repository·main·Indexed 19 days ago
https://github.com/sybrenstuvel/python-rsaA pure-Python implementation of the RSA algorithm supporting PKCS#1 v1.5 for encryption, decryption, signing, and verification, as well as multi-prime encryption according to PKCS#1 v2.1. The library provides high-level functions for cryptographic operations, key generation, and a command-line interface. Note: This project has been archived by its maintainer and is not secure against timing attacks.
Python-RSA is a pure-Python implementation of the RSA algorithm. It provides the following core cryptographic functionalities:
Because RSA cannot encrypt data larger than its key size, you should use Hybrid Encryption. This involves using a symmetric block cipher (like AES) for the actual data and RSA only to protect the symmetric key.
Recommended Workflow:
rsa.randnum.read_random_bits).cryptography or PyCryptodome (Python-RSA does not provide AES/DES3 functionality).Note: The VARBLOCK format is deprecated and has been removed in version 4.0 due to security vulnerabilities. Do not use it.
import rsa.randnum
# 1. Generate a random 128-bit key for AES
aes_key = rsa.randnum.read_random_bits(128)
# 2. (User must use an external library like AES to encrypt the file with aes_key)
# ...
# 3. Encrypt the AES key with RSA public key
encrypted_aes_key = rsa.encrypt(aes_key, public_rsa_key)
# 4. Send encrypted_file + encrypted_aes_keyWhile Python-RSA uses industry-standard random padding and has undergone security review, users should be aware of potential attack vectors:
rsa.pkcs1.CryptoError exception can leak information regarding why decryption or verification failed.Users should exercise their own judgment to determine if this module meets the security requirements of their specific application.
Python-RSA implements encryption and signatures according to PKCS#1 version 1.5. It also supports multiprime encryption according to PKCS#1 version 2.1.
Key formats and capabilities:
RSAPrivateKey). Compatible with OpenSSL.RSAPublicKey). Note that OpenSSL's X.509 public keys are not supported.The VARBLOCK file format was used to encrypt files larger than the RSA key.
CRITICAL: The VARBLOCK format is NOT recommended for general use. It has been deprecated since Python-RSA 3.4 and was removed in version 4.0 because it is vulnerable to several attacks. Do not use this format in new projects.
To install from source, download the source files and run the setup.py script using Python.
python setup.py installPython-RSA supports PKCS#1 v1.5, but does not support the more complex PKCS#8 standard. If you have a private key in PKCS#8 format, you must use an external tool like OpenSSL to convert it to PKCS#1 before using it with Python-RSA.
# Convert a PKCS#8 private key to PKCS#1 format
openssl rsa -in privatekey-pkcs8.pem -out privatekey.pemTo contribute to Python-RSA, clone the Git repository and use pipenv to install the necessary development dependencies in a virtual environment.
git clone https://github.com/sybrenstuvel/python-rsa.git
cd python-rsa
pipenv install --dev.exe files. All scripts support the --help parameter to display usage instructions.Publishing to PyPI requires an API token rather than a username and password.
~/.pypirc file using __token__ as the username and the full token (including the pypi- prefix) as the password.poetry and twine.Note: This project is archived. If you are a maintainer/contributor attempting to publish, ensure you follow the specific token requirements for the rsa repository.
[rsa]
repository = https://upload.pypi.org/legacy/
username = __token__
password = pypi-token. ./.venv/bin/activate
poetry build
twine check dist/rsa-4.10-dev0.tar.gz dist/rsa-4.10-dev0-*.whl
twine upload -r rsa dist/rsa-4.10-dev0.tar.gz dist/rsa-4.10-dev0-*.whlYou can install the rsa library using pip. This provides a pure-Python RSA implementation that supports encryption, decryption, signing, verifying, and key generation according to PKCS#1 version 1.5.
pip install rsa