- Remove dependence on all
source_stream
APIs except forread()
. #103
- Encryption streams no longer close the
source_stream
when they themselves close. If you are using context managers for all of your stream handling, this change will not affect you. However, if you have been relying on theStreamDecryptor
orStreamEncryptor
to close yoursource_stream
for you, you will now need to close those streams yourself. StreamDecryptor.body_start
andStreamDecryptor.body_end
, deprecated in a prior release, have now been removed.
- Move all remaining
unittest
tests topytest
. #99
- Fix
MasterKeyprovider.decrypt_data_key_from_list
error handling. #150
- Remove debug logging that may contain input data when encrypting non-default unframed messages. #105
- Add support to remove clients from :class:`KMSMasterKeyProvider` client cache if they fail to connect to endpoint. #86
- Add support for SHA384 and SHA512 for use with RSA OAEP wrapping algorithms. #56
- Fix
streaming_client
classes to properly interpret short reads in source streams. #24
- Fix KMSMasterKeyProvider to determine the default region before trying to create the requested master keys. #83
- :class:`StreamEncryptor` and :class:`StreamDecryptor` should always report as readable if they are open. #73
- Allow duck-typing of source streams. #75
- Move the
aws-encryption-sdk-python
repository fromawslabs
toaws
.
- AWS KMS master key/provider user agent extension fixed. #47
- New minimum pytest version 3.3.1 to avoid bugs in 3.3.0 #32
- New minimum attrs version 17.4.0 to allow use of
converter
rather thanconvert
#39 - Algorithm Suites are modeled as collections of sub-suites now #36
- Selecting test suites is more sane now, with pytest markers. #41
- Remove use of attrs functionality deprecated in 17.3.0 #29
- Blacklisted pytest 3.3.0 #32 pytest-dev/pytest#2957
- Addressed issue #13 to properly handle non-seekable source streams.
- Moved source into
src
. - Moved examples into
examples
. - Broke out
internal.crypto
into smaller, feature-oriented, modules.
- Added tox configuration to support automation and development tooling.
- Added pylint, flake8, and doc8 configuration to enforce style rules.
- Updated
internal.crypto.authentication.Verifier
to usePrehashed
. - Addressed docstring issue #7.
- Addressed docstring issue #8.
- Addressed logging issue #10.
- Addressed assorted linting issues to bring source, tests, examples, and docs up to configured linting standards.
- Added cryptographic materials managers as a concept
- Added data key caching
- Moved to deterministic IV generation
- Added changelog
- Fixed attrs usage to provide consistent behavior with 16.3.0 and 17.x
- Fixed performance bug which caused KDF calculations to be performed too frequently
- Removed
line_length
as a configurable parameter ofEncryptingStream
andDecryptingStream
objects to simplify class APIs after it was found in further testing to have no measurable impact on performance - Added deterministic length eliptic curve signature generation
- Added support for calculating ciphertext message length from header
- Migrated README from md to rst
- Fixed
attrs
version to 16.3.0 to avoid breaking changes in attrs 17.1.0
- Initial public release