Commit graph

1898 commits

Author SHA1 Message Date
Alex Gaynor
53e4505861 Switch NIST PDFs from nvlpubs to csrc which is HTTPS (#3929) 2017-09-20 21:57:47 +08:00
Alex Gaynor
20721c9ad9 Update the rest of the NIST urls to their new HTTPS homes (#3928) 2017-09-20 16:39:45 +08:00
Paul Kehrer
ba7041596e add unique identifier test vector (#3925)
* add unique identifier test vector

* wrap a line I didn't even touch...
2017-09-19 20:03:11 -04:00
Alex Gaynor
8cb1d36690 Update PKITS link (#3923) 2017-09-20 06:46:21 +08:00
Alex Gaynor
e3fc93af73 Update NIST CAVP url (#3922) 2017-09-19 13:28:53 +08:00
Paul Kehrer
d8371a8290 add chacha20 test vectors from RFC 7539 (#3918) 2017-09-14 08:38:40 -04:00
Paul Kehrer
c7ecb45684 add a faq note about having a compiler that is too old (#3902)
* add a faq note about having a compiler that is too old

Also add a bit of text explaining what to do on OpenBSD 6.1 and earlier
since that is the most likely place this will occur.

* I always forget it spell checks titles
2017-09-11 22:26:33 -04:00
Paul Kehrer
5d66966032 [WIP] add support for the TLSFeature extension in x509 (#3899)
* add support for the TLSFeature extension in x509

This extension is used for OCSP Must-Staple.

* fix changelog link

* pep8

* refactor to support the sequence properly and add status_request_v2

* update some language

* add test vector, implement eq/ne/hash on TLSFeature

* address review comments
2017-09-10 21:16:34 -04:00
Paul Kehrer
52067bc300 add X509 test vector with a TLS Feature (RFC 7633) extension (#3898) 2017-09-08 19:02:22 -04:00
Paul Kehrer
2b01c55736 oaep label vector (#3895)
* oaep label vector

* add count so we can use the nist vector loader

* add RSA key from the boring vectors as well

https://boringssl.googlesource.com/boringssl/+/ce3773f9fe25c3b54390bc51d72572f251c7d7e6/crypto/evp/evp_tests.txt#8
2017-09-07 07:14:25 -04:00
Paul Kehrer
9a8e29eda7 add initial OCSP request test vector (#3890) 2017-09-07 07:11:47 -04:00
Alex Gaynor
13e9a6f9e9 Document that we care about our infrastructure's security as well (#3874) 2017-08-24 04:46:55 +08:00
David Sanders
c3de566e05 Fix load_rsa_public_numbers documentation (#3871) 2017-08-20 07:17:16 -04:00
David Sanders
c4a23fb077 Fix mistake in RSAPublicKey.verify documentation (#3872) 2017-08-20 07:17:01 -04:00
Paul Kehrer
64dc16b9f9 add test vector with invalid basicconstraints (#3866)
* add test vector with invalid basicconstraints

* sigh
2017-08-15 21:17:01 -04:00
Paul Kehrer
f944c40c86 add changelog and a warning for is_signature_valid on crl (#3861)
* add changelog and a warning

* document this properly
2017-08-12 09:52:55 -04:00
Vincent Pelletier
6c02ee85bc Add is_signature_valid method on CertificateRevocationList (#3849) 2017-08-12 08:05:00 -05:00
Paul Kehrer
3e15ca5ee2 deprecate unicode input for RFC822Name (#3836)
* deprecate unicode input for RFC822Name

* pep8...?
2017-08-01 22:21:19 -04:00
Paul Kehrer
6c29d74cfb deprecate auto-idna on UniformResourceIdentifier (#3832)
* deprecate auto-idna on UniformResourceIdentifier

* fix repr test

* docs

* some updated language
2017-08-01 20:27:06 -04:00
Paul Kehrer
908bbd3a9f note version added and deprecated for bytes_value/value on DNSName (#3833) 2017-08-01 12:39:21 -04:00
Alex Gaynor
cdaf3ff72f Begin the deprecation of auto-idna for x509.DNSName (#3830)
* Begin the deprecation of auto-idna for x509.DNSName

Refs #3357

* fix warning

* py3k fixes

* fix docs

* sigh

* flake8

* these are words

* words

* tests for coverage

* another test

* do idna things

* more idna things
2017-07-30 12:08:51 -05:00
Alex Gaynor
d7e73c257e Updating doing a release to have a correct path (#3790) 2017-07-17 20:59:29 +02:00
Paul Kehrer
ab4a0b39d0 update docs to reflect #3364 (#3786) 2017-07-17 09:01:23 -04:00
Paul Kehrer
a2173583d9 add AESGCM AEAD support (#3785)
* add AESGCM AEAD support

* remove stray newline

* move AESGCM docs above CCM
2017-07-17 07:10:14 -04:00
Paul Kehrer
165743ee63 move tag_length to the AESCCM constructor (#3783)
* move tag_length to the AESCCM constructor

* review feedback
2017-07-16 11:34:42 -04:00
Paul Kehrer
1a2e817f14 AESCCM support (#3700) 2017-07-16 10:46:13 -04:00
Alex Gaynor
d58c6ad13d Fixed #3777 -- document an additional dependency (#3779) 2017-07-14 14:04:18 +02:00
Alex Gaynor
601ed631ad Attempt to use coverage to quantify how many of the CONDITIONAL_NAMES we really use (#3763)
* Attempt to use coverage to quantify how many of the CONDITIONAL_NAMES we really use

* rewrite file to improve coverage

* Write it this way so we can use line coverage

* lost this one :-(

* fix comment and flake8

* update the docs as well

* flake8
2017-07-08 19:35:02 -05:00
Paul Kehrer
bf128a470b add rfc 3526 DH groups (#3767) 2017-07-08 18:36:58 -04:00
Paul Kehrer
3ba1d8a9a5 we forgot to document these DH methods (#3757) 2017-07-06 22:52:28 -04:00
Paul Kehrer
765a3e494e write some words about encrypt/decrypt in fernet (#3756) 2017-07-06 00:00:41 -04:00
Paul Kehrer
f92f2d4d64 update static wheel install docs (#3754)
* update static wheel install docs

* parentheses
2017-07-04 17:00:08 -04:00
Alex Gaynor
a509496e48 Order our supported OpenSSL versions reasonably (#3752) 2017-07-03 17:00:52 -05:00
Alex Gaynor
b7912eea2a Fixes #3745 -- add the any EKU EKU (#3750)
* Fixes #3745 -- add the any EKU EKU

* docs

* whitespace

* versionadded
2017-07-03 09:07:02 -05:00
Paul Kehrer
1eeaabbbbc update linux install docs and release instructions (#3746)
* update linux install docs and release instructions

* rhel/centos is so bad they don't even have python3
2017-07-01 15:34:36 -07:00
Paul Kehrer
a857fe6650 don't use long keys because they can be confusing wrt bits/bytes (#3734)
* don't use long keys because they can be confusing wrt bits/bytes

* make sure we say bytes everywhere

* shorten the scrypt output to 32 bytes as well
2017-06-28 21:03:29 -07:00
Paul Kehrer
491fd7cc5a Funcs macros gone (#3695)
* No more FUNCS/MACROS distinction

* change the docs to not talk about MACROS since they're gone

* remove out of date comment
2017-06-27 14:15:37 -07:00
Paul Kehrer
e3a2fb209b remove python 3.3 from CI (#3729)
* remove python 3.3 from CI

* remove 3.3 everywhere, not just from CI
2017-06-26 21:08:33 -04:00
Paul Kehrer
5bc8c7d801 doc the relationship between PrivateKey and PrivateKeyWithSerialization (#3721)
* doc the relationship between PrivateKey and PrivateKeyWithSerialization

Or at least do it better.

* let's talk about opaque keys
2017-06-24 19:21:20 -04:00
Paul Kehrer
2748e2e4ae Reorganize DHParameters and DHPublicKey *WithSerialization (#3722)
* Reorganize DHParameters and DHPublicKey *WithSerialization

fixes #3720

* fix up the changelog
2017-06-24 19:20:15 -04:00
Paul Kehrer
361a9fc2b7 changelog entry and a few updates to the new DH params docs (#3718) 2017-06-24 16:12:04 -04:00
Aviv Palivoda
6b08aba7f1 Dh parameters serialization (#3504)
* Support DH parameter serizalization - no X9.42

* Support X9.42 serialization - DER not working

* Fix dhp_rfc5114_2.der

Changing the DER parameters serialization after the
fix in openssl commit a292c9f1b835

* DH parameters X9.42 DER serialization fixed

* fix _skip_dhx_unsupported

* document DH parameter_bytes

* PEP8 fixes

* Document load_pem_parameters

* Document load_der_parameters

* document ParameterFormat

* Increase test coverage

* Increase test covrage

* Remove unneeded check

* Fix typo

* Fix error in load_der_parameters

* Add load_pem_parameters and load_der_parameters to interfaces

* CR fixes

* Removed unverified phrase

* Update version to 2.0

* Fix pep8

* Rename ParameterFormat.ASN1 to ParameterFormat.DHParameter

* link pkcs3

* Add new line at end of file to serialization.rst

* Rename DHparameters to PKCS3

* doc CR fix
2017-06-24 09:00:28 -10:00
Paul Kehrer
3dccf6a87d be clearer that 65537 is the right answer (#3714)
* be clearer that 65537 is the right answer

* Different language

* remove trailing whitespace
2017-06-23 07:31:51 -04:00
Paul Kehrer
c38e5508ca add FAQ entry for failed to install (#3710) 2017-06-19 06:54:12 -04:00
Paul Kehrer
e67354e9e9 add NIST CAVP CCM vectors (#3698)
http://csrc.nist.gov/groups/STM/cavp/documents/mac/ccmtestvectors.zip

No TLS :(
2017-06-18 20:35:05 -04:00
Paul Kehrer
9e19428029 fix typo in docs for curve name (#3705)
fixes #3704
2017-06-14 16:28:53 -04:00
Jean-Paul Calderone
61858f36b6 It's a method you must call (#3696)
Fix misworded guidance for how to serialize a private key to bytes.
2017-06-09 11:18:55 -10:00
Paul Kehrer
3e357f7040 X25519 Support (#3686)
* early days

* sort of working

* more things

* remove private_bytes

* public bytes, interface fix

* load public keys

* x25519 support basically done now

* private_bytes is gone

* some reminders

* doctest this too

* remove a thing that doesn't matter

* x25519 supported checks

* libressl has the NID, but a different API, so check for OpenSSL

* pep8

* add missing coverage

* update to use reasons

* expand test a little

* add changelog entry

* review feedback
2017-06-09 08:31:30 -04:00
Paul Kehrer
7e53d91157 ChaCha20Poly1305 support (#3680)
* chacha20poly1305 support

* add chacha20poly1305 backend and some fixes

* refactor

* forgot to remove this

* pep8

* review feedback and a lot of type/value checking

* review feedback

* raise unsupportedalgorithm when creating a ChaCha20Poly1305 object

if it's not supported.

* switch to ciphertext||tag

* typo

* remove a branch we don't need

* review feedback

* decrypts is *also* a word

* use reasons
2017-06-08 00:08:57 -04:00
Paul Kehrer
f12955cd24 scrypt can be doctested now that we're using 1.1.0 (#3688) 2017-06-07 08:20:33 -04:00