From dlitz at dlitz.net  Sat Oct 22 22:16:49 2011
From: dlitz at dlitz.net (Dwayne C. Litzenberger)
Date: Sat, 22 Oct 2011 16:16:49 -0400
Subject: [python-crypto] ANN: PyCrypto 2.4 released
Message-ID: <20111022201648.GA3625@rivest.dlitz.net>

PyCrypto 2.4 has been released!

You can download this release from http://www.pycrypto.org/.  It has the 
following SHA256 sums:

f49d8aea2d7d65db9906c7d3b8b3a07fcae8387cf5cb06a7510383e211902d39 *pycrypto-2.4.tar.gz
94002c7b115d4347f1ad3b92c118ea3cec5961dd35d209decfaf158e8fe43a71 *pycrypto-2.4.tar.gz.asc

The git repository is here: https://github.com/dlitz/pycrypto/
The v2.4 commit id is: fb29a28275e3a693566c936af6b7fae6e4b253e4

Please test it and post your experiences to the PyCrypto mailing list:

   pycrypto at lists.dlitz.net

and/or file bug reports on Launchpad:

   https://bugs.launchpad.net/pycrypto

Here is the changelog:

   * Python 3 support!  (Thorsten E. Behrens, Anders Sundman)
     PyCrypto now supports every version of Python from 2.1 through 3.2.

   * Timing-attack countermeasures in _fastmath: When built against
     libgmp version 5 or later, we use mpz_powm_sec instead of mpz_powm.
     This should prevent the timing attack described by Geremy Condra at
     PyCon 2011:
     http://blip.tv/pycon-us-videos-2009-2010-2011/pycon-2011-through-the-side-channel-timing-and-implementation-attacks-in-python-4897955

   * New hash modules (for Python >= 2.5 only): SHA224, SHA384, and
     SHA512 (Fr?d?ric Bertolus)

   * Configuration using GNU autoconf.  This should help fix a bunch of
     build issues.

   * Support using MPIR as an alternative to GMP.

   * Improve the test command in setup.py, by allowing tests to be
     performed on a single sub-package or module only. (Legrandin)

     You can now do something like this:

       python setup.py test -m Hash.SHA256 --skip-slow-tests

   * Fix double-decref of "counter" when Cipher object initialisation
     fails (Ryan Kelly)

   * Apply patches from Debian's python-crypto 2.3-3 package (Jan
     Dittberner, Sebastian Ramacher):
    - fix-RSA-generate-exception.patch
    - epydoc-exclude-introspect.patch
    - no-usr-local.patch

   * Fix launchpad bug #702835: "Import key code is not compatible with
     GMP library" (Legrandin)

   * More tests, better documentation, various bugfixes.

Thanks to everyone who helped make this release possible!

Cheers,
- Dwayne

-- 
Dwayne C. Litzenberger <dlitz at dlitz.net>
  OpenPGP: 19E1 1FE8 B3CF F273 ED17  4A24 928C EC13 39C2 5CF7
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 222 bytes
Desc: Digital signature
URL: <http://mail.python.org/pipermail/python-crypto/attachments/20111022/c6c119ad/attachment.pgp>

From sbehrens at gmx.li  Sun Oct 23 02:08:11 2011
From: sbehrens at gmx.li (Thorsten Behrens)
Date: Sat, 22 Oct 2011 20:08:11 -0400
Subject: [python-crypto] PyCrypto survey is live
Message-ID: <4EA35AEB.6050505@gmx.li>

Hello,

now that Dwayne has released PyCrypto 2.4, it seems like a good time to
activate the PyCrypto user survey.

If you use any form of crypto in Python, even if that is NOT pycrypto,
I'd like to really encourage you to participate. I'd love to get a sense
of how crypto is used within the Python community.

You can find it athttp://pycrypto-survey.warshaft.com/

It will run until 2011-11-22

No registration required, no captchas, not much security. Gasp. I doubt
this topic is very tasty to bots and trolls.


All the best
Thorsten