Can anyone suggest a good crypto package?

[Fett]

I need a crypto package that works on windows with python 2.5. Can
anyone suggest one for me?

I have been searching for a couple days for a good cryptography
package to use for public/private key encryption, at this point I
would settle for symmetric even.

Every encryption package I have found for python was either operating
system specific (read *nix only):
http://www.freenet.org.nz/ezPyCrypto/
http://www.keyczar.org/

There was one exception, this version was specifically built to run on
any platform (yay), but the compiler for windows complained that I
wasn't using python2.2 (though the package was said to only need 2.2
or newer).

Is there any crypto package that is actually written in python? I
seriously don't care how slow it is.

[Mike Driscoll]

On Sep 4, 1:39*pm, Fett <FettMan...@gma il.comwrote:

I need a crypto package that works on windows with python 2.5. Can
anyone suggest one for me?

I have been searching for a couple days for a good cryptography
package to use for public/private key encryption, at this point I
would settle for symmetric even.

Every encryption package I have found for python was either operating
system specific (read *nix only):http://www.freenet.org.nz/ezPyCrypto...w.keyczar.org/

There was one exception, this version was specifically built to run on
any platform (yay), but the compiler for windows complained that I
wasn't using python2.2 (though the package was said to only need 2.2
or newer).

Is there any crypto package that is actually written in python? I
seriously don't care how slow it is.

How about M2Crypto: http://chandlerproject.org/Projects/...ypto#Downloads

Mike

[Fett]

On Sep 4, 2:23*pm, Mike Driscoll <kyoso...@gmail .comwrote:

On Sep 4, 1:39*pm, Fett <FettMan...@gma il.comwrote:

I need a crypto package that works on windows with python 2.5. Can
anyone suggest one for me?

I have been searching for a couple days for a good cryptography
package to use for public/private key encryption, at this point I
would settle for symmetric even.

Every encryption package I have found for python was either operating
system specific (read *nix only):http://www.freenet.org.nz/ezPyCrypto...w.keyczar.org/

There was one exception, this version was specifically built to run on
any platform (yay), but the compiler for windows complained that I
wasn't using python2.2 (though the package was said to only need 2.2
or newer).

Is there any crypto package that is actually written in python? I
seriously don't care how slow it is.

How about M2Crypto:http://chandlerproject.org/Projects/...ypto#Downloads

Mike

Seems that this is intended more for webapps or something, I intend to
use this for a client application. This means that I can't require
outside dependencies, or I risk annoying the clients (if you have
installed many open-source projects with dependencies that aren't
handled by portage/apt-get, you know what I would be doing to them).

I seriously can't believe that there isn't a single python native
crypto package. Why do they all need to have outside dependencies?

[Mike Driscoll]

On Sep 4, 2:50*pm, Fett <FettMan...@gma il.comwrote:

On Sep 4, 2:23*pm, Mike Driscoll <kyoso...@gmail .comwrote:

On Sep 4, 1:39*pm, Fett <FettMan...@gma il.comwrote:

I need a crypto package that works on windows with python 2.5. Can
anyone suggest one for me?

I have been searching for a couple days for a good cryptography
package to use for public/private key encryption, at this point I
would settle for symmetric even.

Every encryption package I have found for python was either operating
system specific (read *nix only):http://www.freenet.org.nz/ezPyCrypto...w.keyczar.org/

There was one exception, this version was specifically built to run on
any platform (yay), but the compiler for windows complained that I
wasn't using python2.2 (though the package was said to only need 2.2
or newer).

Is there any crypto package that is actually written in python? I
seriously don't care how slow it is.

How about M2Crypto:http://chandlerproject.org/Projects/...ypto#Downloads

Mike

Seems that this is intended more for webapps or something, I intend to
use this for a client application. This means that I can't require
outside dependencies, or I risk annoying the clients (if you have
installed many open-source projects with dependencies that aren't
handled by portage/apt-get, you know what I would be doing to them).

I seriously can't believe that there isn't a single python native
crypto package. Why do they all need to have outside dependencies?

If you are distributing your application on Windows (which is what
your original post implied), then you can easily roll up dependencies
with py2exe / Gui2Exe and something like Inno Setup or NSIS. I'm going
to try to compile the crypto package (http://www.amk.ca/python/code/
crypto) into an installer for 2.5, but no promises.

Mike

[Paul Rubin]

Fett <Fe********@gma il.comwrites:

Is there any crypto package that is actually written in python? I
seriously don't care how slow it is.

I wrote a simple symmetric encryption function in python:

http://nightsong.com/phr/crypto/p3.py

I wrote a somewhat fancier package that did public key a while back,
that is unreleased because of insufficient testing and some features
I'd like to have done differently, but I ought to get around to
cleaning it up sometime.

There is also tlslite, which you might be able to extract
some public key functions from: http://trevp.net/tlslite

[Trent Nelson]

On Thu, Sep 04, 2008 at 11:39:42AM -0700, Fett wrote:

I need a crypto package that works on windows with python 2.5. Can
anyone suggest one for me?

You could always rely on the the APIs Windows provides to do this
sort out stuff, either via pywin32 or ctypes.

Trent.

[Fett]

On Sep 4, 3:09*pm, Paul Rubin <http://phr...@NOSPAM.i nvalidwrote:

Fett <FettMan...@gma il.comwrites:

Is there any crypto package that is actually written in python? I
seriously don't care how slow it is.

I wrote a simple symmetric encryption function in python:

*http://nightsong.com/phr/crypto/p3.py

I wrote a somewhat fancier package that did public key a while back,
that is unreleased because of insufficient testing and some features
I'd like to have done differently, but I ought to get around to
cleaning it up sometime.

There is also tlslite, which you might be able to extract
some public key functions from: *http://trevp.net/tlslite

Wow, I have no idea how that works, but I think it will do nicely. The
main goal is simply to ensure that data coming in (from a website), is
valid (ie. posted by me). The site is supposedly secure, and the code
only accepts data of the type I expect, so the only security risk was
someone posting bad data. This simple method should stop anyone from
bothering to do even that.

Kudos for writing the code in a way that I can see how it is used,
even without documentation this is small enough to dissect.

Thank you, I think we have a winner. (BTW, I have no idea how this
whole encrypting gives many strings, decrypting all gives the correct
one works, but it sure seems to work just fine, more fully featured
than I even felt I needed.)

[=?ISO-8859-1?Q?Michael_Str=F6der?=]

Fett wrote:

On Sep 4, 2:23 pm, Mike Driscoll <kyoso...@gmail .comwrote:

>How about M2Crypto:http://chandlerproject.org/Projects/...ypto#Downloads

Seems that this is intended more for webapps or something,

Why do you think so? It's a C wrapper module around the
OpenSSL crypto libs.

Ciao, Michael.

[M.-A. Lemburg]

On 2008-09-04 20:39, Fett wrote:

I need a crypto package that works on windows with python 2.5. Can
anyone suggest one for me?

I have been searching for a couple days for a good cryptography
package to use for public/private key encryption, at this point I
would settle for symmetric even.

I'm not really sure what you're after, but if it's about end-to-end
encryption and authentication, then OpenSSL is the way to go, e.g.
using pyOpenSSL:

http://www.egenix.com/products/python/pyOpenSSL/

Every encryption package I have found for python was either operating
system specific (read *nix only):
http://www.freenet.org.nz/ezPyCrypto/
http://www.keyczar.org/

There was one exception, this version was specifically built to run on
any platform (yay), but the compiler for windows complained that I
wasn't using python2.2 (though the package was said to only need 2.2
or newer).

Is there any crypto package that is actually written in python? I
seriously don't care how slow it is.

--
Marc-Andre Lemburg
eGenix.com

Professional Python Services directly from the Source (#1, Sep 05 2008)

>>Python/Zope Consulting and Support ... http://www.egenix.com/
mxODBC.Zope.D atabase.Adapter ... http://zope.egenix.com/
mxODBC, mxDateTime, mxTextTools ... http://python.egenix.com/

_______________ _______________ _______________ _______________ ____________

:::: Try mxODBC.Zope.DA for Windows,Linux,S olaris,MacOSX for free ! ::::
eGenix.com Software, Skills and Services GmbH Pastor-Loeh-Str.48
D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg
Registered at Amtsgericht Duesseldorf: HRB 46611

[Paul Rubin]

Fett <Fe********@gma il.comwrites:

Wow, I have no idea how that works, but I think it will do nicely. The
main goal is simply to ensure that data coming in (from a website), is
valid (ie. posted by me).

If you just want to authenticate the strings without confidentiality ,
use the built-in HMAC module. But beware of replay attacks.

Thank you, I think we have a winner. (BTW, I have no idea how this
whole encrypting gives many strings, decrypting all gives the correct
one works,

The plaintext gets a random string attached at encryption time, and
the random string gets removed at decryption. Of course there are
many possible random strings, so many possible ciphertexts for each
plaintext. That means the ciphertext is a necessarily somewhat longer
than the plaintext, so you have to be willing to deal with that.

Note there's possibly a lot of other subtle issues you have to be
careful of, like if you're authenticating a series of messages, how do
you detect if one has been repeated or dropped from the middle?
Until you've got all that figured out, you are leaving attacks possible.