Pure Python RSA implementation
Python-RSA is a pure-Python RSA implementation. It supports encryption and decryption, signing and verifying signatures, and key generation according to PKCS#1 version 1.5. It can be used as a Python library as well as on the commandline. The code was mostly written by Sybren A. Stüvel.
Documentation can be found at the Python-RSA homepage. For all changes, check the changelog.
Download and install using:
pip install rsa
or download it from the Python Package Index.
The source code is maintained at GitHub and is licensed under the Apache License, version 2.0
Because of how Python internally stores numbers, it is very hard (if not impossible) to make a pure-Python program secure against timing attacks. This library is no exception, so use it with care. See https://securitypitfalls.wordpress.com/2018/08/03/constant-time-compare-in-python/ for more info.
Setup of Development Environment
python3 -m venv .venv . ./.venv/bin/activate pip install poetry poetry install
Publishing a New Release
Since this project is considered critical on the Python Package Index, two-factor authentication is required. For uploading packages to PyPi, an API key is required; username+password will not work.
First, generate an API token at https://pypi.org/manage/account/token/. Then, use this token when publishing instead of your username and password.
As username, use
As password, use the token itself, including the
See https://pypi.org/help/#apitoken for help using API tokens to publish. This
is what I have in
[distutils] index-servers = rsa # Use `twine upload -r rsa` to upload with this token. [rsa] repository = https://upload.pypi.org/legacy/ username = __token__ password = pypi-token
. ./.venv/bin/activate poetry build twine check dist/rsa-4.10-dev0.tar.gz dist/rsa-4.10-dev0-*.whl twine upload -r rsa dist/rsa-4.10-dev0.tar.gz dist/rsa-4.10-dev0-*.whl