[Cryptography-dev] use of poor implementations of algorithms

2016-06-30 Thread Jay Gupta
could you provide concrete examples of your criticism of other Python cryptographic packages, especially about poor algorithm interpretations? ___ Cryptography-dev mailing list Cryptography-dev@python.org https://mail.python.org/mailman/listinfo/cryptogra

Re: [Cryptography-dev] use of poor implementations of algorithms

2016-06-30 Thread Glyph Lefkowitz
> On Jun 29, 2016, at 23:09, Jay Gupta wrote: > > could you provide concrete examples of your criticism of other Python > cryptographic packages, especially about poor algorithm interpretations? What specific criticism are you referring to? Cryptography developers have been critical of other

Re: [Cryptography-dev] use of poor implementations of algorithms

2016-06-30 Thread Alex Gaynor
Probably the one in our readme/homepage. It's been a while since we wrote that. If I recall correctly, PyCrypto's AES implementation is vulnerable to the cache timing side-channel that DJB wrote about many years ago. Alex On Thu, Jun 30, 2016 at 6:10 PM, Glyph Lefkowitz wrote: > > On Jun 29, 2