python-rsa | Python-RSA is a pure-Python RSA implementation | TLS library

by sybrenstuvel Python Version: version-4.9 License: Non-SPDX

X-Ray Key Features Code Snippets Community Discussions(2)Vulnerabilities Install Support

kandi X-RAY | python-rsa Summary

python-rsa is a Python library typically used in Security, TLS, macOS applications. python-rsa has no bugs and it has low support. However python-rsa has 2 vulnerabilities, it build file is not available and it has a Non-SPDX License. You can install using 'pip install python-rsa' or download it from GitHub, PyPI.

Python-RSA is a pure-Python RSA implementation. It supports encryption and decryption, signing and verifying signatures, and key generation according to PKCS#1 version 1.5. It can be used as a Python library as well as on the commandline. The code was mostly written by Sybren A. Stüvel. Documentation can be found at the Python-RSA homepage. For all changes, check the changelog.

Support

Quality

Security

License

Reuse

Support

python-rsa has a low active ecosystem.

It has 428 star(s) with 99 fork(s). There are 11 watchers for this library.

It had no major release in the last 6 months.

There are 14 open issues and 95 have been closed. On average issues are closed in 78 days. There are 11 open pull requests and 0 closed requests.

It has a neutral sentiment in the developer community.

The latest version of python-rsa is version-4.9

Quality

python-rsa has 0 bugs and 0 code smells.

Security

python-rsa has 2 vulnerability issues reported (0 critical, 1 high, 1 medium, 0 low).

python-rsa code analysis shows 0 unresolved vulnerabilities.

There are 0 security hotspots that need review.

License

python-rsa has a Non-SPDX License.

Non-SPDX licenses can be open source with a non SPDX compliant license, or non open source licenses, and you need to review them closely before use.

Reuse

python-rsa releases are not available. You will need to build from source code and install.

Deployable package is available in PyPI.

python-rsa has no build file. You will be need to create the build yourself to build the component from source.

Installation instructions are not available. Examples and code snippets are available.

It has 2019 lines of code, 206 functions and 30 files.

It has medium code complexity. Code complexity directly impacts maintainability of the code.

Top functions reviewed by kandi - BETA

kandi has reviewed python-rsa and discovered the below as its top functions. This is intended to give you an instant insight into python-rsa implemented functionality, and help decide if they suit your requirements.

Decrypt a crypto value
Return the size of a number
Return the byte size of a number
Divide num to div
Return the number of cores in the pool
Return the number of rounds to use
Test if n is a prime number
Check if a number is prime
Parse the command line options
Load a key from a keyfile
Checks if file format exists
Save the key in PEM format
Load a private key from a PEM file
Load a public key from a PEM file
Return True if a and b are prime
Calculate the keys for two integers
Save the PKCS1 private key
Finds the hash of the given signature
Return the PKCS1 private key
Run speed test
Sign a message
Encrypt a block of data
Calculate the crt of a set of values
Verify the signature
Generate a new RSA key pair
Find n bits in pipe

Get all kandi verified functions for this library.

python-rsa Key Features

No Key Features are available at this moment for python-rsa.

python-rsa Examples and Code Snippets

No Code Snippets are available at this moment for python-rsa.

Community Discussions

Trending Discussions on python-rsa

How to store private and public key into pem file generated by rsa module of python

Send bytes encoded data over JSON

QUESTION

How to store private and public key into pem file generated by rsa module of python

Asked 2021-Jan-06 at 15:47

I am using below module in python for rsa encryption. https://github.com/sybrenstuvel/python-rsa it can be installed by pip as follows pip3 install rsa

I have read of using this module here: https://github.com/sybrenstuvel/python-rsa/blob/master/doc/usage.rst

and I am able to generate public and private key and also able to encrypt the message using public key using the following code

...

ANSWER

Answered 2021-Jan-06 at 15:47

The Github site of Python RSA refers via its homepage to this documentation, according to which the library has dedicated methods to export the keys in PKCS#1 format (methods rsa. PublicKey#save_pkcs1() or rsa.PrivateKey#save_pkcs1()) or to import them (classmethods rsa.PublicKey.load_pkcs1() or rsa.PrivateKey.load_pkcs1()). As encodings PEM (text) or DER (binary) is supported, e.g.:

Source https://stackoverflow.com/questions/65597453

QUESTION

Send bytes encoded data over JSON

Asked 2020-Apr-20 at 00:48

I'm working on an Python RESTful API and I need to send bytes-encoded data (specifically data encrypted using a public RSA key from the package rsa) over the network, via JSON forms.

Here is what it looks like :

...

ANSWER

Answered 2020-Apr-20 at 00:48

Base64 is a relatively efficient method of sending bytes as text (6 bits per character, or 8 bits per byte for normal single byte character encoding). These bytes may have any value, such as found in ciphertext. There are more efficient encodings such as basE91, but they only provide few advantages for the complexity that they bring.

However, I often see ciphertext being "stringified" while there is no need. Files, HTTP, sockets etc. all handle any byte values well. If you want to use it in a GET request then you should use base64url instead of the normal base 64 encoding. Often developers encode strings needlessly so that the values can be easily seen in traces and such, but in that case only the trace printout itself needs to be encoded.

Note that I'd advise you to use OAEP padding rather than PKCS#1 and a key size of at least 3072 bits, especially if you want to encrypt data that is transported rather than encrypted "in place".

Source https://stackoverflow.com/questions/61311961

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

CVE-2020-25658 MEDIUM

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25658

https://github.com/sybrenstuvel/python-rsa/issues/165

CVE-2020-13757 HIGH

Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior (such as by causing excessive memory allocation).

https://github.com/sybrenstuvel/python-rsa/issues/146

https://github.com/sybrenstuvel/python-rsa/issues/146#issuecomment-641845667

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2KILTHBHNSDUCYV22ODLOKTICJJ7JQIQ/

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZYB65VNILRBTXL6EITQTH2PZPK7I23MW/

https://usn.ubuntu.com/4478-1/

Install python-rsa

You can install using 'pip install python-rsa' or download it from GitHub, PyPI.
You can use python-rsa like any standard Python library. You will need to make sure that you have a development environment consisting of a Python distribution including header files, a compiler, pip, and git installed. Make sure that your pip, setuptools, and wheel are up to date. When using pip it is generally recommended to install packages in a virtual environment to avoid changes to the system.

Support

For any new features, suggestions and bugs create an issue on GitHub. If you have any questions check and ask questions on community page Stack Overflow .

Find more information at: