Quentin Retourne d6cac753c2 Add support for decrypting S/MIME messages (#11555) ... * first python API proposition first round-trip tests feat: made asn1 structures readable refacto: adapted existing functions accordingly feat/pkcs12: added symmetric_decrypt feat: deserialize 3 possible encodings feat: handling AES-128 feat: raise error when no recipient is found feat/pkcs7: added decanonicalize function feat/asn1: added decode_der_data feat/pkcs7: added smime_enveloped_decode tests are the round-trip (encrypt & decrypt) more tests for 100% python coverage test support pkcs7_encrypt with openssl added algorithm to pkcs7_encrypt signature refacto: decrypt function is clearer flow is more natural refacto: added all rust error tests refacto: added another CA chain for checking fix: const handling Refactor PKCS7Decryptor to pkcs7_decrypt refacto: removed SMIME_ENVELOPED_DECODE from rust code refacto: removed decode_der_data adapted tests accordingly removed the PEM tag check added tests for smime_decnonicalize one more test case Update src/rust/src/pkcs7.rs Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com> took comments into account pem to der is now outside of decrypt fix: removed test_support pkcs7_encrypt added vector for aes_256_cbc encrypted pkcs7 feat: not using test_support decrypt anymore added new vectors for PKCS7 tests feat: using pkcs7 vectors removed previous ones fix: changed wrong function feat: added certificate issuer check test: generating the RSA chain removed the vectors accordingly moved symmetric_decrypt to pkcs7.rs * Update src/cryptography/hazmat/primitives/serialization/pkcs7.py Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com> * fix: removed use of deprecated new_bound for PyBytes * corrected some error types * updated tests accordingly * fix: handling other key encryption algorithms added vectors & tests accordingly * first attempts raising error when no header to remove * one more test to handle text data without header * fix: went back to the previous implementation * refacto: removed the return part * feat: Binary option does not seem useful for decryption removed decanonicalization function adapted tests accordingly * moved logic into rust only left some checks (for now?) * removed pyfunction for the inner decrypt one * added checks in rust now :) changed name for clarity * removed unused function * some checks not needed anymore * removed a parameter * took comments into account * removed unused import removed excess get_type * added first unwrap corrections cleaned tests, added some others added more vectors * no more unwrap for parameter checks * removing headers is Python now added tests accordingly will compare with OpenSSL * final corrections? * first version of documentation some minor refactoring * corrected doctests * better indentation * doctest: added RSA private key * oops --------- Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>		2024-11-26 08:39:53 -05:00
..
backends	Convert PKCS#12 loading to Rust (#10434)	2024-02-19 16:44:28 -08:00
bindings	Move a few more constants fully to Rust (#10428)	2024-02-19 12:33:12 -08:00
primitives	Add support for decrypting S/MIME messages (#11555)	2024-11-26 08:39:53 -05:00
__init__.py
test_oid.py