Python-RSA 4.7 released!

The final release of Python-RSA v4.7 can be obtained from the Python Package Index, or just installed with pip install --upgrade rsa.

This release contains improvements by hugovk, tomato42, and myself of course:

  • Declare & test support for Python 3.9.
  • CVE-2020-25658 - Bleichenbacher-style timing oracle in PKCS#1 v1.5 decryption code (Fixes #165).
  • Add padding length check as described by PKCS#1 v1.5 (Fixes #164).
  • Reuse of blinding factors to speed up blinding operations (Fixes #162).

More information on the Python-RSA page.

dr. Sybren A. Stüvel
dr. Sybren A. Stüvel
Open Source software developer, photographer, drummer

Related