./security/py-argon2-cffi, Secure Argon2 password hashing algorithm

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]


Branch: CURRENT, Version: 23.1.0nb1, Package name: py311-argon2-cffi-23.1.0nb1, Maintainer: pkgsrc-users

Argon2 won the Password Hashing Competition and argon2_cffi is the simplest
way to use it in Python and PyPy.


Required to run:
[devel/py-setuptools] [devel/py-cffi] [lang/py-six] [security/argon2] [lang/python37]

Required to build:
[pkgtools/cwrappers]

Master sites:

Filesize: 41.795 KB

Version history: (Expand)


CVS history: (Expand)


   2023-10-28 21:57:26 by Thomas Klausner | Files touched by this commit (516) | Package updated
Log message:
python/wheel.mk: simplify a lot, and switch to 'installer' for installation

This follows the recommended bootstrap method (flit_core, build, installer).

However, installer installs different files than pip, so update PLISTs
for all packages using wheel.mk and bump their PKGREVISIONs.
   2023-10-04 22:38:54 by Adam Ciarcinski | Files touched by this commit (3) | Package updated
Log message:
py-argon2-cffi: updated to 23.1.0

23.1.0

Removed

- Python 3.6 is not supported anymore.

Deprecated

- The `InvalidHash` exception is deprecated in favor of `InvalidHashError`.
 No plans for removal currently exist and the names can (but shouldn't) be used \ 
interchangeably.

- `argon2.hash_password()`, `argon2.hash_password_raw()`, and \ 
`argon2.verify_password()` that have been soft-deprecated since 2016 are now \ 
hard-deprecated.
 They now raise `DeprecationWarning`s and will be removed in 2024.

Added

- Official support for Python 3.11 and 3.12.
 No code changes were necessary.

- `argon2.exceptions.InvalidHashError` as a replacement for `InvalidHash`.

- *salt* parameter to `argon2.PasswordHasher.hash()` to allow for custom salts.
 This is only useful for specialized use-cases -- leave it on None unless you \ 
know exactly what you are doing.
   2023-05-05 10:33:05 by Adam Ciarcinski | Files touched by this commit (3) | Package updated
Log message:
py-argon2-cffi: updated to 21.3.0

21.3.0

Fixed

While the last release added type hints, the fact that it's been misssing a \ 
py.typed file made Mypy ignore them.

21.2.0

Removed

Python 3.5 is not supported anymore.

The CFFI bindings have been extracted into a separate project: \ 
argon2-cffi-bindings This makes argon2-cffi a Python-only project und should \ 
make it easier to contribute to and have more frequent releases with high-level \ 
features.

This change is breaking for users who want to use a system-wide installation of \ 
Argon2 instead of our vendored code, because the argument to the --no-binary \ 
argument changed. Please refer to the installation guide.

Added

Thanks to lots of work within argon2-cffi-bindings, there're pre-compiled wheels \ 
for many new platforms. Including:

Apple Silicon via universal2
Linux on amd64 and arm64
musl libc (Alpine Linux!) on i686, amd64, and arm64
PyPy 3.8
We hope to provide wheels for Windows on arm64 soon, but are waiting for GitHub \ 
Actions to support that.

argon2.Parameters.from_parameters() together with the argon2.profiles module \ 
that offers easy access to the RFC-recommended configuration parameters and then \ 
some.

The CLI interface now has a --profile option that takes any name from \ 
argon2.profiles.

Types! argon2-cffi is now fully typed.

Changed

argon2.PasswordHasher now uses the RFC 9106 low-memory profile by default. The \ 
old defaults are available as argon2.profiles.PRE_21_2.

21.1.0

Removed

Microsoft stopped providing the necessary SDKs to ship Python 2.7 wheels and \ 
currenly the downloads amount to 0.09%. Therefore we have decided that Python \ 
2.7 is not supported anymore.
Changed

There are indeed no changes whatsoever to the code of argon2-cffi. The Argon2 \ 
project also hasn't tagged a new release since July 2019. There also don't seem \ 
to be any important pending fixes.

This release is mainly about improving the way binary wheels are built (abi3 on \ 
all platforms).
   2023-03-29 11:34:15 by Thomas Klausner | Files touched by this commit (96)
Log message:
*: use PYTHON_VERSION instead of _PYTHON_VERSION
   2022-01-04 21:55:40 by Thomas Klausner | Files touched by this commit (1595)
Log message:
*: bump PKGREVISION for egg.mk users

They now have a tool dependency on py-setuptools instead of a DEPENDS
   2021-10-26 13:18:07 by Nia Alarie | Files touched by this commit (605)
Log message:
security: Replace RMD160 checksums with BLAKE2s checksums

All checksums have been double-checked against existing RMD160 and
SHA512 hashes

Unfetchable distfiles (fetched conditionally?):
./security/cyrus-sasl/distinfo \ 
cyrus-sasl-dedad73e5e7a75d01a5f3d5a6702ab8ccd2ff40d.patch.v2
   2021-10-07 16:54:50 by Nia Alarie | Files touched by this commit (606)
Log message:
security: Remove SHA1 hashes for distfiles
   2020-10-06 12:51:22 by Thomas Klausner | Files touched by this commit (13)
Log message:
*: use py-hypothesis via versioned_dependencies.mk