Python-RSA 4.7 released!
The final release of
Python-RSA v4.7 can be obtained from
the Python
Package Index, or just installed with
pip install --upgrade rsa.
This release contains improvements by hugovk, tomato42, and myself of course:
- Declare & test support for Python 3.9.
- CVE-2020-25658 - Bleichenbacher-style timing oracle in PKCS#1 v1.5 decryption code (Fixes #165).
- Add padding length check as described by PKCS#1 v1.5 (Fixes #164).
- Reuse of blinding factors to speed up blinding operations (Fixes #162).
More information on the Python-RSA page.
