Accepting request 1030935 from home:bnavigator:branches:devel:languages:python

- Update to 0.18.0
  * New features:
    + Support for EdDSA (Ed25519, Ed448) signature creation and
      verification.
    + Support for Ed25519 and Ed448 in PKCS#8 and public key files.
    + Support for point precomputation for EdDSA.
  * New API:
    + CurveEdTw class to represent the Twisted Edwards curve
      parameters.
    + PointEdwards class to represent points on Twisted Edwards
      curve and provide point arithmetic on it.
    + curve_by_name in curves module to get a Curve object by
      providing curve name.
  * Bug fix:
    + Accept private EdDSA keys that include public key in the
      ASN.1 structure.
    + Fix incompatibility with Python 3.3 in handling of
      memoryviews of empty strings.
    + Make the VerifyingKey encoded with explicit parameters use
      the same kind of point encoding for public key and curve
      generator.
    + Better handling of malformed curve parameters (as in
      CVE-2022-0778); make python-ecdsa raise MalformedPointError
      instead of AssertionError.

OBS-URL: https://build.opensuse.org/request/show/1030935
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-ecdsa?expand=0&rev=30

ecdsa-0.17.0.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:b9f500bb439e4153d0330610f5d26baaf18d17b8ced1bc54410d189385ea68aa
-size 158486

python-ecdsa.changes

@@ -1,3 +1,31 @@
+-------------------------------------------------------------------
+Mon Oct 24 17:14:10 UTC 2022 - Ben Greiner <code@bnavigator.de>
+
+- Update to 0.18.0
+  * New features:
+    + Support for EdDSA (Ed25519, Ed448) signature creation and
+      verification.
+    + Support for Ed25519 and Ed448 in PKCS#8 and public key files.
+    + Support for point precomputation for EdDSA.
+  * New API:
+    + CurveEdTw class to represent the Twisted Edwards curve
+      parameters.
+    + PointEdwards class to represent points on Twisted Edwards
+      curve and provide point arithmetic on it.
+    + curve_by_name in curves module to get a Curve object by
+      providing curve name.
+  * Bug fix:
+    + Accept private EdDSA keys that include public key in the
+      ASN.1 structure.
+    + Fix incompatibility with Python 3.3 in handling of
+      memoryviews of empty strings.
+    + Make the VerifyingKey encoded with explicit parameters use
+      the same kind of point encoding for public key and curve
+      generator.
+    + Better handling of malformed curve parameters (as in
+      CVE-2022-0778); make python-ecdsa raise MalformedPointError
+      instead of AssertionError.
+
 -------------------------------------------------------------------
 Tue Aug 31 10:18:41 UTC 2021 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
 

python-ecdsa.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package python-ecdsa
 #
-# Copyright (c) 2021 SUSE LLC
+# Copyright (c) 2022 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -18,11 +18,11 @@
 
 %{?!python_module:%define python_module() python-%{**} python3-%{**}}
 Name:           python-ecdsa
-Version:        0.17.0
+Version:        0.18.0
 Release:        0
 Summary:        ECDSA cryptographic signature library (pure python)
 License:        MIT
-URL:            https://github.com/warner/python-ecdsa
+URL:            https://github.com/tlsfuzzer/python-ecdsa
 Source:         https://files.pythonhosted.org/packages/source/e/ecdsa/ecdsa-%{version}.tar.gz
 BuildRequires:  %{python_module hypothesis}
 BuildRequires:  %{python_module pytest}
@@ -31,7 +31,7 @@ BuildRequires:  %{python_module six}
 BuildRequires:  fdupes
 BuildRequires:  openssl
 BuildRequires:  python-rpm-macros
-Requires:       python-six
+Requires:       python-six >= 1.9.0
 Suggests:       python-gmpy
 Suggests:       python-gmpy2
 BuildArch:      noarch
@@ -59,11 +59,16 @@ find ./ -type f -name "*.py" -perm 644 -exec sed -i -e '1{\@^#! %{_bindir}/env p
 %python_expand %fdupes %{buildroot}%{$python_sitelib}
 
 %check
-%pytest
+# unfortunate hypothesis fuzzing (gh#warner/python-ecdsa#307):
+donttest="(test_ecdsa and test_sig_verify)"
+donttest="$donttest or (test_jacobi and test_add and scale_points)"
+donttest="$donttest or (test_ellipticcurve and test_p192_mult_tests)"
+%pytest -k "not ($donttest)"
 
 %files %{python_files}
 %license LICENSE
 %doc NEWS README.md
-%{python_sitelib}/*
+%{python_sitelib}/ecdsa
+%{python_sitelib}/ecdsa-%{version}*-info
 
 %changelog