[bug#30211] [PATCH 3/4] gnu: Add python-pycryptodome.

[Leo Famulari <leo@famulari.name>]

[-- Attachment #1: Type: text/plain, Size: 2672 bytes --]

On Tue, Jan 23, 2018 at 01:23:31PM +0300, Oleg Pykhalov wrote:
> Leo Famulari <leo@famulari.name> writes:
> > On Mon, Jan 22, 2018 at 11:05:24PM +0300, Oleg Pykhalov wrote:
> >> +    ;; XXX: Skipping GMP tests which requires not packaged 'mpir' library.
> >
> > I don't understand this comment.
> 
> This is a quote from a build log.  See:
> --8<---------------cut here---------------start------------->8---
> starting phase `check'
> running "python setup.py" with command "test" and parameters ()
> running test
> running build
> running build_py
> running build_ext
> Skipping GMP tests (Cannot load library 'mpir')
> Compiling support for Intel AES instructions
> Crypto.Math implementation: {}
> 
> ----------------------------------------------------------------------
> Ran 22598 tests in 75.857s
> 
> OK
> phase `check' succeeded after 84.6 seconds
> --8<---------------cut here---------------end--------------->8---
> 
> Do you have an idea how to make it more clear?

I don't think we have to mention it. Many package test suites
automatically skip some subset of tests based on a variety of factors.

> > If possible, please give a little more information in the description.
> > I'm specifically interested in how this library differs from the Python
> > 'cryptography' library.
> 
> Dunno about 'pycryptodome' Vs Python 'cryptography', but 'pycryptodome'
> is a fork of PyCrypto.

> +    (description "This package provides a cryptographic library for Python.
> +
> +It brings the following enhancements with respect to the last official version
> +of PyCrypto:
> +
> +@itemize
> +@item Authenticated encryption modes (GCM, CCM, EAX, SIV, OCB)
> +@item Accelerated AES on Intel platforms via AES-NI
> +@item First class support for PyPy
> +@item Elliptic curves cryptography (NIST P-256 curve only)
> +@item Better and more compact API (nonce and iv attributes for ciphers,
> +automatic generation of random nonces and IVs, simplified CTR cipher mode, and
> +more)
> +@item SHA-3 (including SHAKE XOFs) and BLAKE2 hash algorithms
> +@item Salsa20 and ChaCha20 stream ciphers
> +@item scrypt and HKDF
> +@item Deterministic (EC)DSA
> +@item Password-protected PKCS#8 key containers
> +@item Shamir’s Secret Sharing scheme
> +@item Random numbers get sourced directly from the OS (and not from a CSPRNG
> +in userspace)
> +@item Cleaner RSA and DSA key generation (largely based on FIPS 186-4)
> +@item Major clean ups and simplification of the code base
> +@end itemize\n")

That's great! It's good to know this is a pycrypto fork. Pycrypto is
abandoned so I'm glad to see new work around it.

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]