On 11-05-2025 05:19, Cristian Le via devel wrote:


On 11 May 2025 03:24:14 CEST, Neal Gompa <ngomp...@gmail.com> wrote:
Huh, I think we retired this years ago in favor of
python-pycryptodomex:
https://src.fedoraproject.org/rpms/python-pycryptodomex

If you've still got projects using pycryptodome, you should port them
to pycryptodomex.


I believe you are confusing it with python-crypto. There was recent discussion 
about this on python channel. Afaiu pycryptodome and pyrcryptodomex are the 
same package with different namespace. Why pycryptodome was retired is very 
mysterious to me as I read about it. Whether projects *should* be migrating to 
pycryptodomex was also unclear.

It's more confusing than that according to the project's docs [1].

You are right, both packages have the same origin and serve a different namespace. When installing `pycryptodome` the package will install into the Crypto namespace, which conflicts with the old PyCrypto package, which is obsolete and has known vulnerabilities.

That package is still available in Fedora as python-crypto with two dependent packages: python-beaker and winpd.

When installing `pycryptodomex` the package will use the Cryptodome namespace, avoiding the conflict with PyCrypto.

I think the suggestion made on the Python mailing list [2] is the way forward: replace python-crypto with python-pycryptodome.

If `pycryptodome` SHOULD originate from the same source package as `pycryptodomex` is another discussion.

[1] https://www.pycryptodome.org/src/installation#installation
[2] https://lists.fedoraproject.org/archives/list/python-de...@lists.fedoraproject.org/message/UTH7MYUQSSZGN2MPQNGCHLWHDMHDNCQH/

-- Sandro

--
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to