aboutsummaryrefslogtreecommitdiffstats
path: root/src/cryptography/hazmat/backends/openssl/rsa.py
Commit message (Collapse)AuthorAgeFilesLines
* Replace floating point arithmetic with integer arithmetic (#5181)Torin Carey2020-04-041-3/+1
|
* Simplify string formatting (#4757)Alex Gaynor2019-02-201-3/+3
|
* Remove a dead assignment (#4692)Alex Gaynor2019-01-151-1/+0
|
* convert some asserts to function calls (#4636)Paul Kehrer2018-12-101-10/+14
|
* centralize our bytes check (#4622)Paul Kehrer2018-12-021-2/+1
| | | this will make life a bit easier when we support bytearrays
* create & use _evp_md_from_algorithm and _evp_md_non_null_from_algorithm (#4542)Paul Kehrer2018-10-291-13/+14
| | | | | | * create & use _evp_md_from_algorithm and _evp_md_non_null_from_algorithm * remove unused import
* we don't actually care about the errstack here, it's an invalid signature ↵Paul Kehrer2018-07-101-2/+1
| | | | | | | | | | | | | | (#4325) * we don't actually care about the errstack here, it's an invalid signature We previously had no cases where we could error without getting errors on the error stack, but wycheproof contains test cases that can error without adding anything to the stack. Accordingly, we should clear the stack but raise InvalidSignature no matter what (rather than InternalError if we have no error msgs) * add a test
* Convert a pair of asserts to use openssl_assert (#4318)Alex Gaynor2018-07-091-2/+2
| | | We have an existence proof that the latter assertion can be triggered, and I bet the former can too.
* refactor rsa signature/verification logic to remove duplication (#3903)Paul Kehrer2017-09-211-91/+34
|
* RSA OAEP label support for OpenSSL 1.0.2+ (#3897)Paul Kehrer2017-09-081-3/+15
| | | | | | | | | | * RSA OAEP label support for OpenSSL 1.0.2+ * changelog * move around tests, address review feedback, use backend supported method * unsupported padding catches this now
* deprecate signer/verifier on asymmetric keys (#3663)Paul Kehrer2017-06-031-1/+4
| | | | | | * deprecate signer/verifier on asymmetric keys * review feedback, switch deprecated_call to work around a bug
* make signature and verification contexts error better re: prehashed (#3658)Paul Kehrer2017-06-021-1/+3
| | | | | | * make signature and verification contexts error better re: prehashed * code review feedback
* Drop 1.0.0 (#3312)Alex Gaynor2016-12-131-29/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * delete the 1.0.0 support * drop the version check * drop the AES-CTR stuff * Update the example * openssl truncates for us now * delete unused test * unused imports * Remove a bunch of conditional bindings for NPN * no more 1.0.0 builders * libressl fix * update the docs * remove dead branches * oops * this is a word, damnit * spelling * try removing this * this test is not needed * unused import
* support RSA verify with prehashing (#3265)Paul Kehrer2016-11-201-18/+17
| | | | | | | | | | * support RSA verify with prehashing * review feedback * more dedupe * refactor and move to a separate module
* support prehashing in RSA sign (#3238)Paul Kehrer2016-11-201-3/+13
| | | | | | | | * support prehashing in RSA sign * check to make sure digest size matches prehashed data provided * move doctest for prehashed
* refactor RSA signature verification to prep for prehash support (#3261)Paul Kehrer2016-11-201-98/+73
|
* refactor RSA signing to prep for prehash support (#3240)Paul Kehrer2016-11-191-110/+131
|
* fix warnings in cffi 1.8.3 due to wrong buffer types (#3155)Paul Kehrer2016-09-211-1/+1
|
* Fixed #3008 -- expose calculate max pss salt length (#3014)Alex Gaynor2016-06-271-11/+7
| | | | | | | | | | | | | | * Fixed #3008 -- expose calculate max pss salt length * Fixed a few mistakes in the docs * move all the code around * oops * write a unit test * versionadded + changelog
* More cleanup of the EVP module for 0.9.8isms (#3000)Alex Gaynor2016-06-201-2/+2
|
* Simplify control flow now that the 0.9.8 branches are gone (#2989)Alex Gaynor2016-06-181-10/+0
|
* Drop OpenSSL 0.9.8 (#2978)Alex Gaynor2016-06-181-148/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Drop OpenSSL 0.9.8 * Drop this test, it's not relevant any longer * unused import * Remove CRYPTOGRAPHY_ALLOW_OPENSSL_098=1 from our tox * removed unused code for Cryptography_HAS_PKEY_CTX * return unused code for _AESCTRCipherContext * syntax :-( * remove some unused tests and skips * remove unused code for Cryptography_HAS_PBKDF2_HMAC * Revert "return unused code for _AESCTRCipherContext" This reverts commit 7d149729205aa4c9735eb322414b167a75b302df. * Remove unused RSA code * Remove unused test code for conditional bindings * Remove unused dsa code * unused import * Remove unused x509 extension code * Remove unused EC code * Attempt to remove unused DER key loading code * document this * grammar * Added back this paragraph * Update docs
* Add convenience methods to sign and verify w/ RSA (#2945)Colleen Murphy2016-06-041-0/+11
| | | | | | | | | This patch adds wrapper methods to allow the user to sign and verify a single message block without having to go through the multi-step process of creating a signer or verifier, updating it with the one message, and finalizing the result. This will make signing and verifying data more user-friendly when only using small messages. Partial bug #1529
* RSA OAEP SHA2 Support (#2956)Paul Kehrer2016-06-041-13/+28
| | | | | | | | | | | | | | | | | | | | * some rsa oaep sha2 support * various improvements * fix a thing * simplify * update the test * styyyyyle * more styyyyle * fix libre, remove a skip that should never be hit * OAEP version check fixes
* SSH serialization for public keys (#2957)Alex Gaynor2016-06-031-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * SSH serialization for public keys * name errors ahoy! * id, ego, superego * dsa support * EC support * Don't keyerror * Documentation OpenSSH * flake8 * fix * bytes bytes bytes * skip curve unsupported * bytes! * Move a function * reorganize code for coverage
* Random grammar stuff (#2955)Alex Gaynor2016-06-021-1/+1
|
* treat rsa struct as opaque (#2937)Paul Kehrer2016-06-011-12/+52
|
* move keyAlex Gaynor2016-03-051-1/+1
|
* added the correct error handling for the failing testAlex Gaynor2016-03-051-0/+4
|
* treat the RSA struct more opaquely when getting public key valuesPaul Kehrer2016-02-021-3/+1
|
* RSA_R_OAEP_DECODING_ERROR is pretty ubiquitousPaul Kehrer2015-12-271-3/+1
|
* Add support for RSA_R_OAEP_DECODING_ERROR error flag.Christopher Grebs2015-12-271-0/+3
|
* move two asserts much closer to call sitePaul Kehrer2015-09-251-2/+2
|
* convert the rest of the openssl backend to using openssl_assertPaul Kehrer2015-09-251-29/+33
|
* Move signature type checksStanisław Pitucha2015-08-141-3/+3
| | | | Move the point of checking signatures, as suggested by alex in PR 2262.
* Ensure early exeption on non-bytes signatureStanisław Pitucha2015-08-111-0/+3
| | | | | Signature must be in bytes. If the check is skipped, verify() can explode later in cffi call in _verify_pkey_ctx() for example.
* Remove elifs and replace with else + assertPaul Kehrer2015-08-011-2/+3
| | | | This is kind of ugly, but resolves many partial branch coverage issues.
* evp_pkey in openssl asymmetric key constructorsPaul Kehrer2015-06-201-19/+4
|
* remove unneeded deprecated interface registrationPaul Kehrer2015-03-111-3/+1
|
* refactor OpenSSL backend private_key_bytesPaul Kehrer2015-03-111-1/+0
|
* support DER serialization of public keysPaul Kehrer2015-03-101-1/+0
|
* support RSA public key serializationPaul Kehrer2015-03-071-2/+11
|
* update namingPaul Kehrer2015-03-011-1/+1
|
* move private_bytes to a shared method so we can reuse itPaul Kehrer2015-03-011-57/+7
|
* change as_bytes to private_bytes, link more thingsPaul Kehrer2015-02-281-1/+1
|
* address review feedbackPaul Kehrer2015-02-271-5/+5
|
* rename dump to as_bytesPaul Kehrer2015-02-251-1/+1
|
* address review commentsPaul Kehrer2015-02-251-11/+16
|
* Support for traditional OpenSSL and PKCS8 RSA private key serializationPaul Kehrer2015-02-251-2/+59
|
* move asymmetric signature/verification interfacesPaul Kehrer2015-02-161-4/+6
|