Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ed25519 support #4114

Merged
merged 2 commits into from
Feb 27, 2019
Merged

ed25519 support #4114

merged 2 commits into from
Feb 27, 2019

Conversation

reaperhulk
Copy link
Member

@reaperhulk reaperhulk commented Feb 22, 2018

Blocked on OpenSSL 1.1.1b release.

  • Changelog entry
  • Update versionadded
  • Rebase when ed25519 vectors land

Fixes #3509

docs/hazmat/primitives/asymmetric/ed25519.rst Show resolved Hide resolved
docs/hazmat/primitives/asymmetric/ed25519.rst Outdated Show resolved Hide resolved
src/cryptography/hazmat/backends/openssl/backend.py Outdated Show resolved Hide resolved
src/cryptography/hazmat/backends/openssl/backend.py Outdated Show resolved Hide resolved
src/cryptography/hazmat/backends/openssl/backend.py Outdated Show resolved Hide resolved
src/cryptography/hazmat/backends/openssl/ed25519.py Outdated Show resolved Hide resolved
src/cryptography/hazmat/primitives/asymmetric/ed25519.py Outdated Show resolved Hide resolved
tests/hazmat/primitives/test_ed25519.py Outdated Show resolved Hide resolved
Copy link
Member

@alex alex left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please add wycheproof integration to this, and we should have a follow up bug to add support to the ssh key loader.

docs/hazmat/primitives/asymmetric/ed25519.rst Outdated Show resolved Hide resolved
docs/hazmat/primitives/asymmetric/ed25519.rst Show resolved Hide resolved
docs/hazmat/primitives/asymmetric/index.rst Outdated Show resolved Hide resolved
src/_cffi_src/openssl/cryptography.py Outdated Show resolved Hide resolved
src/cryptography/hazmat/backends/openssl/backend.py Outdated Show resolved Hide resolved
src/cryptography/hazmat/backends/openssl/backend.py Outdated Show resolved Hide resolved
src/cryptography/hazmat/backends/openssl/ed25519.py Outdated Show resolved Hide resolved
alex
alex previously requested changes Nov 23, 2018
Copy link
Member

@alex alex left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please also add testvectors/eddsa_test.json from wycheproof to this.

docs/hazmat/primitives/asymmetric/ed25519.rst Outdated Show resolved Hide resolved
src/cryptography/hazmat/backends/openssl/ed25519.py Outdated Show resolved Hide resolved
src/cryptography/hazmat/backends/openssl/ed25519.py Outdated Show resolved Hide resolved
src/cryptography/hazmat/primitives/asymmetric/ed25519.py Outdated Show resolved Hide resolved
@alex
Copy link
Member

alex commented Nov 23, 2018

also merge conflicts

@reaperhulk
Copy link
Member Author

Tests will fail due to an OpenSSL wycheproof issue (openssl/openssl#7693). We'll have to decide what to do about that since presumably we're likely to release before OpenSSL patches this.

@melwitt
Copy link

melwitt commented Jan 4, 2019

Hi, just wanted to leave a note to say thanks for working on this and we're following the progress here so we can enable people to use ed25519 keys in OpenStack Nova (https://bugs.launchpad.net/nova/+bug/1555521). Cheers :)

@reaperhulk
Copy link
Member Author

Thanks for the link @melwitt. After this lands we'll need to update our openssh public key parser to also support ed25519 and we're not currently tracking that as an issue. Would you mind opening a new one and referencing this pull request as a dependency? That way we can make sure it doesn't get lost.

@reaperhulk
Copy link
Member Author

Sigh, CI is going to fail on the sid builder until OpenSSL 1.1.1b lands. I don't think that's a reasonable thing to hold this PR on though, so maybe temporarily disable that builder in jenkins? idk

@alex alex merged commit cd05e2a into pyca:master Feb 27, 2019
@reaperhulk reaperhulk deleted the ed25519 branch February 27, 2019 04:34
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Aug 1, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Development

Successfully merging this pull request may close these issues.

ED25519 Support
4 participants