +0800 Subject: [Cryptography-dev] AES-CTR with 256 bit keys In-Reply-To: References: Message-ID: Thanks Alex for the quick reply. So in my case it can be said that I am using AES-256-CTR cipher? Because I was calling it AES-128-CTR and people were asking me why I am using a smaller key. On Fri, Feb 3, 2023 at 9:09 AM Alex Gaynor wrote: > This is not correct, block size and key size are not the same thing > for symmetric encryption algorithms. > > AES's block size is always 128-bit, it's not something cryptography > chooses to use, it's the definition of the algorithm. > > Alex > > On Thu, Feb 2, 2023 at 8:02 PM Arshad Khan > wrote: > > > > Hello > > > > I have a question regarding AES in python cryptography which uses a > block size of 128 bits. Currently I am using 256 bit keys with AES in CTR > mode. However, internally the python cryptography uses a block size of 128. > My understanding is that block size and key size are the same for symmetric > encryption. How does a 256 bits key work in this case? Appreciate if > someone could provide some explanation about this and clear my confusion. > > > > Thanks > > Arshad > > _______________________________________________ > > Cryptography-dev mailing list > > Cryptography-dev at python.org > > https://mail.python.org/mailman/listinfo/cryptography-dev > > > > -- > All that is necessary for evil to succeed is for good people to do nothing. > _______________________________________________ > Cryptography-dev mailing list > Cryptography-dev at python.org > https://mail.python.org/mailman/listinfo/cryptography-dev > -------------- next part -------------- An HTML attachment was scrubbed... URL: From alex.gaynor at gmail.com Thu Feb 2 20:15:33 2023 From: alex.gaynor at gmail.com (Alex Gaynor) Date: Thu, 2 Feb 2023 20:15:33 -0500 Subject: [Cryptography-dev] AES-CTR with 256 bit keys In-Reply-To: References: Message-ID: In pyca/cryptography, one uses the AES() class and gets AES-128 or AES-256 depending on the key size: https://cryptography.io/en/latest/hazmat/primitives/symmetric-encryption/#cryptography.hazmat.primitives.ciphers.algorithms.AES You can also use the AES128 and AES256 types explicitly if you prefer. Alex On Thu, Feb 2, 2023 at 8:14 PM Arshad Khan wrote: > > Thanks Alex for the quick reply. > > So in my case it can be said that I am using AES-256-CTR cipher? Because I was calling it AES-128-CTR and people were asking me why I am using a smaller key. > > On Fri, Feb 3, 2023 at 9:09 AM Alex Gaynor wrote: >> >> This is not correct, block size and key size are not the same thing >> for symmetric encryption algorithms. >> >> AES's block size is always 128-bit, it's not something cryptography >> chooses to use, it's the definition of the algorithm. >> >> Alex >> >> On Thu, Feb 2, 2023 at 8:02 PM Arshad Khan wrote: >> > >> > Hello >> > >> > I have a question regarding AES in python cryptography which uses a block size of 128 bits. Currently I am using 256 bit keys with AES in CTR mode. However, internally the python cryptography uses a block size of 128. My understanding is that block size and key size are the same for symmetric encryption. How does a 256 bits key work in this case? Appreciate if someone could provide some explanation about this and clear my confusion. >> > >> > Thanks >> > Arshad >> > _______________________________________________ >> > Cryptography-dev mailing list >> > Cryptography-dev at python.org >> > https://mail.python.org/mailman/listinfo/cryptography-dev >> >> >> >> -- >> All that is necessary for evil to succeed is for good people to do nothing. >> _______________________________________________ >> Cryptography-dev mailing list >> Cryptography-dev at python.org >> https://mail.python.org/mailman/listinfo/cryptography-dev > > _______________________________________________ > Cryptography-dev mailing list > Cryptography-dev at python.org > https://mail.python.org/mailman/listinfo/cryptography-dev -- All that is necessary for evil to succeed is for good people to do nothing. From khan.m.arshad at gmail.com Thu Feb 2 20:20:14 2023 From: khan.m.arshad at gmail.com (Arshad Khan) Date: Fri, 3 Feb 2023 09:20:14 +0800 Subject: [Cryptography-dev] AES-CTR with 256 bit keys In-Reply-To: References: Message-ID: Thanks Alex for the reference and clearing my doubts. Seems like I should be using the term AES-256 in my use case. On Fri, Feb 3, 2023 at 9:15 AM Alex Gaynor wrote: > In pyca/cryptography, one uses the AES() class and gets AES-128 or > AES-256 depending on the key size: > > https://cryptography.io/en/latest/hazmat/primitives/symmetric-encryption/#cryptography.hazmat.primitives.ciphers.algorithms.AES > > You can also use the AES128 and AES256 types explicitly if you prefer. > > Alex > > On Thu, Feb 2, 2023 at 8:14 PM Arshad Khan > wrote: > > > > Thanks Alex for the quick reply. > > > > So in my case it can be said that I am using AES-256-CTR cipher? Because > I was calling it AES-128-CTR and people were asking me why I am using a > smaller key. > > > > On Fri, Feb 3, 2023 at 9:09 AM Alex Gaynor > wrote: > >> > >> This is not correct, block size and key size are not the same thing > >> for symmetric encryption algorithms. > >> > >> AES's block size is always 128-bit, it's not something cryptography > >> chooses to use, it's the definition of the algorithm. > >> > >> Alex > >> > >> On Thu, Feb 2, 2023 at 8:02 PM Arshad Khan > wrote: > >> > > >> > Hello > >> > > >> > I have a question regarding AES in python cryptography which uses a > block size of 128 bits. Currently I am using 256 bit keys with AES in CTR > mode. However, internally the python cryptography uses a block size of 128. > My understanding is that block size and key size are the same for symmetric > encryption. How does a 256 bits key work in this case? Appreciate if > someone could provide some explanation about this and clear my confusion. > >> > > >> > Thanks > >> > Arshad > >> > _______________________________________________ > >> > Cryptography-dev mailing list > >> > Cryptography-dev at python.org > >> > https://mail.python.org/mailman/listinfo/cryptography-dev > >> > >> > >> > >> -- > >> All that is necessary for evil to succeed is for good people to do > nothing. > >> _______________________________________________ > >> Cryptography-dev mailing list > >> Cryptography-dev at python.org > >> https://mail.python.org/mailman/listinfo/cryptography-dev > > > > _______________________________________________ > > Cryptography-dev mailing list > > Cryptography-dev at python.org > > https://mail.python.org/mailman/listinfo/cryptography-dev > > > > -- > All that is necessary for evil to succeed is for good people to do nothing. > _______________________________________________ > Cryptography-dev mailing list > Cryptography-dev at python.org > https://mail.python.org/mailman/listinfo/cryptography-dev > -------------- next part -------------- An HTML attachment was scrubbed... URL: From paul.l.kehrer at gmail.com Tue Feb 7 14:48:46 2023 From: paul.l.kehrer at gmail.com (Paul Kehrer) Date: Tue, 7 Feb 2023 13:48:46 -0600 Subject: [Cryptography-dev] PyCA cryptography 39.0.1 released Message-ID: PyCA cryptography 39.0.1 has been released to PyPI. cryptography includes both high level recipes and low level interfaces to common cryptographic algorithms such as symmetric ciphers, asymmetric algorithms, message digests, X509, key derivation functions, and much more. We support Python 3.6+, and PyPy3. Changelog (https://cryptography.io/en/latest/changelog/#v39-0-1) * SECURITY ISSUE - Fixed a bug where Cipher.update_into accepted Python buffer protocol objects, but allowed immutable buffers. CVE-2023-23931 * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.0.8. -Paul Kehrer (reaperhulk) From wvcain at outlook.com Wed Feb 8 10:48:54 2023 From: wvcain at outlook.com (Bill Cain) Date: Wed, 8 Feb 2023 15:48:54 +0000 Subject: [Cryptography-dev] PyCA cryptography 39.0.1 released In-Reply-To: References: Message-ID: Thank you Paul for your continued, I believe over a decade, of service to PKI! ________________________________ From: Cryptography-dev on behalf of Paul Kehrer Sent: Tuesday, February 7, 2023 11:48 AM To: python-announce-list at python.org ; cryptography-dev at python.org Subject: [Cryptography-dev] PyCA cryptography 39.0.1 released PyCA cryptography 39.0.1 has been released to PyPI. cryptography includes both high level recipes and low level interfaces to common cryptographic algorithms such as symmetric ciphers, asymmetric algorithms, message digests, X509, key derivation functions, and much more. We support Python 3.6+, and PyPy3. Changelog (https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcryptography.io%2Fen%2Flatest%2Fchangelog%2F%23v39-0-1&data=05%7C01%7C%7Ce24bb27bc3dd439bc8a708db0944663c%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C638113961595372411%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=w2ejZifoW5Iio2p1eWMJotKgC86smrq6kqCu0mej%2BAE%3D&reserved=0) * SECURITY ISSUE - Fixed a bug where Cipher.update_into accepted Python buffer protocol objects, but allowed immutable buffers. CVE-2023-23931 * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.0.8. -Paul Kehrer (reaperhulk) _______________________________________________ Cryptography-dev mailing list Cryptography-dev at python.org https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmail.python.org%2Fmailman%2Flistinfo%2Fcryptography-dev&data=05%7C01%7C%7Ce24bb27bc3dd439bc8a708db0944663c%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C638113961595372411%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=kBKk0CbF2G6njXmFZADw0MSOfksSuJgLwCXcOVdKrD0%3D&reserved=0 -------------- next part -------------- An HTML attachment was scrubbed... URL: From 9manishgupta9 at gmail.com Fri Feb 17 04:01:03 2023 From: 9manishgupta9 at gmail.com (Manish Gupta) Date: Fri, 17 Feb 2023 14:31:03 +0530 Subject: [Cryptography-dev] Cryptography Wheel Files for Python 3.8 Message-ID: Hello Team, I am looking for wheel files for the Cryptography package. Can you help me which release is this included in . Many thanks in advance for your help. Regards, Manish -------------- next part -------------- An HTML attachment was scrubbed... URL: From alex.gaynor at gmail.com Fri Feb 17 05:46:17 2023 From: alex.gaynor at gmail.com (Alex Gaynor) Date: Fri, 17 Feb 2023 05:46:17 -0500 Subject: [Cryptography-dev] Cryptography Wheel Files for Python 3.8 In-Reply-To: References: Message-ID: We upload wheels for all releases. We use abi3 wheels, so there aren't wheels specifically for Python 3.8: https://cryptography.io/en/latest/faq/#why-are-there-no-wheels-for-my-python3-x-version Alex On Fri, Feb 17, 2023 at 5:44 AM Manish Gupta <9manishgupta9 at gmail.com> wrote: > > Hello Team, > > I am looking for wheel files for the Cryptography package. > Can you help me which release is this included in . > > Many thanks in advance for your help. > > Regards, > Manish > _______________________________________________ > Cryptography-dev mailing list > Cryptography-dev at python.org > https://mail.python.org/mailman/listinfo/cryptography-dev -- All that is necessary for evil to succeed is for good people to do nothing.