[Cryptography-dev] Rust in pyca/cryptography

Alex Gaynor alex.gaynor at gmail.com
Wed Jan 13 09:47:37 EST 2021


I'm glad to hear some folks are actually auditing 3rd party sources.

Once you install a rust toolchain, you'll be able to build
pyca/cryptography the same as ever.

To repeat: if there's some action we can be taking to make this
migration smoother, we're happy to consider it. But what we won't do
is simply stop trying to drop C.

Alex

On Wed, Jan 13, 2021 at 9:45 AM Barry Scott <barry.scott at forcepoint.com> wrote:
>
> On Tuesday, 12 January 2021 17:23:10 GMT Alex Gaynor wrote:
> > Running `yum install rust` in a CentOS8 docker container seems to get
> > me rustc 1.45.2, and as our docs say, 1.45.0 will be the initial
> > minimum version
> > (https://cryptography.io/en/latest/installation.html#rust).
> >
> > As ever, our wheels (which are how the vast majority of our users
> > install pyca/cryptography) will not require any compiler or build
> > toolchain on user's machines.
>
> But in the enterprise space its a no-no to use the wheels you build.
>
> I get your source, audit it and build that for use in our environment.
>
> Barry
>
> >
> > Alex
> >
> > On Tue, Jan 12, 2021 at 12:17 PM Barry Scott <barry.scott at forcepoint.com> wrote:
> > >
> > > On Tuesday, 12 January 2021 15:52:01 GMT Michael Ströder via Cryptography-dev wrote:
> > > > On 12/22/20 8:43 PM, Alex Gaynor wrote:
> > > > > As we previewed in August [0] we're planning to incorporate Rust code
> > > > > into pyca/cryptography.
> > > >
> > > > IMHO this will make life of distro packagers more miserable especially
> > > > on non-x86 platforms.
> > >
> > > I was also concerned by that new toolset dependency.
> > >
> > > Will this build on Centos 8 with the version of rust that is packaged there?
> > >
> > > Barry
> > >
> > >
> > >
> > > _______________________________________________
> > > Cryptography-dev mailing list
> > > Cryptography-dev at python.org
> > > https://mail.python.org/mailman/listinfo/cryptography-dev
> >
> >
> >
> >
>
>
>
>


-- 
All that is necessary for evil to succeed is for good people to do nothing.


More information about the Cryptography-dev mailing list