Alex Gaynor

icon indicating a website link https://alexgaynor.net icon indicating an email [email protected]

icon location Washington D.C. icon location I program computers, and build teams that program computers, with a heavy focus on security.

Results 909 comments of Alex Gaynor

Security: input over 72 char: throw error

For your first rust code, it's right on the money :-) I could have sworn I had a PR somewhere that did this, and then we didn't merge it for...

Security: input over 72 char: throw error

Do we need an API for that? Callers can always just `s[:72]` themselves. On Fri, Feb 7, 2025 at 6:20 PM Paul Kehrer ***@***.***> wrote: > > I don't recall...

Security: input over 72 char: throw error

resolved in https://github.com/pyca/bcrypt/pull/1000

Internal openssl error with too small DH key

It's weird that `generate_key` is in the error, since you're obviously just parsing. I assume this is a consequence of the change in how we parse private keys, but I...

Internal openssl error with too small DH key

Ahh, because `DH_generate_key` is the API used to recompute the public key as part of key loading... this is so dumb.

Internal openssl error with too small DH key

Hmm, but the relevant OpenSSL code path also appears to call `DH_generate_key`.

Add support for decrypting S/MIME messages

Thanks for working on this! I haven't had a chance to look in depth, but re: PKCS7Unpadder, it'd be great to have that in a stand-alone PR.

Add support for decrypting S/MIME messages

We're always happy to have smaller PRs split out (though it can sometimes be complicated due to coverage). I'm hoping to have time to review this today, though it might...

Add support for decrypting S/MIME messages

@facutuesca FYI, if you're interested

Add support for decrypting S/MIME messages

Sorry I got behind, will have a look now. Thanks for your patience!