Commit Graph

1383 Commits

Author SHA1 Message Date
Jeff Forcier e65b627021 Merge branch '1.10' into 1.11 2014-04-01 11:13:28 -07:00
Jeff Forcier 6c4bea5673 Merge branch '1.12' into 1.13 2014-04-01 11:13:28 -07:00
Jeff Forcier 36bd5b2ffb Merge branch '1.13' 2014-04-01 11:13:28 -07:00
Jeff Forcier e1d92087fa Minor site cleanup 2014-04-01 11:13:26 -07:00
Alex Gaynor fded67e712 Use deterministic signatures for ECDSA keys.
This is now considered the preffered approach across the board for ECDSA. This
is because with the traditional, random "k" parameter for ECDSA, any entropy
problems at all, even a single bit, about "k", results in a complete compromise
(see https://en.wikipedia.org/wiki/ECDSA#Security). The deterministic algorithm
doesn't have this downside.
2014-04-01 08:09:34 -07:00
Jeff Forcier 619b24738a Merge branch '1.11' into 1.12 2014-03-31 16:19:55 -07:00
Jeff Forcier 9044860b41 Merge branch '1.10' into 1.11 2014-03-31 16:19:55 -07:00
Jeff Forcier 196b3cc110 Merge branch '1.12' into 1.13 2014-03-31 16:19:55 -07:00
Jeff Forcier 4eb7720fae Merge branch '1.13' 2014-03-31 16:19:55 -07:00
Jeff Forcier c9aa83b63e Link back to WWW in docs sidebar 2014-03-31 16:19:40 -07:00
Alex Gaynor 6c6969c188 The ecdsa module already defaults to using urandom. 2014-03-31 16:09:45 -07:00
Alex Gaynor 6f211115f4 Switch from using PyCrypto's Random to using os.urandom.
There's several reasons for this change:

1) It's faster for reads up to 1024 bytes (nearly 10x faster for 16 byte reads)
2) It receives considerably more security review since it's in the kernel.
3) It's yet another step towards running on PyPy.
4) Using userspace CSPRNGs is considered something of an anti-pattern. See:
   http://sockpuppet.org/blog/2014/02/25/safely-generate-random-numbers/
   http://webcache.googleusercontent.com/search?q=cache:2nTvpCgKZXIJ:www.2uo.de/myths-about-urandom/+&cd=3&hl=en&ct=clnk&gl=us
2014-03-29 19:22:36 -07:00
Alex Gaynor 23528069ec Remove unused function 2014-03-29 17:17:20 -07:00
Alex Gaynor 4d3e0b711a Switched hash functions from PyCrypto to hashlib.
There's a few advantages to this:

1) It's probably fast, OpenSSL, which typically backs hashlib, receives far
   more attention for optimizaitons than PyCrypto.
2) It's the first step to supporting PyPy, where PyCrypto doesn't run.
2014-03-29 16:55:01 -07:00
Jeff Forcier 5a430def22 Forgot to explicitly note python 2.5 drop in changelog for py3 2014-03-27 14:02:03 -07:00
Jeff Forcier bd8f96d33a Merge branch '1.13' 2014-03-22 18:28:15 -07:00
Alex Gaynor 783b2d7683 Fixes #275 -- upload wheels as a part of the release process
Requires teh latest version of invocations from git
2014-03-22 18:28:12 -07:00
Jeff Forcier ac2075a820 Merge branch 'master' of github.com:paramiko/paramiko 2014-03-22 18:26:38 -07:00
Jeff Forcier a495da760f Merge branch '1.13' 2014-03-22 18:26:18 -07:00
Jeff Forcier 87b57dc0cd Expand changelog to include #292 2014-03-22 18:26:16 -07:00
Jeff Forcier 1fa5f8239d Merge branch '1.13' 2014-03-22 18:25:56 -07:00
Jeff Forcier 0857a817ff Revert "Revert "Add a setup.cfg identifying this package as universal""
This reverts commit 341a666351.
2014-03-22 18:25:51 -07:00
Jeff Forcier 8922bbe7d3 Revert "Revert "Changelog fixes #290""
This reverts commit bd81c94825.
2014-03-22 18:25:45 -07:00
Jeff Forcier ea88fad0f1 Merge branch '1.12' into 1.13 2014-03-22 18:24:48 -07:00
Jeff Forcier 4d76a90985 Merge branch '1.11' into 1.12 2014-03-22 18:24:37 -07:00
Jeff Forcier bd81c94825 Revert "Changelog fixes #290"
This reverts commit 270dacaf33.
2014-03-22 18:24:28 -07:00
Jeff Forcier 341a666351 Revert "Add a setup.cfg identifying this package as universal"
This reverts commit 61e32319fc.
2014-03-22 18:24:21 -07:00
Jeff Forcier 57c2ffbbd6 Merge pull request #292 from alex/patch-3
Fixes #275 -- upload wheels as a part of the release process
2014-03-22 18:19:58 -07:00
Alex Gaynor bbb8e8ca4a Fixes #275 -- upload wheels as a part of the release process
Requires teh latest version of invocations from git
2014-03-22 18:17:44 -07:00
Jeff Forcier 7a3eedcee2 Merge branch '1.13' 2014-03-22 18:02:29 -07:00
Jeff Forcier 50598d35a1 Merge branch '1.12' into 1.13 2014-03-22 18:02:29 -07:00
Jeff Forcier d4e98d8d77 Merge branch '1.11' into 1.12 2014-03-22 18:02:28 -07:00
Jeff Forcier 270dacaf33 Changelog fixes #290 2014-03-22 17:59:21 -07:00
Jeff Forcier 3003eaacd8 Merge branch '1.13' 2014-03-22 17:17:45 -07:00
Jeff Forcier b0ef41c05d Merge branch '1.12' 2014-03-21 18:10:03 -07:00
Jeff Forcier ff86ec3492 Merge branch '1.12' into 1.13 2014-03-21 18:09:59 -07:00
Jeff Forcier c5fff0c399 Merge branch '1.11' into 1.12 2014-03-21 18:09:56 -07:00
Alex Gaynor 61e32319fc Add a setup.cfg identifying this package as universal
Meaning that it's build is not system dependent. Which it's not, because it's pure python. Refs #275
2014-03-21 18:09:51 -07:00
Jeff Forcier a8110d8006 Real title too large for sidebar 2014-03-21 17:32:36 -07:00
Jeff Forcier a7a0fca1f4 Merge branch '1.13' 2014-03-21 17:29:44 -07:00
Jeff Forcier cadb44e79c Merge branch '1.12' into 1.13 2014-03-21 17:29:40 -07:00
Jeff Forcier fb6047df36 Merge branch '1.11' into 1.12 2014-03-21 17:29:38 -07:00
Jeff Forcier 13cadb2a1f Merge branch '1.10' into 1.11 2014-03-21 17:29:35 -07:00
Jeff Forcier 4cc9d9f562 Uggh how did this slip in 2014-03-21 17:29:31 -07:00
Jeff Forcier 7feeb272a0 Uggh how did this slip in 2014-03-21 17:28:25 -07:00
Jeff Forcier 6fac5df535 Start an FAQ and answer it with a new install section 2014-03-21 17:28:19 -07:00
Jeff Forcier a183cd3bb1 Merge branch '1.13' 2014-03-21 11:23:13 -07:00
Jeff Forcier 6875bfd795 Merge branch '1.12' into 1.13 2014-03-21 11:23:09 -07:00
Jeff Forcier 3780c0314c Merge branch '1.11' into 1.12 2014-03-21 11:23:06 -07:00
Jeff Forcier 2c0544fc35 Changelog re #284 2014-03-21 11:23:03 -07:00