Full changelog: https://cryptography.io/en/latest/changelog/#v47-0-0 This release includes a number of backwards-incompatible changes: - Support for binary elliptic curves (SECT* classes) has been removed. These curves are rarely used and have additional security considerations that make them undesirable. - Loading keys with unsupported algorithms or keys with unsupported explicit curve encodings now raises UnsupportedAlgorithm instead of ValueError. This change affects load_pem_private_key(), load_der_private_key(), load_pem_public_key(), load_der_public_key(), and public_key() when called on certificates with unsupported public key algorithms. - When parsing elliptic curve private keys, we now reject keys that incorrectly encode a private key of the wrong length because such keys are impossible to process in a constant-time manner. We do not believe keys with this problem are in wide use, however we may revert this change based on the feedback we receive.
2 lines
342 B
Text
2 lines
342 B
Text
SHA512 (cryptography-47.0.0-vendor.tar.bz2) = 81329dac4a1dfd3f2db6f2f49c527588e490b250c9ab016963981247446c70768e7453b4496f9f910e722c71ea636478fbab9d1afe633b08bb1f2598c3df0488
|
|
SHA512 (cryptography-47.0.0.tar.gz) = 709540e7f8b0a40c0ca35ccf239d95c294be70a636fb2a569bddadb67e08d26f32fd30ab04db6c50b7a138b04e826cd160a77120bdf4ea4ad02f03c32e3b45d1
|