![Michael Weiss](/assets/img/avatar_default.png)
SECURITY ISSUE: Attempted to make RSA PKCS#1v1.5 decryption more constant time, to protect against Bleichenbacher vulnerabilities. Due to limitations imposed by our API, we cannot completely mitigate this vulnerability and a future release will contain a new API which is designed to be resilient to these for contexts where it is required. Credit to Hubert Kario for reporting the issue. CVE-2020-25659
24 lines
725 B
Nix
24 lines
725 B
Nix
{ buildPythonPackage, fetchPypi, lib, cryptography }:
|
|
|
|
buildPythonPackage rec {
|
|
pname = "cryptography_vectors";
|
|
# The test vectors must have the same version as the cryptography package:
|
|
version = cryptography.version;
|
|
|
|
src = fetchPypi {
|
|
inherit pname version;
|
|
sha256 = "1r4qzmm15mrmlblrmxxvqg3jfy3s5bbn9cfhd7fkpixvs3zhcpvq";
|
|
};
|
|
|
|
# No tests included
|
|
doCheck = false;
|
|
|
|
meta = with lib; {
|
|
description = "Test vectors for the cryptography package";
|
|
homepage = "https://cryptography.io/en/latest/development/test-vectors/";
|
|
# Source: https://github.com/pyca/cryptography/tree/master/vectors;
|
|
license = with licenses; [ asl20 bsd3 ];
|
|
maintainers = with maintainers; [ primeos ];
|
|
};
|
|
}
|