steem-python
steem-python copied to clipboard
Use cryptography.io instead of pycrypto
we use pycrypto for aes encryption, but we should use cryptography instead for following reasons:
pycryptois dead project with last commit in 2014- multiple outstanding exploits (CVE-2013-7459)[https://www.cvedetails.com/cve/CVE-2013-7459/],(CVE-2018-6594)[https://www.cvedetails.com/cve/CVE-2018-6594/)
You can check here: https://github.com/holgern/beem/blob/master/beem/aes.py how to implement this.
@holgern @john-g-g pycryptodome is a maintained drop-in replacement for pycrypto
please exchange pycrypto for pycryptodome because as @Mattwmaster58 said it is still maintained and they actually interfere with each other when both are installed (which they are in my case) !
You can just replace pycrypto by pycryptodome. After installing steem-python, you can simply pip uninstall pycrypto and pip install pycryptodome and it just works (tm). But yes, this should be listed as a requirement.