./security/py-cryptography, Cryptographic recipes and primitives for Python

[ Image CVSweb ] [ Image Homepage ] [ Image RSS ] [ Image Required by ] [ Image Add to tracker ]

Branch: CURRENT, Version: 46.0.5nb2, Package name: py313-cryptography-46.0.5nb2, Maintainer: pkgsrc-users

cryptography is a package designed to expose cryptographic recipes
and primitives to Python developers. Our goal is for it to be your
"cryptographic standard library".

cryptography includes both high level recipes, and low level
interfaces to common cryptographic algorithms such as symmetric
ciphers, message digests and key derivation functions.


Required to run:
[security/openssl] [devel/py-setuptools] [devel/py-cffi] [devel/py-cparser] [lang/py-six] [www/py-idna] [security/py-asn1crypto] [lang/python37]

Required to build:
[pkgtools/cwrappers]

Master sites:

Filesize: 732.484 KB

Version history: (Expand)

CVS history: (Expand)


   2026-02-17 07:32:37 by Adam Ciarcinski | Files touched by this commit (3) 
Log message:
py-cryptography: proper fix for Maturin 1.12
   2026-02-16 22:47:54 by Thomas Klausner | Files touched by this commit (2) 
Log message:
py-cryptography: manually delete newly installed files

Bug report filed upstream.

Bump PKGREVISION.
   2026-02-16 20:08:07 by Thomas Klausner | Files touched by this commit (2) | Package updated
Log message:
py-cryptography: fix PLIST

setuptools? maturin? update?

Bump PKGREVISION.
   2026-02-10 23:45:06 by Thomas Klausner | Files touched by this commit (4) | Package updated
Log message:
py-cryptography*: update to 46.0.5

* An attacker could create a malicious public key that reveals portions of
your private key when using certain uncommon elliptic curves (binary
curves). This version now includes additional security checks to prevent
this attack. This issue only affects binary elliptic curves, which are
rarely used in real-world applications. Credit to **XlabAI Team of Tencent
Xuanwu Lab and Atuin Automated Vulnerability Discovery Engine** for
reporting the issue. **CVE-2026-26007**
* Support for SECT binary elliptic curves is deprecated and will be removed
in the next release.
   2026-01-28 09:39:32 by Adam Ciarcinski | Files touched by this commit (4) | Package updated
Log message:
py-cryptography py-cryptography_vectors: updated to 46.0.4

46.0.4 - 2026-01-27

Dropped support for win_arm64 wheels.
Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.5.
   2025-10-16 11:21:03 by Adam Ciarcinski | Files touched by this commit (5) | Package updated
Log message:
py-cryptography py-cryptography_vectors: updated to 46.0.3

46.0.3 - 2025-10-15

* Fixed compilation when using LibreSSL 4.2.0.
   2025-10-02 15:14:50 by Adam Ciarcinski | Files touched by this commit (4) | Package updated
Log message:
py-cryptography py-cryptography_vectors: updated t 46.0.2

46.0.2
Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.4.
   2025-09-22 19:40:09 by Adam Ciarcinski | Files touched by this commit (7) | Package updated
Log message:
py-cryptography py-cryptography_vectors: updated to 46.0.1

46.0.1 - 2025-09-16

* Fixed an issue where users installing via ``pip`` on Python 3.14 development
  versions would not properly install a dependency.
* Fixed an issue building the free-threaded macOS 3.14 wheels.

46.0.0 - 2025-09-16

* **BACKWARDS INCOMPATIBLE:** Support for Python 3.7 has been removed.
* Support for OpenSSL < 3.0 is deprecated and will be removed in the next
  release.
* Support for ``x86_64`` macOS (including publishing wheels) is deprecated
  and will be removed in two releases. We will switch to publishing an
  ``arm64`` only wheel for macOS.
* Support for 32-bit Windows (including publishing wheels) is deprecated
  and will be removed in two releases. Users should move to a 64-bit
  Python installation.
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.3.
* We now build ``ppc64le`` ``manylinux`` wheels and publish them to PyPI.
* We now build ``win_arm64`` (Windows on Arm) wheels and publish them to PyPI.
* Added support for free-threaded Python 3.14.
* Removed the deprecated ``get_attribute_for_oid`` method on
  :class:`~cryptography.x509.CertificateSigningRequest`. Users should use
  :meth:`~cryptography.x509.Attributes.get_attribute_for_oid` instead.
* Removed the deprecated ``CAST5``, ``SEED``, ``IDEA``, and ``Blowfish``
  classes from the cipher module. These are still available in
  :doc:`/hazmat/decrepit/index`.
* In X.509, when performing a PSS signature with a SHA-3 hash, it is now
  encoded with the official NIST SHA3 OID.