Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly
Appearance settings
This repository was archived by the owner on Apr 20, 2025. It is now read-only.

Commit ca0ee25

Browse filesBrowse files
myheroyukimyheroyuki
committed
Merge branch 'main' of github.com:sybrenstuvel/python-rsa into multiprime
2 parents 01c32e7 + 18f5faf commit ca0ee25
Copy full SHA for ca0ee25
Expand file treeCollapse file tree

20 files changed

+668
-392
lines changed

‎.github/workflows/tests.yml

Copy file name to clipboard
+36Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
name: Test Python-RSA
2+
3+
on: [push, pull_request, workflow_dispatch]
4+
5+
permissions:
6+
contents: read
7+
8+
jobs:
9+
build:
10+
runs-on: ubuntu-latest
11+
strategy:
12+
matrix:
13+
python-version:
14+
- "3.8"
15+
- "3.9"
16+
- "pypy3.9"
17+
- "3.10"
18+
- "pypy3.10"
19+
- "3.11"
20+
- "3.12"
21+
22+
steps:
23+
- uses: actions/checkout@v3
24+
- name: Set up Python ${{ matrix.python-version }}
25+
uses: actions/setup-python@v4
26+
with:
27+
python-version: ${{ matrix.python-version }}
28+
allow-prereleases: true
29+
- name: Install dependencies
30+
run: |
31+
python -m pip install --upgrade pip
32+
pip install poetry
33+
poetry install
34+
- name: Run tox
35+
# Run tox using the version of Python in `PATH`
36+
run: poetry run tox -e py

‎.gitignore

Copy file name to clipboardExpand all lines: .gitignore
+1Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -19,3 +19,4 @@ __pycache__/
1919

2020
/build/
2121
/doc/_build/
22+
.vscode/settings.json

‎.travis.yml

Copy file name to clipboardExpand all lines: .travis.yml
+3-4Lines changed: 3 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -6,19 +6,18 @@ cache: pip
66
# See: https://github.com/travis-ci/travis-ci/issues/3024
77

88
python:
9-
- "3.6"
10-
- "3.7"
119
- "3.8"
1210
- "3.9"
13-
- "3.10-dev"
11+
- "3.10"
12+
- "3.11"
1413

1514
install:
1615
- pip install -U pip setuptools # https://github.com/pypa/virtualenv/issues/1630
1716
- pip install poetry
1817
- poetry install
1918

2019
script:
21-
- poetry run py.test tests/
20+
- poetry run pytest tests/
2221

2322
after_success:
2423
- poetry run coveralls

‎CHANGELOG.md

Copy file name to clipboardExpand all lines: CHANGELOG.md
+8Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,13 @@
11
# Python-RSA changelog
22

3+
## Version 4.10 - in development
4+
5+
- Drop support for Python 3.6 ([#209](https://github.com/sybrenstuvel/python-rsa/pull/209))
6+
and declare support for 3.11 ([#208](https://github.com/sybrenstuvel/python-rsa/pull/208)).
7+
- Upgrade `pytest` dependency to fix a [security issue](https://github.com/pytest-dev/py/issues/287#issuecomment-1290407715).
8+
- Upgrade `pytest-cov` as well, for good measure.
9+
- Upgrade MyPy ([#211](https://github.com/sybrenstuvel/python-rsa/issues/211)).
10+
311
## Version 4.9 - release 2022-07-20
412

513
- Remove debug logging from `rsa/key.py`

‎README.md

Copy file name to clipboardExpand all lines: README.md
+5-8Lines changed: 5 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,9 @@ licensed under the [Apache License, version 2.0](https://www.apache.org/licenses
2424

2525
## Security
2626

27-
Because of how Python internally stores numbers, it is very hard (if not impossible) to make a pure-Python program secure against timing attacks. This library is no exception, so use it with care. See https://securitypitfalls.wordpress.com/2018/08/03/constant-time-compare-in-python/ for more info.
27+
Because of how Python internally stores numbers, it is not possible to make a pure-Python program secure against timing attacks. This library is no exception, so use it with care. See https://github.com/sybrenstuvel/python-rsa/issues/230 and https://securitypitfalls.wordpress.com/2018/08/03/constant-time-compare-in-python/ for more info.
28+
29+
For instructions on how to best report security issues, see our [Security Policy](https://github.com/sybrenstuvel/python-rsa/blob/main/SECURITY.md).
2830

2931
## Setup of Development Environment
3032

@@ -64,13 +66,8 @@ index-servers =
6466

6567
```
6668
. ./.venv/bin/activate
67-
pip install twine
6869
6970
poetry build
70-
twine check dist/rsa-4.9.tar.gz dist/rsa-4.9-*.whl
71-
twine upload -r rsa dist/rsa-4.9.tar.gz dist/rsa-4.9-*.whl
71+
twine check dist/rsa-4.10-dev0.tar.gz dist/rsa-4.10-dev0-*.whl
72+
twine upload -r rsa dist/rsa-4.10-dev0.tar.gz dist/rsa-4.10-dev0-*.whl
7273
```
73-
74-
The `pip install twine` is necessary as Python-RSA requires Python >= 3.6, and
75-
Twine requires at least version 3.7. This means Poetry refuses to add it as
76-
dependency.

‎SECURITY.md

Copy file name to clipboard
+13Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
# Security Policy
2+
3+
## Supported Versions
4+
5+
Security updates are applied only to the latest release.
6+
7+
## Reporting a Vulnerability
8+
9+
If you have discovered a security vulnerability in this project, please report it privately. **Do not disclose it as a public issue.** This gives us time to work with you to fix the issue before public exposure, reducing the chance that the exploit will be used before a patch is released.
10+
11+
Please disclose it by email to <sybren@stuvel.eu>.
12+
13+
This project is maintained by a team of volunteers on a reasonable-effort basis. As such, vulnerabilities will be handled and/or disclosed in a best effort base.

‎doc/conf.py

Copy file name to clipboardExpand all lines: doc/conf.py
+6-6Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -43,8 +43,8 @@
4343
master_doc = 'index'
4444

4545
# General information about the project.
46-
project = u'Python-RSA'
47-
copyright = u'2011-2019, Sybren A. Stüvel'
46+
project = 'Python-RSA'
47+
copyright = '2011-2019, Sybren A. Stüvel'
4848

4949
# The version info for the project you're documenting, acts as replacement for
5050
# |version| and |release|, also used in various other places throughout the
@@ -180,8 +180,8 @@
180180
# Grouping the document tree into LaTeX files. List of tuples
181181
# (source start file, target name, title, author, documentclass [howto/manual]).
182182
latex_documents = [
183-
('index', 'Python-RSA.tex', u'Python-RSA Documentation',
184-
u'Sybren A. Stüvel', 'manual'),
183+
('index', 'Python-RSA.tex', 'Python-RSA Documentation',
184+
'Sybren A. Stüvel', 'manual'),
185185
]
186186

187187
# The name of an image file (relative to this directory) to place at the top of
@@ -213,8 +213,8 @@
213213
# One entry per manual page. List of tuples
214214
# (source start file, name, description, authors, manual section).
215215
man_pages = [
216-
('index', 'python-rsa', u'Python-RSA Documentation',
217-
[u'Sybren A. Stüvel'], 1)
216+
('index', 'python-rsa', 'Python-RSA Documentation',
217+
['Sybren A. Stüvel'], 1)
218218
]
219219

220220
todo_include_todos = True

‎doc/installation.rst

Copy file name to clipboardExpand all lines: doc/installation.rst
+1-1Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ GitHub. It also hosts the `issue tracker`_.
2525
Dependencies
2626
------------
2727

28-
Python-RSA is compatible with Python versions 3.5 and newer. The last
28+
Python-RSA is compatible with Python versions 3.8 and newer. The last
2929
version with Python 2.7 support was Python-RSA 4.0.
3030

3131
Python-RSA has very few dependencies. As a matter of fact, to use it

0 commit comments

Comments
0 (0)
Morty Proxy This is a proxified and sanitized view of the page, visit original site.