rebrand the Juniper vendor name to Juniper/HPE in docs and website, keeping the code API unchanged

Author: antoinekh

CHANGELOG.md

@@ -2,6 +2,12 @@
 
 All notable changes to this project are documented here. This covers both the Python package and the website under `web/`. The website carries no version of its own: it deploys continuously to Cloudflare Pages on every push to `master`, so its changes are recorded under the package release they shipped alongside.
 
+## Unreleased
+
+### Changed
+
+- Rebranded the Juniper vendor name to **Juniper/HPE** across the docs and website, following HPE's acquisition of Juniper. The code API (module names, CLI subcommands, URLs, env vars) is unchanged.
+
 ## v0.1.1 - 2026-07-23
 
 ### Fixed

README.md

@@ -5,7 +5,7 @@
 [![Python versions](https://img.shields.io/pypi/pyversions/network-secret)](https://pypi.org/project/network-secret/)
 [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
 
-Encode, decode, and check network device secrets for Juniper JunOS and Nokia SR OS, from the command line or Python. `network-secret` is a unified successor to `juniper8-crypt` and `juniper9-crypt`: it covers all three formats in a single package with a single CLI.
+Encode, decode, and check network device secrets for Juniper/HPE JunOS and Nokia SR OS, from the command line or Python. `network-secret` is a unified successor to `juniper8-crypt` and `juniper9-crypt`: it covers all three formats in a single package with a single CLI.
 
 > **Prefer a browser?** Encode and decode all three formats at **[network-secret.pages.dev](https://network-secret.pages.dev/)**. It runs the same algorithms fully client-side - nothing you type is ever sent to a server.
 
@@ -25,8 +25,8 @@ The two implementations share known-answer vectors, so keeping them in one repo
 
 | Format | CLI subcommand | Python module | Description |
 |--------|---------------|---------------|-------------|
-| `$9$` | `juniper9` | `network_secret.juniper9` | Juniper reversible obfuscation - keyless |
-| `$8$` | `juniper8` | `network_secret.juniper8` | Juniper AES-256-GCM - keyed by master password |
+| `$9$` | `juniper9` | `network_secret.juniper9` | Juniper/HPE reversible obfuscation - keyless |
+| `$8$` | `juniper8` | `network_secret.juniper8` | Juniper/HPE AES-256-GCM - keyed by master password |
 | Nokia custom-hash | `nokia-sros-custom-hash` | `network_secret.nokia_sros_custom_hash` | Nokia SR OS AES-ECB shared-key cipher |
 
 ## Install
@@ -46,12 +46,12 @@ uv add network-secret
 ```python
 from network_secret import juniper8, juniper9, nokia_sros_custom_hash
 
-# Juniper $9$ (keyless)
+# Juniper/HPE $9$ (keyless)
 cipher9 = juniper9.encrypt("BGPsecret1")
 plain9 = juniper9.decrypt(cipher9)
 # 'BGPsecret1'
 
-# Juniper $8$ (master-password keyed)
+# Juniper/HPE $8$ (master-password keyed)
 master = "MyMasterPassword"
 cipher8 = juniper8.encrypt("BGPsecret1", master)
 plain8 = juniper8.decrypt(cipher8, master)
@@ -80,15 +80,15 @@ network-secret --list
 network-secret --version
 ```
 
-### Juniper `$9$` (keyless)
+### Juniper/HPE `$9$` (keyless)
 
 ```bash
 network-secret juniper9 --encrypt 'BGPsecret1'
 network-secret juniper9 --decrypt '$9$abc...'
 network-secret juniper9 --check '$9$abc...' 'BGPsecret1'
 ```
 
-### Juniper `$8$` (master-password keyed)
+### Juniper/HPE `$8$` (master-password keyed)
 
 The master password is resolved in this order: `-m`/`--master` flag, then the `JUNOS_MASTER_PASSWORD` environment variable, then an interactive no-echo prompt.
 

network_secret/__init__.py

@@ -1,8 +1,8 @@
 """network-secret: encode, decode, and check network device secrets.
 
 Supported ciphers (one module each):
-    juniper9                - Juniper $9$ reversible obfuscation (keyless)
-    juniper8                - Juniper $8$ AES-256-GCM (master-password keyed)
+    juniper9                - Juniper/HPE $9$ reversible obfuscation (keyless)
+    juniper8                - Juniper/HPE $8$ AES-256-GCM (master-password keyed)
     nokia_sros_custom_hash  - Nokia SR OS custom-hash AES-ECB (shared-key)
 
     >>> from network_secret import juniper8, juniper9, nokia_sros_custom_hash

network_secret/juniper8.py

@@ -1,12 +1,12 @@
 """
-Encrypt and decrypt Juniper $8$ (type 8) passwords.
+Encrypt and decrypt Juniper/HPE $8$ (type 8) passwords.
 
 Unlike the reversible, keyless $9$ substitution cipher, the $8$ format is
 genuine authenticated encryption keyed by the device master password
 (``set system master-password``). The same master password is required to
 both encrypt and decrypt: without it, $8$ secrets cannot be recovered.
 
-Juniper documents the format, but the documentation is incomplete: it omits
+Juniper/HPE documents the format, but the documentation is incomplete: it omits
 that only the first 12 bytes of the 16-byte iv field are used as the GCM
 nonce, so a by-the-book implementation fails authentication. That missing
 detail was reverse-engineered and verified against a real JUNOS 23.2 device
@@ -79,7 +79,7 @@ def _derive_key(master_password: str, salt: bytes, iterations: int) -> bytes:
 
 
 def encrypt(plaintext: str, master_password: str) -> str:
-    """Encrypt plaintext into a Juniper $8$ value under master_password.
+    """Encrypt plaintext into a Juniper/HPE $8$ value under master_password.
 
     Output is non-deterministic: a fresh random salt and IV are generated on
     every call, so the same plaintext produces a different $8$ string each
@@ -109,13 +109,13 @@ def encrypt(plaintext: str, master_password: str) -> str:
 
 
 def decrypt(ciphertext: str, master_password: str) -> str:
-    """Decrypt a Juniper $8$ value with master_password.
+    """Decrypt a Juniper/HPE $8$ value with master_password.
 
     Raises ValueError on a malformed $8$ string or on authentication failure
     (wrong master password, or a value not produced by this scheme).
     """
     if not ciphertext.startswith(MAGIC):
-        raise ValueError(f"Not a Juniper $8$ string: must start with {MAGIC}")
+        raise ValueError(f"Not a Juniper/HPE $8$ string: must start with {MAGIC}")
 
     # Leading '$' yields an empty first element; '8' is the type tag.
     parts = ciphertext.split("$")

network_secret/juniper9.py

@@ -1,9 +1,9 @@
 """
-Encrypt and decrypt Juniper $9$ reversible passwords.
+Encrypt and decrypt Juniper/HPE $9$ reversible passwords.
 
-The $9$ algorithm is a proprietary Juniper substitution cipher that is
+The $9$ algorithm is a proprietary Juniper/HPE substitution cipher that is
 deterministic and device-independent: the same plaintext can be encrypted
-on any Juniper device and decrypted on any other, with no node-specific
+on any Juniper/HPE device and decrypted on any other, with no node-specific
 secret involved.
 
 This is a Python implementation of the algorithm. It is based on
@@ -35,9 +35,9 @@ def _gap(c1: str, c2: str) -> int:
 
 
 def decrypt(ciphertext: str) -> str:
-    """Decrypt a Juniper $9$ ciphertext back to plaintext."""
+    """Decrypt a Juniper/HPE $9$ ciphertext back to plaintext."""
     if not ciphertext.startswith(MAGIC):
-        raise ValueError(f"Not a Juniper $9$ string: must start with {MAGIC}")
+        raise ValueError(f"Not a Juniper/HPE $9$ string: must start with {MAGIC}")
     chars = ciphertext[len(MAGIC):]
     if not chars:
         raise ValueError("Empty $9$ payload")
@@ -64,7 +64,7 @@ def decrypt(ciphertext: str) -> str:
 
 
 def encrypt(plaintext: str) -> str:
-    """Encrypt plaintext to a Juniper $9$ ciphertext.
+    """Encrypt plaintext to a Juniper/HPE $9$ ciphertext.
 
     Output is non-deterministic: random filler characters mean each call
     returns a different ciphertext for the same plaintext. All of them

network_secret/registry.py

@@ -13,17 +13,17 @@
 REGISTRY: list[Cipher] = [
     Cipher(
         id="juniper9",
-        vendor="Juniper",
-        name="Juniper $9$",
+        vendor="Juniper/HPE",
+        name="Juniper/HPE $9$",
         key_kind=KeyKind.NONE,
         encrypt=juniper9.encrypt,
         decrypt=juniper9.decrypt,
         check=juniper9.check,
     ),
     Cipher(
         id="juniper8",
-        vendor="Juniper",
-        name="Juniper $8$",
+        vendor="Juniper/HPE",
+        name="Juniper/HPE $8$",
         key_kind=KeyKind.MASTER_PASSWORD,
         encrypt=juniper8.encrypt,
         decrypt=juniper8.decrypt,

pyproject.toml

@@ -1,14 +1,14 @@
 [project]
 name = "network-secret"
 version = "0.1.1"
-description = "Encode, decode, and check network device secrets: Juniper $9$, Juniper $8$, and Nokia SR OS custom-hash"
+description = "Encode, decode, and check network device secrets: Juniper/HPE $9$, Juniper/HPE $8$, and Nokia SR OS custom-hash"
 readme = "README.md"
 license = { file = "LICENSE" }
 authors = [
     { name = "Antoine Keranflec'h", email = "antoine.keranflech@gmail.com" },
 ]
 requires-python = ">=3.11"
-keywords = ["juniper", "junos", "nokia", "sros", "password", "crypt", "decrypt", "network", "$9$", "$8$", "custom-hash"]
+keywords = ["juniper", "hpe", "junos", "nokia", "sros", "password", "crypt", "decrypt", "network", "$9$", "$8$", "custom-hash"]
 classifiers = [
     "Development Status :: 4 - Beta",
     "Environment :: Console",

tests/test_registry.py

@@ -13,7 +13,7 @@ def test_registry_ids_and_order():
 
 
 def test_find_returns_cipher_or_none():
-    assert find("juniper8").vendor == "Juniper"
+    assert find("juniper8").vendor == "Juniper/HPE"
     assert find("does-not-exist") is None
 
 

web/README.md

@@ -6,8 +6,8 @@ Formats:
 
 | #  | Format        | Vendor      | Kind                                 | Key             |
 |----|---------------|-------------|--------------------------------------|-----------------|
-| 01 | `$9$`         | Juniper     | reversible obfuscation               | none            |
-| 02 | `$8$`         | Juniper     | AES-256-GCM authenticated encryption | master password |
+| 01 | `$9$`         | Juniper/HPE | reversible obfuscation               | none            |
+| 02 | `$8$`         | Juniper/HPE | AES-256-GCM authenticated encryption | master password |
 | 03 | `custom-hash` | Nokia SR OS | AES-ECB + PKCS#7 (deterministic)     | shared AES key  |
 
 One page per format. Adding a converter is one module (see [Adding a converter](#adding-a-converter)).

web/index.html

@@ -6,9 +6,9 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <meta
       name="description"
-      content="Decode and encode network device secrets entirely in your browser: Juniper type 9 ($9$), Juniper type 8 ($8$), and Nokia SR OS custom-hash. Nothing is sent to a server."
+      content="Decode and encode network device secrets entirely in your browser: Juniper/HPE type 9 ($9$), Juniper/HPE type 8 ($8$), and Nokia SR OS custom-hash. Nothing is sent to a server."
     />
-    <title>Network Secret: Juniper $9$ / $8$ &amp; Nokia secret toolkit</title>
+    <title>Network Secret: Juniper/HPE $9$ / $8$ &amp; Nokia secret toolkit</title>
     <script>
       (function () {
         try {