{"action":"created","issue":{"url":"https://api.github.com/repos/rcrosbourne/skets/issues/48","repository_url":"https://api.github.com/repos/rcrosbourne/skets","labels_url":"https://api.github.com/repos/rcrosbourne/skets/issues/48/labels{/name}","comments_url":"https://api.github.com/repos/rcrosbourne/skets/issues/48/comments","events_url":"https://api.github.com/repos/rcrosbourne/skets/issues/48/events","html_url":"https://github.com/rcrosbourne/skets/pull/48","id":243494602,"number":48,"title":"Update cryptography to 2.0","user":{"login":"pyup-bot","id":16239342,"avatar_url":"https://avatars0.githubusercontent.com/u/16239342?v=4","gravatar_id":"","url":"https://api.github.com/users/pyup-bot","html_url":"https://github.com/pyup-bot","followers_url":"https://api.github.com/users/pyup-bot/followers","following_url":"https://api.github.com/users/pyup-bot/following{/other_user}","gists_url":"https://api.github.com/users/pyup-bot/gists{/gist_id}","starred_url":"https://api.github.com/users/pyup-bot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pyup-bot/subscriptions","organizations_url":"https://api.github.com/users/pyup-bot/orgs","repos_url":"https://api.github.com/users/pyup-bot/repos","events_url":"https://api.github.com/users/pyup-bot/events{/privacy}","received_events_url":"https://api.github.com/users/pyup-bot/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-07-17T19:04:45Z","updated_at":"2017-07-26T23:54:04Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/rcrosbourne/skets/pulls/48","html_url":"https://github.com/rcrosbourne/skets/pull/48","diff_url":"https://github.com/rcrosbourne/skets/pull/48.diff","patch_url":"https://github.com/rcrosbourne/skets/pull/48.patch"},"body":"\nThere's a new version of [cryptography](https://pypi.python.org/pypi/cryptography) available.\nYou are currently using **1.4**. I have updated it to **2.0**\n\n\n\nThese links might come in handy:  <a href=\"https://pypi.python.org/pypi/cryptography\">PyPI</a> | <a href=\"https://pyup.io/changelogs/cryptography/\">Changelog</a> | <a href=\"https://github.com/pyca/cryptography\">Repo</a> \n\n\n\n### Changelog\n> \n>### 2.0\n\n>~~~~~~~~~~~~~~~~\n\n>* **BACKWARDS INCOMPATIBLE:** Support for Python 3.3 has been dropped.\n>* We now ship ``manylinux1`` wheels linked against OpenSSL 1.1.0f. These wheels\n>  will be automatically used with most Linux distributions if you are running\n>  the latest pip.\n>* Deprecated the use of ``signer`` on\n>  :class:`~cryptography.hazmat.primitives.asymmetric.rsa.RSAPrivateKey`,\n>  :class:`~cryptography.hazmat.primitives.asymmetric.dsa.DSAPrivateKey`,\n>  and\n>  :class:`~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePrivateKey`\n>  in favor of ``sign``.\n>* Deprecated the use of ``verifier`` on\n>  :class:`~cryptography.hazmat.primitives.asymmetric.rsa.RSAPublicKey`,\n>  :class:`~cryptography.hazmat.primitives.asymmetric.dsa.DSAPublicKey`,\n>  and\n>  :class:`~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePublicKey`\n>  in favor of ``verify``.\n>* Added support for parsing\n>  :class:`~cryptography.x509.certificate_transparency.SignedCertificateTimestamp`\n>  objects from X.509 certificate extensions.\n>* Added support for\n>  :class:`~cryptography.hazmat.primitives.ciphers.aead.ChaCha20Poly1305`.\n>* Added support for\n>  :class:`~cryptography.hazmat.primitives.ciphers.aead.AESCCM`.\n>* Added\n>  :class:`~cryptography.hazmat.primitives.ciphers.aead.AESGCM`, a &quot;one shot&quot;\n>  API for AES GCM encryption.\n>* Added support for :doc:`/hazmat/primitives/asymmetric/x25519`.\n>* Added support for serializing and deserializing Diffie-Hellman parameters\n>  with\n>  :func:`~cryptography.hazmat.primitives.serialization.load_pem_parameters`,\n>  :func:`~cryptography.hazmat.primitives.serialization.load_der_parameters`,\n>  and\n>  :meth:`~cryptography.hazmat.primitives.asymmetric.dh.DHParameters.parameter_bytes`\n>  .\n>* The ``extensions`` attribute on :class:`~cryptography.x509.Certificate`,\n>  :class:`~cryptography.x509.CertificateSigningRequest`,\n>  :class:`~cryptography.x509.CertificateRevocationList`, and\n>  :class:`~cryptography.x509.RevokedCertificate` now caches the computed\n>  ``Extensions`` object. There should be no performance change, just a\n>  performance improvement for programs accessing the ``extensions`` attribute\n>  multiple times.\n\n\n\n>### 1.9\n\n>~~~~~~~~~~~~~~~~\n\n>* **BACKWARDS INCOMPATIBLE:** Elliptic Curve signature verification no longer\n>  returns ``True`` on success. This brings it in line with the interface&#39;s\n>  documentation, and our intent. The correct way to use\n>  :meth:`~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePublicKey.verify`\n>  has always been to check whether or not\n>  :class:`~cryptography.exceptions.InvalidSignature` was raised.\n>* **BACKWARDS INCOMPATIBLE:** Dropped support for macOS 10.7 and 10.8.\n>* **BACKWARDS INCOMPATIBLE:** The minimum supported PyPy version is now 5.3.\n>* Python 3.3 support has been deprecated, and will be removed in the next\n>  ``cryptography`` release.\n>* Add support for providing ``tag`` during\n>  :class:`~cryptography.hazmat.primitives.ciphers.modes.GCM` finalization via\n>  :meth:`~cryptography.hazmat.primitives.ciphers.AEADDecryptionContext.finalize_with_tag`.\n>* Fixed an issue preventing ``cryptography`` from compiling against\n>  LibreSSL 2.5.x.\n>* Added\n>  :meth:`~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePublicKey.key_size`\n>  and\n>  :meth:`~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePrivateKey.key_size`\n>  as convenience methods for determining the bit size of a secret scalar for\n>  the curve.\n>* Accessing an unrecognized extension marked critical on an X.509 object will\n>  no longer raise an ``UnsupportedExtension`` exception, instead an\n>  :class:`~cryptography.x509.UnrecognizedExtension` object will be returned.\n>  This behavior was based on a poor reading of the RFC, unknown critical\n>  extensions only need to be rejected on certificate verification.\n>* The CommonCrypto backend has been removed.\n>* MultiBackend has been removed.\n>* ``Whirlpool`` and ``RIPEMD160`` have been deprecated.\n\n\n\n>### 1.8.2\n\n>~~~~~~~~~~~~~~~~~~\n\n>* Fixed a compilation bug affecting OpenSSL 1.1.0f.\n>* Updated Windows and macOS wheels to be compiled against OpenSSL 1.1.0f.\n\n\n\n>### 1.8.1\n\n>~~~~~~~~~~~~~~~~~~\n\n>* Fixed macOS wheels to properly link against 1.1.0 rather than 1.0.2.\n\n\n\n>### 1.8\n\n>~~~~~~~~~~~~~~~~\n\n>* Added support for Python 3.6.\n>* Windows and macOS wheels now link against OpenSSL 1.1.0.\n>* macOS wheels are no longer universal. This change significantly shrinks the\n>  size of the wheels. Users on macOS 32-bit Python (if there are any) should\n>  migrate to 64-bit or build their own packages.\n>* Changed ASN.1 dependency from ``pyasn1`` to ``asn1crypto`` resulting in a\n>  general performance increase when encoding/decoding ASN.1 structures. Also,\n>  the ``pyasn1_modules`` test dependency is no longer required.\n>* Added support for\n>  :meth:`~cryptography.hazmat.primitives.ciphers.CipherContext.update_into` on\n>  :class:`~cryptography.hazmat.primitives.ciphers.CipherContext`.\n>* Added\n>  :meth:`~cryptography.hazmat.primitives.asymmetric.dh.DHPrivateKeyWithSerialization.private_bytes`\n>  to\n>  :class:`~cryptography.hazmat.primitives.asymmetric.dh.DHPrivateKeyWithSerialization`.\n>* Added\n>  :meth:`~cryptography.hazmat.primitives.asymmetric.dh.DHPublicKey.public_bytes`\n>  to\n>  :class:`~cryptography.hazmat.primitives.asymmetric.dh.DHPublicKey`.\n>* :func:`~cryptography.hazmat.primitives.serialization.load_pem_private_key`\n>  and\n>  :func:`~cryptography.hazmat.primitives.serialization.load_der_private_key`\n>  now require that ``password`` must be bytes if provided. Previously this\n>  was documented but not enforced.\n>* Added support for subgroup order in :doc:`/hazmat/primitives/asymmetric/dh`.\n\n\n\n>### 1.7.2\n\n>~~~~~~~~~~~~~~~~~~\n\n>* Updated Windows and macOS wheels to be compiled against OpenSSL 1.0.2k.\n\n\n\n>### 1.7.1\n\n>~~~~~~~~~~~~~~~~~~\n\n>* Fixed a regression in ``int_from_bytes`` where it failed to accept\n>  ``bytearray``.\n\n\n\n>### 1.7\n\n>~~~~~~~~~~~~~~~~\n\n>* Support for OpenSSL 1.0.0 has been removed. Users on older version of OpenSSL\n>  will need to upgrade.\n>* Added support for Diffie-Hellman key exchange using\n>  :meth:`~cryptography.hazmat.primitives.asymmetric.dh.DHPrivateKey.exchange`.\n>* The OS random engine for OpenSSL has been rewritten to improve compatibility\n>  with embedded Python and other edge cases. More information about this change\n>  can be found in the\n>  `pull request &lt;https://github.com/pyca/cryptography/pull/3229&gt;`_.\n\n\n\n>### 1.6\n\n>~~~~~~~~~~~~~~~~\n\n>* Deprecated support for OpenSSL 1.0.0. Support will be removed in\n>  ``cryptography`` 1.7.\n>* Replaced the Python-based OpenSSL locking callbacks with a C version to fix\n>  a potential deadlock that could occur if a garbage collection cycle occurred\n>  while inside the lock.\n>* Added support for :class:`~cryptography.hazmat.primitives.hashes.BLAKE2b` and\n>  :class:`~cryptography.hazmat.primitives.hashes.BLAKE2s` when using OpenSSL\n>  1.1.0.\n>* Added\n>  :attr:`~cryptography.x509.Certificate.signature_algorithm_oid` support to\n>  :class:`~cryptography.x509.Certificate`.\n>* Added\n>  :attr:`~cryptography.x509.CertificateSigningRequest.signature_algorithm_oid`\n>  support to :class:`~cryptography.x509.CertificateSigningRequest`.\n>* Added\n>  :attr:`~cryptography.x509.CertificateRevocationList.signature_algorithm_oid`\n>  support to :class:`~cryptography.x509.CertificateRevocationList`.\n>* Added support for :class:`~cryptography.hazmat.primitives.kdf.scrypt.Scrypt`\n>  when using OpenSSL 1.1.0.\n>* Added a workaround to improve compatibility with Python application bundling\n>  tools like ``PyInstaller`` and ``cx_freeze``.\n>* Added support for generating a\n>  :meth:`~cryptography.x509.random_serial_number`.\n>* Added support for encoding ``IPv4Network`` and ``IPv6Network`` in X.509\n>  certificates for use with :class:`~cryptography.x509.NameConstraints`.\n>* Added :meth:`~cryptography.x509.Name.public_bytes` to\n>  :class:`~cryptography.x509.Name`.\n>* Added :class:`~cryptography.x509.RelativeDistinguishedName`\n>* :class:`~cryptography.x509.DistributionPoint` now accepts\n>  :class:`~cryptography.x509.RelativeDistinguishedName` for\n>  :attr:`~cryptography.x509.DistributionPoint.relative_name`.\n>  Deprecated use of :class:`~cryptography.x509.Name` as\n>  :attr:`~cryptography.x509.DistributionPoint.relative_name`.\n>* :class:`~cryptography.x509.Name` now accepts an iterable of\n>  :class:`~cryptography.x509.RelativeDistinguishedName`.  RDNs can\n>  be accessed via the :attr:`~cryptography.x509.Name.rdns`\n>  attribute.  When constructed with an iterable of\n>  :class:`~cryptography.x509.NameAttribute`, each attribute becomes\n>  a single-valued RDN.\n>* Added\n>  :func:`~cryptography.hazmat.primitives.asymmetric.ec.derive_private_key`.\n>* Added support for signing and verifying RSA, DSA, and ECDSA signatures with\n>  :class:`~cryptography.hazmat.primitives.asymmetric.utils.Prehashed`\n>  digests.\n\n\n\n>### 1.5.3\n\n>~~~~~~~~~~~~~~~~~~\n\n>* **SECURITY ISSUE**: Fixed a bug where ``HKDF`` would return an empty\n>  byte-string if used with a ``length`` less than ``algorithm.digest_size``.\n>  Credit to **Markus Döring** for reporting the issue. *CVE-2016-9243*\n\n\n\n>### 1.5.2\n\n>~~~~~~~~~~~~~~~~~~\n\n>* Updated Windows and OS X wheels to be compiled against OpenSSL 1.0.2j.\n\n\n\n>### 1.5.1\n\n>~~~~~~~~~~~~~~~~~~\n\n>* Updated Windows and OS X wheels to be compiled against OpenSSL 1.0.2i.\n>* Resolved a ``UserWarning`` when used with cffi 1.8.3.\n>* Fixed a memory leak in name creation with X.509.\n>* Added a workaround for old versions of setuptools.\n>* Fixed an issue preventing ``cryptography`` from compiling against\n>  OpenSSL 1.0.2i.\n\n\n\n\n>### 1.5\n\n>~~~~~~~~~~~~~~~~\n\n>* Added\n>  :func:`~cryptography.hazmat.primitives.asymmetric.padding.calculate_max_pss_salt_length`.\n>* Added &quot;one shot&quot;\n>  :meth:`~cryptography.hazmat.primitives.asymmetric.dsa.DSAPrivateKey.sign`\n>  and\n>  :meth:`~cryptography.hazmat.primitives.asymmetric.dsa.DSAPublicKey.verify`\n>  methods to DSA keys.\n>* Added &quot;one shot&quot;\n>  :meth:`~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePrivateKey.sign`\n>  and\n>  :meth:`~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePublicKey.verify`\n>  methods to ECDSA keys.\n>* Switched back to the older callback model on Python 3.5 in order to mitigate\n>  the locking callback problem with OpenSSL &lt;1.1.0.\n>* :class:`~cryptography.x509.CertificateBuilder`,\n>  :class:`~cryptography.x509.CertificateRevocationListBuilder`, and\n>  :class:`~cryptography.x509.RevokedCertificateBuilder` now accept timezone\n>  aware ``datetime`` objects as method arguments\n>* ``cryptography`` now supports OpenSSL 1.1.0 as a compilation target.\n\n\n\n\n\n\n\n\n*Got merge conflicts? Close this PR and delete the branch. I'll create a new PR for you.*\n\nHappy merging! 🤖\n"},"comment":{"url":"https://api.github.com/repos/rcrosbourne/skets/issues/comments/318216709","html_url":"https://github.com/rcrosbourne/skets/pull/48#issuecomment-318216709","issue_url":"https://api.github.com/repos/rcrosbourne/skets/issues/48","id":318216709,"user":{"login":"pyup-bot","id":16239342,"avatar_url":"https://avatars0.githubusercontent.com/u/16239342?v=4","gravatar_id":"","url":"https://api.github.com/users/pyup-bot","html_url":"https://github.com/pyup-bot","followers_url":"https://api.github.com/users/pyup-bot/followers","following_url":"https://api.github.com/users/pyup-bot/following{/other_user}","gists_url":"https://api.github.com/users/pyup-bot/gists{/gist_id}","starred_url":"https://api.github.com/users/pyup-bot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pyup-bot/subscriptions","organizations_url":"https://api.github.com/users/pyup-bot/orgs","repos_url":"https://api.github.com/users/pyup-bot/repos","events_url":"https://api.github.com/users/pyup-bot/events{/privacy}","received_events_url":"https://api.github.com/users/pyup-bot/received_events","type":"User","site_admin":false},"created_at":"2017-07-26T23:54:03Z","updated_at":"2017-07-26T23:54:03Z","body":"Closing this in favor of #49"}}
{"actor":{"display_login":"pyup-bot"}}