[issue47098] sha3: Replace Keccak Code Package with tiny_sha3
Change by Illia Volochii : -- pull_requests: +30216 pull_request: https://github.com/python/cpython/pull/24601 ___ Python tracker <https://bugs.python.org/issue47098> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue47098] sha3: Replace Keccak Code Package with tiny_sha3
Change by Illia Volochii : -- nosy: +illia-v nosy_count: 2.0 -> 3.0 pull_requests: +30215 pull_request: https://github.com/python/cpython/pull/28768 ___ Python tracker <https://bugs.python.org/issue47098> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue47016] Create a test verifying bundled pip and setuptools wheels
Change by Illia Volochii : -- keywords: +patch pull_requests: +29983 stage: -> patch review pull_request: https://github.com/python/cpython/pull/31885 ___ Python tracker <https://bugs.python.org/issue47016> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue47016] Create a test verifying bundled pip and setuptools wheels
Change by Illia Volochii : -- nosy: +pablogsal ___ Python tracker <https://bugs.python.org/issue47016> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue47016] Create a test verifying bundled pip and setuptools wheels
New submission from Illia Volochii : Bundled pip and setuptools wheels have to be verified manually at the moment when they are upgraded. We can automate this by comparing their checksums to ones provided by Warehouse’s JSON API (e.g., https://pypi.org/pypi/pip/json.) Since such a check requires network activity and not to slow down tests, creating a GitHub Actions workflow that runs only when the files are changed is a good option. I suggested this in https://github.com/python/cpython/pull/30178#issuecomment-998765841 originally. -- components: Library (Lib) messages: 415193 nosy: illia-v priority: normal severity: normal status: open title: Create a test verifying bundled pip and setuptools wheels type: enhancement versions: Python 3.10, Python 3.11, Python 3.7, Python 3.8, Python 3.9 ___ Python tracker <https://bugs.python.org/issue47016> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue43215] Document Happy Eyeballs arguments of asyncio.open_connection
Change by Illia Volochii : -- pull_requests: +29967 pull_request: https://github.com/python/cpython/pull/31869 ___ Python tracker <https://bugs.python.org/issue43215> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue43215] Document Happy Eyeballs arguments of asyncio.open_connection
Change by Illia Volochii : -- pull_requests: +29966 pull_request: https://github.com/python/cpython/pull/31868 ___ Python tracker <https://bugs.python.org/issue43215> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue43669] PEP 644: Require OpenSSL 1.1.1 or newer
Change by Illia Volochii : -- nosy: +illia-v nosy_count: 3.0 -> 4.0 pull_requests: +27106 pull_request: https://github.com/python/cpython/pull/28768 ___ Python tracker <https://bugs.python.org/issue43669> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue45343] Update bundled pip to 21.2.4 and setuptools to 58.1.0
Change by Illia Volochii : -- keywords: +patch pull_requests: +27048 stage: -> patch review pull_request: https://github.com/python/cpython/pull/28684 ___ Python tracker <https://bugs.python.org/issue45343> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue45343] Update bundled pip to 21.2.4 and setuptools to 58.1.0
Change by Illia Volochii : -- components: Distutils nosy: dstufft, eric.araujo, illia-v priority: normal severity: normal status: open title: Update bundled pip to 21.2.4 and setuptools to 58.1.0 versions: Python 3.10, Python 3.11, Python 3.9 ___ Python tracker <https://bugs.python.org/issue45343> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue43215] Document Happy Eyeballs arguments of asyncio.open_connection
Change by Illia Volochii : -- versions: +Python 3.11 ___ Python tracker <https://bugs.python.org/issue43215> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue43216] Removal of @asyncio.coroutine in Python 3.11
Change by Illia Volochii : -- keywords: +patch pull_requests: +24958 stage: -> patch review pull_request: https://github.com/python/cpython/pull/26369 ___ Python tracker <https://bugs.python.org/issue43216> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue43641] Update `ssl.PROTOCOL_TLSv1_2` docs since it is not the newest TLS version
Change by Illia Volochii : -- keywords: +patch pull_requests: +23789 stage: -> patch review pull_request: https://github.com/python/cpython/pull/25041 ___ Python tracker <https://bugs.python.org/issue43641> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue43641] Update `ssl.PROTOCOL_TLSv1_2` docs since it is not the newest TLS version
New submission from Illia Volochii : Docs say that TLS 1.2 is the most modern version, and probably the best choice for maximum protection, but TLS 1.3 exists. https://docs.python.org/3.10/library/ssl.html#ssl.PROTOCOL_TLSv1_2 -- assignee: docs@python components: Documentation messages: 389608 nosy: docs@python, illia-v priority: normal severity: normal status: open title: Update `ssl.PROTOCOL_TLSv1_2` docs since it is not the newest TLS version type: enhancement versions: Python 3.10 ___ Python tracker <https://bugs.python.org/issue43641> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue43640] Add warnings to ssl.PROTOCOL_TLSv1 and ssl.PROTOCOL_TLSv1_1 docs
Change by Illia Volochii : -- keywords: +patch pull_requests: +23788 stage: -> patch review pull_request: https://github.com/python/cpython/pull/25040 ___ Python tracker <https://bugs.python.org/issue43640> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue43640] Add warnings to ssl.PROTOCOL_TLSv1 and ssl.PROTOCOL_TLSv1_1 docs
New submission from Illia Volochii : TLS versions 1.0 and 1.1 have recently been deprecated. [1] ssl.PROTOCOL_SSLv2 and ssl.PROTOCOL_SSLv3 have such warnings "SSL version 2 is insecure. Its use is highly discouraged." [2] We have to add such warnings to ssl.PROTOCOL_TLSv1 and ssl.PROTOCOL_TLSv1_1 too. [1] https://datatracker.ietf.org/doc/rfc8996/ [2] https://docs.python.org/3.10/library/ssl.html#ssl.PROTOCOL_SSLv2 -- assignee: docs@python components: Documentation messages: 389606 nosy: docs@python, illia-v priority: normal severity: normal status: open title: Add warnings to ssl.PROTOCOL_TLSv1 and ssl.PROTOCOL_TLSv1_1 docs type: enhancement versions: Python 3.10 ___ Python tracker <https://bugs.python.org/issue43640> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue42981] Error messages raised by _hashlib_scrypt_impl() are slightly misleading
Change by Illia Volochii : -- resolution: -> wont fix stage: patch review -> resolved status: open -> closed ___ Python tracker <https://bugs.python.org/issue42981> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue43279] Update code taken from Keccak Code Package
Change by Illia Volochii : -- keywords: +patch pull_requests: +23379 stage: -> patch review pull_request: https://github.com/python/cpython/pull/24601 ___ Python tracker <https://bugs.python.org/issue43279> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue43279] Update code taken from Keccak Code Package
New submission from Illia Volochii : There were some updates to the Keccak package (https://github.com/XKCP/XKCP) since it was integrated in CPython initially. I will submit a pull request soon -- components: Extension Modules messages: 387422 nosy: christian.heimes, illia-v priority: normal severity: normal status: open title: Update code taken from Keccak Code Package type: enhancement versions: Python 3.10 ___ Python tracker <https://bugs.python.org/issue43279> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue43234] Prohibit passing non-ThreadPoolExecutor executors to loop.set_default_executor following a deprecation
Change by Illia Volochii : -- keywords: +patch pull_requests: +23326 stage: -> patch review pull_request: https://github.com/python/cpython/pull/24540 ___ Python tracker <https://bugs.python.org/issue43234> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue43234] Prohibit passing non-ThreadPoolExecutor executors to loop.set_default_executor following a deprecation
New submission from Illia Volochii : https://github.com/python/cpython/blob/a2f0654b0a5b4c4f726155620002cc1f5f2d206a/Lib/asyncio/base_events.py#L816-L821 Setting non-ThreadPoolExecutor executors was supposed to be prohibited in Python 3.9. -- components: asyncio messages: 387052 nosy: asvetlov, illia-v, yselivanov priority: normal severity: normal status: open title: Prohibit passing non-ThreadPoolExecutor executors to loop.set_default_executor following a deprecation versions: Python 3.10 ___ Python tracker <https://bugs.python.org/issue43234> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue43232] Prohibit previously deprecated operations on asyncio.trsock.TransportSocket
Change by Illia Volochii : -- keywords: +patch pull_requests: +23324 stage: -> patch review pull_request: https://github.com/python/cpython/pull/24538 ___ Python tracker <https://bugs.python.org/issue43232> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue43232] Prohibit previously deprecated operations on asyncio.trsock.TransportSocket
New submission from Illia Volochii : https://github.com/python/cpython/blob/a2f0654b0a5b4c4f726155620002cc1f5f2d206a/Lib/asyncio/trsock.py#L19-L24 Using of the operations was supposed to be prohibited in Python 3.9, but that was missed. -- components: asyncio messages: 387044 nosy: asvetlov, illia-v, yselivanov priority: normal severity: normal status: open title: Prohibit previously deprecated operations on asyncio.trsock.TransportSocket versions: Python 3.10 ___ Python tracker <https://bugs.python.org/issue43232> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue43216] Removal of @asyncio.coroutine in Python 3.10
New submission from Illia Volochii : It looks like @asyncio.coroutine was scheduled to be removed in Python 3.10. Is it still relevant? https://bugs.python.org/issue36921 https://docs.python.org/3.10/library/asyncio-task.html#asyncio.coroutine -- components: asyncio messages: 386927 nosy: asvetlov, illia-v, yselivanov priority: normal severity: normal status: open title: Removal of @asyncio.coroutine in Python 3.10 versions: Python 3.10 ___ Python tracker <https://bugs.python.org/issue43216> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue43215] Document Happy Eyeballs arguments of asyncio.open_connection
Change by Illia Volochii : -- keywords: +patch pull_requests: +23310 stage: -> patch review pull_request: https://github.com/python/cpython/pull/24525 ___ Python tracker <https://bugs.python.org/issue43215> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue43215] Document Happy Eyeballs arguments of asyncio.open_connection
New submission from Illia Volochii : The problem is similar to https://bugs.python.org/issue39128. It is not documented that asyncio.open_connection accepts happy_eyeballs_delay and interleave that are passed to loop.create_connection. https://docs.python.org/3/library/asyncio-stream.html#asyncio.open_connection -- assignee: docs@python components: Documentation, asyncio messages: 386926 nosy: asvetlov, docs@python, illia-v, yselivanov priority: normal severity: normal status: open title: Document Happy Eyeballs arguments of asyncio.open_connection type: enhancement versions: Python 3.10, Python 3.8, Python 3.9 ___ Python tracker <https://bugs.python.org/issue43215> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue42982] Update suggested number of iterations for pbkdf2_hmac()
Illia Volochii added the comment: Clock rate is not the only indicator. Some new instructions supporting SHA were introduced during the last decade. https://software.intel.com/content/www/us/en/develop/articles/intel-sha-extensions.html https://software.intel.com/content/www/us/en/develop/articles/improving-openssl-performance.html https://www.intel.com/content/dam/www/public/us/en/documents/white-papers/sha-256-implementations-paper.pdf -- ___ Python tracker <https://bugs.python.org/issue42982> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue42982] Update suggested number of iterations for pbkdf2_hmac()
Illia Volochii added the comment: > FWIW, OnePass uses 100,000. https://support.1password.com/pbkdf2/ There is a history section on that page. And current 100,000 is ten times more than 1Password used in 2013 when the suggestion was added to the documentation. > Also, I don't think an additional time factor of 2.5x would make substantial > difference in security, but it may make a noticeable difference in user > authentication time. 2.5x difference can be substantial if x is hours, days, or years :) -- ___ Python tracker <https://bugs.python.org/issue42982> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue42996] hashlib documentation references an obsolete RFC 2898
Change by Illia Volochii : -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker <https://bugs.python.org/issue42996> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue42996] hashlib documentation references an obsolete RFC 2898
Change by Illia Volochii : -- keywords: +patch pull_requests: +23110 stage: -> patch review pull_request: https://github.com/python/cpython/pull/24289 ___ Python tracker <https://bugs.python.org/issue42996> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue42996] hashlib documentation references an obsolete RFC 2898
New submission from Illia Volochii : RFC 2898 mentioned in the "See also" section of hashlib documentation was superseded by RFC 8018. https://docs.python.org/3/library/hashlib.html https://www.ietf.org/rfc/rfc8018.txt -- assignee: docs@python components: Documentation messages: 385457 nosy: docs@python, illia-v priority: normal severity: normal status: open title: hashlib documentation references an obsolete RFC 2898 ___ Python tracker <https://bugs.python.org/issue42996> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue42982] Update suggested number of iterations for pbkdf2_hmac()
Illia Volochii added the comment: I didn't find any. I think it is based on some benchmarks like `openssl speed sha`. -- ___ Python tracker <https://bugs.python.org/issue42982> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue42982] Update suggested number of iterations for pbkdf2_hmac()
Change by Illia Volochii : -- keywords: +patch pull_requests: +23099 stage: -> patch review pull_request: https://github.com/python/cpython/pull/24276 ___ Python tracker <https://bugs.python.org/issue42982> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue42982] Update suggested number of iterations for pbkdf2_hmac()
New submission from Illia Volochii : Documentation [1] suggests using at least 100,000 iterations of SHA-256 as of 2013. Currently, it is 2021, and it is common to use much more iterations. For example, Django will use 260,000 by default in the next 3.2 LTS release and 320,000 in 4.0 [2][3]. I suggest suggesting at least 250,000 iterations that is a somewhat round number close to the one used by modern libraries. [1] https://docs.python.org/3/library/hashlib.html#hashlib.pbkdf2_hmac [2] https://github.com/django/django/commit/f2187a227f7a3c80282658e699ae9b04023724e5 [3] https://github.com/django/django/commit/a948d9df394aafded78d72b1daa785a0abfeab48 -- assignee: docs@python components: Documentation messages: 385365 nosy: docs@python, illia-v priority: normal severity: normal status: open title: Update suggested number of iterations for pbkdf2_hmac() ___ Python tracker <https://bugs.python.org/issue42982> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue42981] Error messages raised by _hashlib_scrypt_impl() are slightly misleading
Change by Illia Volochii : -- keywords: +patch pull_requests: +23097 stage: -> patch review pull_request: https://github.com/python/cpython/pull/24274 ___ Python tracker <https://bugs.python.org/issue42981> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
[issue42981] Error messages raised by _hashlib_scrypt_impl() are slightly misleading
New submission from Illia Volochii : Error messages state that maxmem and dklen must be smaller than INT_MAX, but values equal to INT_MAX are allowed too. Also, another error message states that n must be a power of 2, but it does not mention that 1 or 2⁰ is not allowed. -- components: Extension Modules messages: 385360 nosy: illia-v priority: normal severity: normal status: open title: Error messages raised by _hashlib_scrypt_impl() are slightly misleading ___ Python tracker <https://bugs.python.org/issue42981> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
