doegox/python-cryptoplus

PyCryptoPlus: a pycrypto extension written 100% in Python

python-cryptoplus's Issues

When using CMAC-AES and signing a Unicode object, an error occurs...

Caveat: I'm not a crypto expert; I know enough to be dangerous.

I'm attempting to use CryptoPlus.Cipher.AES to generate a CMAC-AES signature for an OAuth 1.0A Provider implementation. The message is a Unicode object containing a URL-encoded value; the key is a Unicode in hexadecimal format; the resulting cipher is to be base-64 encoded.

    from CryptoPlus.Cipher import AES

    def sign_cmac_aes(base_string, consumer_secret):
        key, message = consumer_secret.decode('hex'), base_string.decode('utf-8')

        return AES.new(key, AES.MODE_CMAC).encrypt(message).encode('base64')

The resulting signatures don't match the expected value. Considering the problems this Provider has in general, I'm not overly surprised, but I wanted to get another pair of eyes, perhaps with more experience with the CMAC-AES method being employed. Any thoughts?

Attempted relative import in non-package [CryptoPlus/IDEA]

Hi everyone,

I installed the library python-cryptoplus (downloaded here https://github.com/doegox/python-cryptoplus) and did python "setup.py install", but i have an error when i want to run IDEA.py.

"C:\Users...\CryptoPlus\Cipher\blockcipher.py, line 23, in from ..Util import util"

ValueError: Attempted relative import in non-package

XTS upper bound assertion is wrong

On line 454 of blockcipher.py, the assertion:

assert len(data) < 128*pow(2,20)

should be

assert len(data) < 16*pow(2,20)

The NIST recommendation reads:

The length of the data unit for any instance of an implementation of XTS-AES shall not exceed
2^20 AES blocks

An AES block is 16 bytes, or 128 bits, and the data in the code at this point is bytes, not bits, so the number 16 should be used, not 128. Or even better, a constant AES_BLK_BYTES should be created with the value of 16, and all the 16's in this section could be replaced with that constant.

Format for submission to PyPI

Per the documentation at http://packaging.python.org/en/latest/ and http://pythonhosted.org/setuptools/setuptools.html

ImportError: No module named 'Crypto.Hash._MD2'

When importing CryptoPlus.Hash, I get this ImportError: ImportError: No module named 'Crypto.Hash._MD2'. My pycrypto version is 2.6.1 (more specifically: 2.6.1-4ubuntu0.2 in Ubuntu 14.04).