projects/guix·blob version-1.2.0 · refs

1669 lines · 60.2 KiB

1;;; GNU Guix --- Functional package management for GNU
2;;; Copyright © 2015 Eric Dvorsak <[email protected]>
3;;; Copyright © 2015, 2016, 2017, 2018, 2019, 2020 Efraim Flashner <[email protected]>
4;;; Copyright © 2015, 2016, 2017, 2019 Leo Famulari <[email protected]>
5;;; Copyright © 2016, 2017, 2020 Marius Bakke <[email protected]>
6;;; Copyright © 2017 Ben Sturmfels <[email protected]>
7;;; Copyright © 2016 Sou Bunnbu <[email protected]>
8;;; Copyright © 2015 Cyril Roelandt <[email protected]>
9;;; Copyright © 2014, 2017 Eric Bavier <[email protected]>
10;;; Copyright © 2015, 2016 David Thompson <[email protected]>
11;;; Copyright © 2016, 2017, 2018, 2019, 2020 Tobias Geerinckx-Rice <[email protected]>
12;;; Copyright © 2016, 2017 Nikita <[email protected]>
13;;; Copyright © 2014, 2015 Mark H Weaver <[email protected]>
14;;; Copyright © 2015, 2016, 2017, 2019 Ricardo Wurmus <[email protected]>
15;;; Copyright © 2016 Danny Milosavljevic <[email protected]>
16;;; Copyright © 2016, 2017, 2020 Arun Isaac <[email protected]>
17;;; Copyright © 2017 Carlo Zancanaro <[email protected]>
18;;; Copyright © 2018 Tomáš Čech <[email protected]>
19;;; Copyright © 2018 Nicolas Goaziou <[email protected]>
20;;; Copyright © 2018 Vagrant Cascadian <[email protected]>
21;;; Copyright © 2018 Nam Nguyen <[email protected]>
22;;; Copyright © 2019 Guillaume Le Vaillant <[email protected]>
23;;; Copyright © 2019 Clément Lassieur <[email protected]>
24;;; Copyright © 2020 Alexandros Theodotou <[email protected]>
25;;; Copyright © 2020 Justus Winter <[email protected]>
26;;; Copyright © 2020 Vinicius Monego <[email protected]>
27;;;
28;;; This file is part of GNU Guix.
29;;;
30;;; GNU Guix is free software; you can redistribute it and/or modify it
31;;; under the terms of the GNU General Public License as published by
32;;; the Free Software Foundation; either version 3 of the License, or (at
33;;; your option) any later version.
34;;;
35;;; GNU Guix is distributed in the hope that it will be useful, but
36;;; WITHOUT ANY WARRANTY; without even the implied warranty of
37;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
38;;; GNU General Public License for more details.
39;;;
40;;; You should have received a copy of the GNU General Public License
41;;; along with GNU Guix. If not, see <http://www.gnu.org/licenses/>.
42
43(define-module (gnu packages python-crypto)
44 #:use-module (guix packages)
45 #:use-module (guix download)
46 #:use-module (guix git-download)
47 #:use-module (guix build-system python)
48 #:use-module (gnu packages)
49 #:use-module (gnu packages check)
50 #:use-module (gnu packages crypto)
51 #:use-module (gnu packages kerberos)
52 #:use-module (gnu packages libffi)
53 #:use-module (gnu packages multiprecision)
54 #:use-module (gnu packages password-utils)
55 #:use-module (gnu packages protobuf)
56 #:use-module (gnu packages python)
57 #:use-module (gnu packages python-check)
58 #:use-module (gnu packages python-compression)
59 #:use-module (gnu packages python-web)
60 #:use-module (gnu packages python-xyz)
61 #:use-module (gnu packages swig)
62 #:use-module (gnu packages time)
63 #:use-module (gnu packages tls)
64 #:use-module (gnu packages xml)
65 #:use-module ((guix licenses) #:prefix license:)
66 #:use-module (srfi srfi-1))
67
68(define-public python-potr
69 (package
70 (name "python-potr")
71 (version "1.0.2")
72 (source
73 (origin
74 (method git-fetch)
75 (uri
76 (git-reference
77 (url "https://github.com/python-otr/pure-python-otr.git")
78 (commit version)))
79 (file-name
80 (git-file-name name version))
81 (sha256
82 (base32 "1hzw6h01fm216nmipyylgz0zybd80w1xsk12m7djycnhqrnrvvv1"))))
83 (build-system python-build-system)
84 (propagated-inputs
85 `(("python-pycrypto" ,python-pycrypto)))
86 (synopsis "Python OTR Implementation")
87 (description "Python OTR is an Off-The-Record Protocol Implementation in
88Python. It does not bind to libotr.")
89 (home-page "https://github.com/python-otr/pure-python-otr")
90 (license license:lgpl3+)))
91
92(define-public python-base58
93 (package
94 (name "python-base58")
95 (version "2.0.1")
96 (source
97 (origin
98 (method url-fetch)
99 (uri (pypi-uri "base58" version))
100 (sha256
101 (base32
102 "0yfaqp76kbdb62hikr5n4jkkfjfmii89grwfy6sw3fmsv5hrap1n"))))
103 (build-system python-build-system)
104 (native-inputs
105 `(("python-pyhamcrest" ,python-pyhamcrest)))
106 (home-page "https://github.com/keis/base58")
107 (synopsis "Base58 and Base58Check implementation")
108 (description "Base58 and Base58Check implementation compatible
109with what is used by the Bitcoin network.")
110 (license license:expat)))
111
112(define-public python-bcrypt
113 (package
114 (name "python-bcrypt")
115 (version "3.1.7")
116 (source
117 (origin
118 (method url-fetch)
119 (uri (pypi-uri "bcrypt" version))
120 (sha256
121 (base32 "0hhywhxx301cxivgxrpslrangbfpccc8y83qbwn1f57cab3nj00b"))))
122 (build-system python-build-system)
123 (native-inputs
124 `(("python-pycparser" ,python-pycparser)
125 ("python-pytest" ,python-pytest)))
126 (propagated-inputs
127 `(("python-cffi" ,python-cffi)
128 ("python-six" ,python-six)))
129 (home-page "https://github.com/pyca/bcrypt/")
130 (synopsis
131 "Modern password hashing library")
132 (description
133 "Bcrypt is a Python module which provides a password hashing method based
134on the Blowfish password hashing algorithm, as described in
135@url{http://static.usenix.org/events/usenix99/provos.html,\"A Future-Adaptable
136Password Scheme\"} by Niels Provos and David Mazieres.")
137 (license license:asl2.0)))
138
139(define-public python2-bcrypt
140 (package-with-python2 python-bcrypt))
141
142(define-public python-passlib
143 (package
144 (name "python-passlib")
145 (version "1.7.4")
146 (source
147 (origin
148 (method url-fetch)
149 (uri (pypi-uri "passlib" version))
150 (sha256
151 (base32 "015y5qaw9qnxr29lg60dml1g5rbqd4586wy5n8m41ib55gvm1zfy"))))
152 (build-system python-build-system)
153 (native-inputs
154 `(("python-nose" ,python-nose)))
155 (propagated-inputs
156 `(("python-py-bcrypt" ,python-py-bcrypt)))
157 (arguments
158 `(#:phases
159 (modify-phases %standard-phases
160 (add-before 'check 'set-PYTHON_EGG_CACHE
161 ;; Some tests require access to "$HOME/.cython".
162 (lambda _ (setenv "PYTHON_EGG_CACHE" "/tmp") #t)))))
163 (home-page "https://bitbucket.org/ecollins/passlib")
164 (synopsis "Comprehensive password hashing framework")
165 (description
166 "Passlib is a password hashing library for Python 2 & 3, which provides
167cross-platform implementations of over 30 password hashing algorithms, as well
168as a framework for managing existing password hashes. It's designed to be
169useful for a wide range of tasks, from verifying a hash found in /etc/shadow,
170to providing full-strength password hashing for multi-user application.")
171 (license license:bsd-3)))
172
173(define-public python2-passlib
174 (package-with-python2 python-passlib))
175
176(define-public python-py-bcrypt
177 (package
178 (name "python-py-bcrypt")
179 (version "0.4")
180 (source
181 (origin
182 (method url-fetch)
183 (uri (pypi-uri "py-bcrypt" version))
184 (sha256
185 (base32
186 "0y6smdggwi5s72v6p1nn53dg6w05hna3d264cq6kas0lap73p8az"))))
187 (build-system python-build-system)
188 (home-page "https://code.google.com/p/py-bcrypt")
189 (synopsis
190 "Bcrypt password hashing and key derivation")
191 (description
192 "A python wrapper of OpenBSD's Blowfish password hashing code. This
193system hashes passwords using a version of Bruce Schneier's Blowfish block
194cipher with modifications designed to raise the cost of off-line password
195cracking and frustrate fast hardware implementation. The computation cost of
196the algorithm is parametrised, so it can be increased as computers get faster.
197The intent is to make a compromise of a password database less likely to
198result in an attacker gaining knowledge of the plaintext passwords (e.g. using
199John the Ripper).")
200 ;; "sha2.c" is under BSD-3;
201 ;; "blowfish.c" and "bcrypt.c" are under BSD-4;
202 ;; the rest is under ISC.
203 (license (list license:isc license:bsd-3 license:bsd-4))))
204
205(define-public python2-py-bcrypt
206 (package-with-python2 python-py-bcrypt))
207
208(define-public python-pyblake2
209 (package
210 (name "python-pyblake2")
211 (version "1.1.2")
212 (source
213 (origin
214 (method url-fetch)
215 (uri (pypi-uri "pyblake2" version))
216 (sha256
217 (base32
218 "0gz9hgznv5zw4qjq43xa56y0yikimx30gffvibxzm0nv5sq7xk2w"))))
219 (build-system python-build-system)
220 (home-page "https://github.com/dchest/pyblake2")
221 (synopsis "BLAKE2 hash function for Python")
222 (description "BLAKE2 is a cryptographic hash function, which offers
223stronger security while being as fast as MD5 or SHA-1, and comes in two
224flavors: @code{BLAKE2b}, optimized for 64-bit platforms and produces digests
225of any size between 1 and 64 bytes, and @code{BLAKE2s}, optimized for 8- to
22632-bit platforms and produces digests of any size between 1 and 32 bytes.
227
228This package provides a Python interface for BLAKE2.")
229 ;; The COPYING file declares it as public domain, with the option to
230 ;; alternatively use and redistribute it under a variety of permissive
231 ;; licenses. cc0 is explicitly mentioned in setup.py and pyblake2module.c.
232 (license (list license:public-domain license:cc0))))
233
234(define-public python-paramiko
235 (package
236 (name "python-paramiko")
237 (version "2.7.2")
238 (source
239 (origin
240 (method url-fetch)
241 (uri (pypi-uri "paramiko" version))
242 (sha256
243 (base32 "0dahwq623jnna7gsr9j0mkwr9k2n1pvkapjryhcx508d5jxg8dkz"))))
244 (build-system python-build-system)
245 (arguments
246 `(;; FIXME: Tests require many unpackaged libraries, see dev-requirements.txt.
247 #:tests? #f))
248 (propagated-inputs
249 `(("python-bcrypt" ,python-bcrypt)
250 ("python-pyasn1" ,python-pyasn1)
251 ("python-pynacl" ,python-pynacl)
252 ("python-cryptography" ,python-cryptography)))
253 (home-page "https://www.paramiko.org/")
254 (synopsis "SSHv2 protocol library")
255 (description "Paramiko is a python implementation of the SSHv2 protocol,
256providing both client and server functionality. While it leverages a Python C
257extension for low level cryptography (PyCrypto), Paramiko itself is a pure
258Python interface around SSH networking concepts.")
259 (license license:lgpl2.1+)))
260
261(define-public python2-paramiko
262 (package-with-python2 python-paramiko))
263
264(define-public python-ecdsa
265 (package
266 (name "python-ecdsa")
267 (version "0.14.1")
268 (source
269 (origin
270 (method url-fetch)
271 (uri (pypi-uri "ecdsa" version))
272 (sha256
273 (base32 "13nx5cbfxc0gnax5zwdmp9xc40qd1llk62mv85jyrvqkbw017ik4"))))
274 (build-system python-build-system)
275 (arguments
276 '(#:phases
277 (modify-phases %standard-phases
278 (replace 'check
279 (lambda _ (invoke "pytest"))))))
280 (propagated-inputs
281 `(("python-six" ,python-six)))
282 (native-inputs
283 `(("openssl" ,openssl)
284 ("python-pytest" ,python-pytest)))
285 (home-page "https://github.com/warner/python-ecdsa")
286 (synopsis "ECDSA cryptographic signature library (pure python)")
287 (description
288 "This is an easy-to-use implementation of ECDSA cryptography (Elliptic
289Curve Digital Signature Algorithm), implemented purely in Python. With this
290library, you can quickly create key pairs (signing key and verifying key), sign
291messages, and verify the signatures. The keys and signatures are very short,
292making them easy to handle and incorporate into other protocols.")
293 (license license:expat)))
294
295(define-public python2-ecdsa
296 (package-with-python2 python-ecdsa))
297
298;;; Pycrypto is abandoned upstream:
299;;;
300;;; https://github.com/dlitz/pycrypto/issues/173
301;;;
302;;; TODO Remove this package from GNU Guix.
303(define-public python-pycrypto
304 (package
305 (name "python-pycrypto")
306 (version "2.6.1")
307 (source
308 (origin
309 (method url-fetch)
310 (uri (pypi-uri "pycrypto" version))
311 (patches (search-patches "python-pycrypto-CVE-2013-7459.patch"
312 "python-pycrypto-time-clock.patch"))
313 (sha256
314 (base32
315 "0g0ayql5b9mkjam8hym6zyg6bv77lbh66rv1fyvgqb17kfc1xkpj"))))
316 (build-system python-build-system)
317 (inputs
318 `(("python" ,python)
319 ("gmp" ,gmp)))
320 (arguments
321 `(#:phases
322 (modify-phases %standard-phases
323 (add-before 'build 'set-build-env
324 ;; pycrypto runs an autoconf configure script behind the scenes
325 (lambda _ (setenv "CONFIG_SHELL" (which "bash")) #t)))))
326 (home-page "https://www.dlitz.net/software/pycrypto/")
327 (synopsis "Cryptographic modules for Python")
328 (description
329 "Pycrypto is a collection of both secure hash functions (such as SHA256
330and RIPEMD160), and various encryption algorithms (AES, DES, RSA, ElGamal,
331etc.). The package is structured to make adding new modules easy.")
332 (license license:public-domain)))
333
334(define-public python2-pycrypto
335 (let ((pycrypto (package-with-python2 python-pycrypto)))
336 (package (inherit pycrypto)
337 (inputs
338 `(("python" ,python-2)
339 ,@(alist-delete
340 "python"
341 (package-inputs pycrypto)))))))
342
343(define-public python-kerberos
344 (package
345 (name "python-kerberos")
346 (version "1.3.0")
347 (source
348 (origin
349 (method url-fetch)
350 (uri (pypi-uri "kerberos" version))
351 (sha256
352 (base32
353 "19663qxmma0i8bfbjc2iwy5hgq0g4pfb75r023v5dps68zfvffgh"))))
354 (build-system python-build-system)
355 (inputs
356 `(("mit-krb5" ,mit-krb5)))
357 (home-page "https://github.com/apple/ccs-pykerberos")
358 (synopsis
359 "Python Kerberos library used by CalendarServer")
360 (description
361 "This Python package is a high-level wrapper for Kerberos (GSSAPI)
362operations. The goal is to avoid having to build a module that wraps the
363entire Kerberos.framework, and instead offer a limited set of functions that
364do what is needed for client/server Kerberos authentication based on
365<http://www.ietf.org/rfc/rfc4559.txt>.")
366 (license license:asl2.0)))
367
368(define-public python-keyring
369 (package
370 (name "python-keyring")
371 (version "21.0.0")
372 (source
373 (origin
374 (method url-fetch)
375 (uri (pypi-uri "keyring" version))
376 (sha256
377 (base32
378 "1k0w3yh3fz0qp0cvkxdiinq9jzbrnc6bd88qpjz34x3cgcr94psz"))
379 (modules '((guix build utils)))
380 (snippet
381 ;; https://github.com/jaraco/keyring/issues/414
382 '(begin (substitute* "tests/test_packaging.py"
383 (("ep, =") "(ep,) =")) #t))))
384 (build-system python-build-system)
385 (arguments
386 `(#:phases
387 (modify-phases %standard-phases
388 (replace 'check
389 (lambda _
390 ;; Not clear why this test fails.
391 (delete-file "tests/test_packaging.py")
392 (substitute* "pytest.ini"
393 (("--black ") ""))
394 (invoke "pytest"))))))
395 (native-inputs
396 `(("python-pytest" ,python-pytest)
397 ("python-pytest-checkdocs" ,python-pytest-checkdocs)
398 ("python-pytest-cov" ,python-pytest-cov)
399 ("python-pytest-flake8" ,python-pytest-flake8)
400 ("python-setuptools-scm" ,python-setuptools-scm)))
401 (propagated-inputs
402 `(("python-importlib-metadata" ,python-importlib-metadata)
403 ("python-secretstorage" ,python-secretstorage)))
404 (home-page "https://github.com/jaraco/keyring")
405 (synopsis "Store and access your passwords safely")
406 (description
407 "The Python keyring lib provides a easy way to access the system keyring
408service from python. It can be used in any application that needs safe
409password storage.")
410 ;; "MIT" and PSF dual license
411 (properties `((python2-variant . ,(delay python2-keyring))))
412 (license license:x11)))
413
414(define-public python2-keyring
415 (let ((keyring (package-with-python2
416 (strip-python2-variant python-keyring))))
417 (package
418 (inherit keyring)
419 (name "python2-keyring")
420 (version "8.7")
421 (source
422 (origin
423 (method url-fetch)
424 (uri (pypi-uri "keyring" version))
425 (sha256
426 (base32
427 "0482rmi2x6p78wl2kz8qzyq21xz1sbbfwnv5x7dggar4vkwxhzfx"))))
428 (arguments
429 `(#:python ,python-2))
430 (native-inputs
431 `(("python2-pytest" ,python2-pytest)
432 ("python2-pytest-runner" ,python2-pytest-runner)
433 ("python2-setuptools-scm" ,python2-setuptools-scm)))
434 (propagated-inputs
435 `(("python2-pycrypto" ,python2-pycrypto))))))
436
437(define-public python-keyrings.alt
438 (package
439 (name "python-keyrings.alt")
440 (version "3.4.0")
441 (source
442 (origin
443 (method url-fetch)
444 (uri (pypi-uri "keyrings.alt" version))
445 (sha256
446 (base32
447 "0gdjdqpq2hf770p6iwi891mil0vbsdhvy88x0v8b2w4y4b28lcli"))
448 (modules '((guix build utils)))
449 (snippet
450 '(begin
451 (delete-file "keyrings/alt/_win_crypto.py")
452 ;; Rely on python-keyring>20:
453 ;; https://github.com/jaraco/keyrings.alt/issues/33
454 (substitute* '("keyrings/alt/tests/test_Gnome.py"
455 "keyrings/alt/tests/test_Google.py"
456 "keyrings/alt/tests/test_Windows.py"
457 "keyrings/alt/tests/test_file.py"
458 "keyrings/alt/tests/test_pyfs.py")
459 (("keyring.tests.test_backend") "keyring.testing.backend")
460 (("keyring.tests.util") "keyring.testing.util"))
461 #t))))
462 (build-system python-build-system)
463 (native-inputs
464 `(("python-keyring" ,python-keyring)
465 ("python-pytest" ,python-pytest)
466 ("python-setuptools-scm" ,python-setuptools-scm)))
467 (home-page "https://github.com/jaraco/keyrings.alt")
468 (synopsis "Alternate keyring implementations")
469 (description "Keyrings in this package may have security risks or other
470implications. These backends were extracted from the main keyring project to
471make them available for those who wish to employ them, but are discouraged for
472general production use. Include this module and use its backends at your own
473risk.")
474 (license license:expat)))
475
476(define-public python-certifi
477 (package
478 (name "python-certifi")
479 (version "2020.4.5.1")
480 (source (origin
481 (method url-fetch)
482 (uri (pypi-uri "certifi" version))
483 (sha256
484 (base32
485 "06b5gfs7wmmipln8f3z928d2mmx2j4b3x7pnqmj6cvmyfh8v7z2i"))))
486 (build-system python-build-system)
487 (arguments '(#:tests? #f)) ;no tests
488 (home-page "https://certifi.io/")
489 (synopsis "Python CA certificate bundle")
490 (description
491 "Certifi is a Python library that contains a CA certificate bundle, which
492is used by the Requests library to verify HTTPS requests.")
493 (license license:asl2.0)))
494
495(define-public python2-certifi
496 (package-with-python2 python-certifi))
497
498(define-public python-cryptography-vectors
499 (package
500 (name "python-cryptography-vectors")
501 (version "2.9.2")
502 (source
503 (origin
504 (method url-fetch)
505 (uri (pypi-uri "cryptography_vectors" version))
506 (sha256
507 (base32
508 "1d4iykcv7cn9j399hczlxm5pzxmqy6d80h3j16dkjwlmv3293b4r"))))
509 (build-system python-build-system)
510 (home-page "https://github.com/pyca/cryptography")
511 (synopsis "Test vectors for the cryptography package")
512 (description
513 "This package contains test vectors for the cryptography package.")
514 ;; Distributed under either BSD-3 or ASL2.0
515 (license (list license:bsd-3 license:asl2.0))))
516
517(define-public python2-cryptography-vectors
518 (package-with-python2 python-cryptography-vectors))
519
520(define-public python-cryptography
521 (package
522 (name "python-cryptography")
523 (version "2.9.2")
524 (source
525 (origin
526 (method url-fetch)
527 (uri (pypi-uri "cryptography" version))
528 (sha256
529 (base32
530 "0af25w5mkd6vwns3r6ai1w5ip9xp0ms9s261zzssbpadzdr05hx0"))))
531 (build-system python-build-system)
532 (inputs
533 `(("openssl" ,openssl)))
534 (propagated-inputs
535 `(("python-asn1crypto" ,python-asn1crypto)
536 ("python-cffi" ,python-cffi)
537 ("python-six" ,python-six)
538 ("python-idna" ,python-idna)
539 ("python-iso8601" ,python-iso8601)))
540 (native-inputs
541 `(("python-cryptography-vectors" ,python-cryptography-vectors)
542 ("python-hypothesis" ,python-hypothesis)
543 ("python-pretend" ,python-pretend)
544 ("python-pytz" ,python-pytz)
545 ("python-pytest" ,python-pytest)))
546 (home-page "https://github.com/pyca/cryptography")
547 (synopsis "Cryptographic recipes and primitives for Python")
548 (description
549 "cryptography is a package which provides cryptographic recipes and
550primitives to Python developers. It aims to be the “cryptographic standard
551library” for Python. The package includes both high level recipes, and low
552level interfaces to common cryptographic algorithms such as symmetric ciphers,
553message digests and key derivation functions.")
554 ;; Distributed under either BSD-3 or ASL2.0
555 (license (list license:bsd-3 license:asl2.0))
556 (properties `((python2-variant . ,(delay python2-cryptography))))))
557
558(define-public python2-cryptography
559 (let ((crypto (package-with-python2
560 (strip-python2-variant python-cryptography))))
561 (package (inherit crypto)
562 (propagated-inputs
563 `(("python2-ipaddress" ,python2-ipaddress)
564 ("python2-backport-ssl-match-hostname"
565 ,python2-backport-ssl-match-hostname)
566 ("python2-enum34" ,python2-enum34)
567 ,@(package-propagated-inputs crypto))))))
568
569(define-public python-pyopenssl
570 (package
571 (name "python-pyopenssl")
572 (version "19.1.0")
573 (source
574 (origin
575 (method url-fetch)
576 (uri (pypi-uri "pyOpenSSL" version))
577 (sha256
578 (base32
579 "01wmsq6w0frzbr3zps4ga9kmqjidp2h317jwpq1g9ah24r5lj94s"))))
580 (build-system python-build-system)
581 (arguments
582 '(#:phases
583 (modify-phases %standard-phases
584 (delete 'check)
585 (add-after 'install 'check
586 (lambda* (#:key inputs outputs #:allow-other-keys)
587 (add-installed-pythonpath inputs outputs)
588 ;; PyOpenSSL runs tests against a certificate with a fixed
589 ;; expiry time. To ensure successful builds in the future,
590 ;; set the time to roughly the release date.
591 (invoke "faketime" "2019-01-01" "py.test" "-v" "-k"
592 (string-append
593 ;; This test tries to look up certificates from
594 ;; the compiled-in default path in OpenSSL, which
595 ;; does not exist in the build environment.
596 "not test_fallback_default_verify_paths "
597 ;; This test attempts to make a connection to
598 ;; an external web service.
599 "and not test_set_default_verify_paths")))))))
600 (propagated-inputs
601 `(("python-cryptography" ,python-cryptography)
602 ("python-six" ,python-six)))
603 (inputs
604 `(("openssl" ,openssl)))
605 (native-inputs
606 `(("libfaketime" ,libfaketime)
607 ("python-flaky" ,python-flaky)
608 ("python-pretend" ,python-pretend)
609 ("python-pytest" ,python-pytest)))
610 (home-page "https://github.com/pyca/pyopenssl")
611 (synopsis "Python wrapper module around the OpenSSL library")
612 (description
613 "PyOpenSSL is a high-level wrapper around a subset of the OpenSSL
614library.")
615 (license license:asl2.0)))
616
617(define-public python2-pyopenssl
618 (package-with-python2 python-pyopenssl))
619
620(define-public python-ed25519
621 (package
622 (name "python-ed25519")
623 (version "1.4")
624 (source
625 (origin
626 (method url-fetch)
627 (uri (pypi-uri "ed25519" version))
628 (sha256
629 (base32
630 "0ahx1nkxa0xis3cw0h5c4fpgv8mq4znkq7kajly33lc3317bk499"))))
631 (build-system python-build-system)
632 (home-page "https://github.com/warner/python-ed25519")
633 (synopsis "Ed25519 public-key signatures")
634 (description "Ed25519 public-key signatures")
635 (license license:expat)))
636
637(define-public python2-ed25519
638 (package-with-python2 python-ed25519))
639
640(define-public python-axolotl-curve25519
641 (package
642 (name "python-axolotl-curve25519")
643 (version "0.4.1.post2")
644 (source
645 (origin
646 (method url-fetch)
647 (uri (pypi-uri "python-axolotl-curve25519" version))
648 (sha256
649 (base32
650 "18v3rfyv7xi26fb97nw1xc0l6x8wi0i4xj8dlq4gblpbjxiac187"))))
651 (build-system python-build-system)
652 (home-page "https://github.com/tgalal/python-axolotl-curve25519")
653 (synopsis "Python wrapper for curve25519 library")
654 (description "This is a python wrapper for the curve25519 library
655with ed25519 signatures. The C code was pulled from
656libaxolotl-android. At the moment this wrapper is meant for use by
657python-axolotl.")
658 (license (list license:gpl3 ; Most files
659 license:bsd-3)))) ; curve/curve25519-donna.c
660
661(define-public python2-axolotl-curve25519
662 (package-with-python2 python-axolotl-curve25519))
663
664(define-public python-axolotl
665 (package
666 (name "python-axolotl")
667 (version "0.2.3")
668 (source
669 (origin
670 (method url-fetch)
671 (uri (pypi-uri "python-axolotl" version))
672 (sha256
673 (base32
674 "1bwdp24fmriffwx91aigs9k162albb51iskp23nc939z893q23py"))))
675 (build-system python-build-system)
676 (arguments
677 `(#:phases
678 (modify-phases %standard-phases
679 ;; Don't install tests
680 (add-before 'install 'remove-tests
681 (lambda _
682 (for-each delete-file-recursively
683 '("axolotl/tests" "build/lib/axolotl/tests"))
684 #t)))))
685 (propagated-inputs
686 `(("python-axolotl-curve25519" ,python-axolotl-curve25519)
687 ("python-cryptography" ,python-cryptography)
688 ("python-protobuf" ,python-protobuf)))
689 (home-page "https://github.com/tgalal/python-axolotl")
690 (synopsis "Python port of libaxolotl-android")
691 (description "This is a python port of libaxolotl-android. This
692is a ratcheting forward secrecy protocol that works in synchronous and
693asynchronous messaging environments.")
694 (license license:gpl3)))
695
696(define-public python2-axolotl
697 (package-with-python2 python-axolotl))
698
699;; SlowAES isn't compatible with Python 3.
700(define-public python2-slowaes
701 (package
702 (name "python2-slowaes")
703 (version "0.1a1")
704 (source
705 (origin
706 (method url-fetch)
707 (uri (pypi-uri "slowaes" version))
708 (sha256
709 (base32
710 "02dzajm83a7lqgxf6r3hgj64wfmcxz8gs4nvgxpvj5n19kjqlrc3"))))
711 (build-system python-build-system)
712 (arguments `(#:python ,python-2))
713 (home-page "http://code.google.com/p/slowaes/")
714 (synopsis "Implementation of AES in Python")
715 (description "This package contains an implementation of AES in Python.
716This implementation is slow (hence the project name) but still useful when
717faster ones are not available.")
718 (license license:asl2.0)))
719
720(define-public python-pyaes
721 (package
722 (name "python-pyaes")
723 (version "1.6.1")
724 (source
725 (origin
726 (method url-fetch)
727 (uri (pypi-uri "pyaes" version))
728 (sha256
729 (base32
730 "13vdaff15k0jyfcss4b4xvfgm8xyv0nrbyw5n1qc7lrqbi0b3h82"))))
731 (build-system python-build-system)
732 (home-page "https://github.com/ricmoo/pyaes")
733 (synopsis "Implementation of AES in Python")
734 (description "This package contains a pure-Python implementation of the
735AES block cipher algorithm and the common modes of operation (CBC, CFB, CTR,
736ECB and OFB).")
737 (license license:expat)))
738
739(define-public python2-pyaes
740 (package-with-python2 python-pyaes))
741
742(define-public python-asn1crypto
743 (package
744 (name "python-asn1crypto")
745 (version "0.24.0")
746 (source
747 (origin
748 (method git-fetch)
749 (uri (git-reference
750 (url "https://github.com/wbond/asn1crypto")
751 (commit version)))
752 (file-name (git-file-name name version))
753 (sha256
754 (base32
755 "10lai2cs5mnz3gpaffbw1m7b885ls8328q5wxm35vfmcip1f0xmb"))))
756 (build-system python-build-system)
757 (home-page "https://github.com/wbond/asn1crypto")
758 (synopsis "ASN.1 parser and serializer in Python")
759 (description "asn1crypto is an ASN.1 parser and serializer with definitions
760for private keys, public keys, certificates, CRL, OCSP, CMS, PKCS#3, PKCS#7,
761PKCS#8, PKCS#12, PKCS#5, X.509 and TSP.")
762 (license license:expat)))
763
764(define-public python2-asn1crypto
765 (package-with-python2 python-asn1crypto))
766
767(define-public python-pynacl
768 (package
769 (name "python-pynacl")
770 (version "1.4.0")
771 (source
772 (origin
773 (method url-fetch)
774 (uri (pypi-uri "PyNaCl" version))
775 (modules '((guix build utils)))
776 (snippet
777 '(begin
778 ;; Remove spurious dependency on python-wheel, can be removed
779 ;; for 1.5.
780 (substitute* "setup.py"
781 (("\"wheel\"") ""))
782 ;; Remove bundled libsodium.
783 (delete-file-recursively "src/libsodium")
784 #t))
785 (sha256
786 (base32
787 "01b56hxrbif3hx8l6rwz5kljrgvlbj7shmmd2rjh0hn7974a5sal"))))
788 (build-system python-build-system)
789 (arguments
790 `(#:modules (,@%python-build-system-modules
791 (guix build utils)
792 (ice-9 ftw)
793 (srfi srfi-26))
794 #:phases
795 (modify-phases (@ (guix build python-build-system) %standard-phases)
796 (add-before 'build 'use-system-sodium
797 (lambda _
798 (setenv "SODIUM_INSTALL" "system")
799 #t))
800 (replace 'check
801 (lambda _
802 (let ((build-directory
803 (car (scandir "build" (cut string-prefix? "lib" <>)))))
804 (setenv "PYTHONPATH"
805 (string-append "./build/" build-directory ":"
806 (getenv "PYTHONPATH")))
807 (invoke "pytest" "-vv")))))))
808 (native-inputs
809 `(("python-hypothesis" ,python-hypothesis)
810 ("python-pytest" ,python-pytest)))
811 (propagated-inputs
812 `(("python-cffi" ,python-cffi)
813 ("python-six" ,python-six)
814 ("libsodium" ,libsodium)))
815 (home-page "https://github.com/pyca/pynacl/")
816 (synopsis "Python bindings to libsodium")
817 (description
818 "PyNaCl is a Python binding to libsodium, which is a fork of the
819Networking and Cryptography library. These libraries have a stated goal
820of improving usability, security and speed.")
821 (license license:asl2.0)))
822
823(define-public python2-pynacl
824 (package-with-python2 python-pynacl))
825
826(define-public python2-pgpdump
827 (package
828 (name "python2-pgpdump")
829 (version "1.5")
830 (source
831 (origin
832 (method url-fetch)
833 (uri (pypi-uri "pgpdump" version))
834 (sha256
835 (base32
836 "0s4nh8h7qsdj2yf29bspjs1zvxd4lcd11r6g11dp7fppgf2h0iqw"))))
837 (build-system python-build-system)
838
839 ;; Currently fails to build with Python 3.
840 (arguments `(#:python ,python-2))
841
842 (home-page "https://github.com/toofishes/python-pgpdump")
843 (synopsis "Python library for parsing PGP packets")
844 (description
845 "Python-pgpdump is an OpenPGP packet parser based on
846@uref{http://www.mew.org/~kazu/proj/pgpdump/, pgpdump}. It notably supports:
847
848@itemize
849@item signature packets;
850@item public key packets;
851@item secret key packets;
852@item trust, user ID, and user attribute packets;
853@item ASCII-armor decoding and CRC check.
854@end itemize\n")
855 (license license:bsd-3)))
856
857(define-public python2-roca-detect
858 (package
859 (name "python2-roca-detect")
860 (version "1.0.8")
861 (source
862 (origin
863 (method url-fetch)
864 (uri (pypi-uri "roca-detect" version))
865 (sha256
866 (base32
867 "1di4akyw2lf5r8zfwvyhkilz8jv8g4b66rgaqwfabmjwma6gnw27"))))
868 (build-system python-build-system)
869 (native-inputs
870 ;; TODO: apk_parse_ph4, pyjks
871 `(("python2-dateutil" ,python2-dateutil)
872 ("python2-six" ,python2-six)
873 ("python2-cryptography" ,python2-cryptography)
874 ("python2-future" ,python2-future)
875 ("python2-coloredlogs" ,python2-coloredlogs)
876 ("python2-pgpdump" ,python2-pgpdump)))
877 (arguments
878 `(;; Basic testing routine is quite simple and works with Py3
879 ;; but the rest of the code that processes the different
880 ;; key formats and extracts the modulus for inspection is
881 ;; not yet fully py3 ready.
882 #:python ,python-2))
883 (home-page "https://github.com/crocs-muni/roca")
884 (synopsis "ROCA detection tool")
885 (description
886 "This tool is related to the paper entitled @i{Return of the
887Coppersmith’s Attack: Practical Factorization of Widely Used RSA Moduli}. It
888enables you to test public RSA keys for a presence of the described
889vulnerability. Currently the tool supports the following key formats: X.509
890Certificate (DER encoded, PEM encoded), RSA PEM (encoded private key, public
891key), SSH public key, ASC-encoded OpenPGP key, APK Android application, LDIFF
892file, and more.")
893 (license license:gpl3)))
894
895(define-public python-blurhash
896 (package
897 (name "python-blurhash")
898 (version "1.1.4")
899 (source
900 (origin
901 ;; Tests not included in pypi release and releases not tagged in git repo.
902 (method git-fetch)
903 (uri (git-reference
904 (url "https://github.com/halcy/blurhash-python")
905 (commit "22e081ef1c24da1bb5c5eaa2c1d6649724deaef8")))
906 (file-name (git-file-name name version))
907 (sha256
908 (base32
909 "1qq6mhydlp7q3na4kmaq3871h43wh3pyfyxr4b79bia73wjdylxf"))))
910 (build-system python-build-system)
911 (arguments
912 '(#:phases
913 (modify-phases %standard-phases
914 (replace 'check
915 (lambda _
916 (delete-file "setup.cfg")
917 (invoke "pytest"))))))
918 (native-inputs
919 `(("python-numpy" ,python-numpy)
920 ("python-pillow" ,python-pillow)
921 ("python-pytest" ,python-pytest)))
922 (home-page "https://github.com/halcy/blurhash-python")
923 (synopsis
924 "Pure-Python implementation of the blurhash algorithm")
925 (description
926 "Pure-Python implementation of the blurhash algorithm.")
927 (license license:expat)))
928
929(define-public python-ecpy
930 (package
931 (name "python-ecpy")
932 (version "0.10.0")
933 (source
934 (origin
935 (method url-fetch)
936 (uri (pypi-uri "ECPy" version))
937 (sha256
938 (base32
939 "1gc3i5s93zq6x1nkaxkq1dvmsc12vmrw0hns9f5s1hcb78ni52c8"))))
940 (build-system python-build-system)
941 (propagated-inputs
942 `(("python-future" ,python-future)))
943 (home-page "https://github.com/ubinity/ECPy")
944 (synopsis "Pure Python Elliptic Curve Library")
945 (description "This package provides a Elliptic Curve Library in pure
946Python.")
947 (license license:asl2.0)))
948
949(define-public python2-ecpy
950 (package-with-python2 python-ecpy))
951
952(define-public python-josepy
953 (package
954 (name "python-josepy")
955 (version "1.1.0")
956 (source (origin
957 (method url-fetch)
958 (uri (pypi-uri "josepy" version))
959 (sha256
960 (base32
961 "11khz8malzrv375b27jjkv66z6z6khdx1v5mkkr4vq16gp3n4p7v"))))
962 (build-system python-build-system)
963 (arguments
964 ;; The tests require flake8 >= 3.5, which is not yet packaged.
965 '(#:tests? #f))
966 (propagated-inputs
967 `(("python-cryptography" ,python-cryptography)
968 ("python-pyopenssl" ,python-pyopenssl)
969 ("python-six" ,python-six)))
970;; TODO Enable when we have flake8 >= 3.5.
971; (native-inputs
972; `(("python-coverage" ,python-coverage)
973; ("python-flake8" ,python-flake8)
974; ("python-isort" ,python-isort)
975; ("python-mock" ,python-mock)
976; ("python-pytest" ,python-pytest)
977; ("python-pytest-cov" ,python-pytest-cov)
978; ("python-pytest-cache" ,python-pytest-cache)
979; ("python-pytest-flake8" ,python-pytest-flake8)))
980 (home-page "https://github.com/certbot/josepy")
981 (synopsis "JOSE protocol implementation in Python")
982 (description "This package provides a Python implementation of the JOSE
983protocol (Javascript Object Signing and Encryption).")
984 (license license:asl2.0)))
985
986(define-public python2-josepy
987 (package-with-python2 python-josepy))
988
989(define-public python-pycryptodome
990 (package
991 (name "python-pycryptodome")
992 (version "3.7.3")
993 (source
994 (origin
995 (method url-fetch)
996 (uri (pypi-uri "pycryptodome" version))
997 (sha256
998 (base32
999 "0dh6ky5ngxayyn5f6n7gdamjl49g3khz6pdx9sdnag1zwi8248hs"))))
1000 (build-system python-build-system)
1001 (home-page "https://www.pycryptodome.org")
1002 (synopsis "Cryptographic library for Python")
1003 (description "This package provides a cryptographic library for Python.
1004
1005It brings the following enhancements with respect to the last official version
1006of PyCrypto:
1007
1008@itemize
1009@item Authenticated encryption modes (GCM, CCM, EAX, SIV, OCB)
1010@item Accelerated AES on Intel platforms via AES-NI
1011@item First class support for PyPy
1012@item Elliptic curves cryptography (NIST P-256 curve only)
1013@item Better and more compact API (nonce and iv attributes for ciphers,
1014automatic generation of random nonces and IVs, simplified CTR cipher mode, and
1015more)
1016@item SHA-3 (including SHAKE XOFs) and BLAKE2 hash algorithms
1017@item Salsa20 and ChaCha20 stream ciphers
1018@item scrypt and HKDF
1019@item Deterministic (EC)DSA
1020@item Password-protected PKCS#8 key containers
1021@item Shamir’s Secret Sharing scheme
1022@item Random numbers get sourced directly from the OS (and not from a CSPRNG
1023in userspace)
1024@item Cleaner RSA and DSA key generation (largely based on FIPS 186-4)
1025@item Major clean ups and simplification of the code base
1026@end itemize\n")
1027 (license license:bsd-2)))
1028
1029(define-public python2-pycryptodome
1030 (package-with-python2 python-pycryptodome))
1031
1032(define-public python-m2crypto
1033 (package
1034 (name "python-m2crypto")
1035 (version "0.35.2")
1036 (source
1037 (origin
1038 (method url-fetch)
1039 (uri (pypi-uri "M2Crypto" version))
1040 (sha256
1041 (base32 "09yirf3w77w6f49q6nxhrjm9c3a4y9s30s1k09chqrw8zdgx8sjc"))))
1042 (build-system python-build-system)
1043 (inputs `(("openssl" ,openssl)))
1044 (native-inputs `(("swig" ,swig)))
1045 (home-page "https://gitlab.com/m2crypto/m2crypto")
1046 (synopsis "Python crypto and TLS toolkit")
1047 (description "@code{M2Crypto} is a complete Python wrapper for OpenSSL
1048featuring RSA, DSA, DH, EC, HMACs, message digests, symmetric ciphers
1049(including AES); TLS functionality to implement clients and servers; HTTPS
1050extensions to Python's httplib, urllib, and xmlrpclib; unforgeable HMAC'ing
1051AuthCookies for web session management; FTP/TLS client and server; S/MIME;
1052M2Crypto can also be used to provide TLS for Twisted. Smartcards supported
1053through the Engine interface.")
1054 (properties `((python2-variant . ,(delay python2-m2crypto))))
1055 (license license:expat)))
1056
1057(define-public python2-m2crypto
1058 (let ((m2crypto (package-with-python2
1059 (strip-python2-variant python-m2crypto))))
1060 (package (inherit m2crypto)
1061 (propagated-inputs
1062 `(("python2-typing" ,python2-typing))))))
1063
1064(define-public python-pykeepass
1065 (package
1066 (name "python-pykeepass")
1067 (version "3.2.0")
1068 (source
1069 (origin
1070 (method git-fetch)
1071 ;; Source tarball on PyPI doesn't include tests.
1072 (uri (git-reference
1073 (url "https://github.com/libkeepass/pykeepass")
1074 (commit version)))
1075 (file-name (git-file-name name version))
1076 (sha256
1077 (base32 "1wxbfpy7467mlnfsvmh685fhfnq4fki9y7yc9cylp30r5n3hisaj"))))
1078 (build-system python-build-system)
1079 (arguments
1080 `(#:phases
1081 (modify-phases %standard-phases
1082 (add-after 'unpack 'make-kdbx-writable
1083 ;; Tests have to write to the .kdbx files in the test directory.
1084 (lambda _
1085 (with-directory-excursion "tests"
1086 (for-each make-file-writable (find-files "."))
1087 #t)))
1088 (add-before 'build 'patch-requirements
1089 (lambda _
1090 ;; Update requirements from dependency==version
1091 ;; to dependency>=version.
1092 (substitute* "setup.py"
1093 (("==") ">="))
1094 #t)))))
1095 (propagated-inputs
1096 `(("python-argon2-cffi" ,python-argon2-cffi)
1097 ("python-construct" ,python-construct)
1098 ("python-dateutil" ,python-dateutil)
1099 ("python-future" ,python-future)
1100 ("python-lxml" ,python-lxml)
1101 ("python-pycryptodome" ,python-pycryptodome)))
1102 (home-page "https://github.com/libkeepass/pykeepass")
1103 (synopsis "Python library to interact with keepass databases")
1104 (description
1105 "This library allows you to write entries to a KeePass database. It
1106supports KDBX3 and KDBX4.")
1107 ;; There are no copyright headers in the source code. The LICENSE file
1108 ;; indicates GPL3.
1109 (license license:gpl3+)))
1110
1111(define-public python-pylibscrypt
1112 (package
1113 (name "python-pylibscrypt")
1114 (version "1.7.1")
1115 (source
1116 (origin
1117 (method url-fetch)
1118 (uri (pypi-uri "pylibscrypt" version))
1119 (sha256
1120 (base32
1121 "1b3rgzl6dbzs08vhv41b6y4n5189wv7lr27acxn104hs45745abs"))))
1122 (build-system python-build-system)
1123 (arguments
1124 `(#:phases
1125 (modify-phases %standard-phases
1126 (add-before 'build 'hard-code-path-to-libscrypt
1127 (lambda* (#:key inputs #:allow-other-keys)
1128 (let ((libscrypt (assoc-ref inputs "libscrypt")))
1129 (substitute* "pylibscrypt/pylibscrypt.py"
1130 (("find_library\\('scrypt'\\)")
1131 (string-append "'" libscrypt "/lib/libscrypt.so'")))
1132 #t))))
1133 ;; The library can use various scrypt implementations and tests all of
1134 ;; them. Since we only provide a single implementation, most tests
1135 ;; fail. Simply skip them.
1136 #:tests? #f))
1137 ;; FIXME: Using "libscrypt" is the second best choice. The best one
1138 ;; requires "hashlib.scrypt", provided by Python 3.6+ built with OpenSSL
1139 ;; 1.1+. Use that as soon as Guix provides it.
1140 (inputs
1141 `(("libscrypt" ,libscrypt)))
1142 (home-page "https://github.com/jvarho/pylibscrypt")
1143 (synopsis "Scrypt for Python")
1144 (description "There are a lot of different scrypt modules for Python, but
1145none of them have everything that I'd like, so here's one more. It uses
1146@code{libscrypt}.")
1147 (license license:isc)))
1148
1149(define-public python-libnacl
1150 (package
1151 (name "python-libnacl")
1152 (version "1.6.1")
1153 (source
1154 (origin
1155 (method url-fetch)
1156 (uri (pypi-uri "libnacl" version))
1157 (sha256
1158 (base32
1159 "0nv7n8nfswkhl614x5mllrkvaslraa0053q11iylb337cy43vb4v"))))
1160 (build-system python-build-system)
1161 (arguments
1162 `(#:phases
1163 (modify-phases %standard-phases
1164 (add-after 'unpack 'locate-libsodium
1165 (lambda* (#:key inputs #:allow-other-keys)
1166 (substitute* "libnacl/__init__.py"
1167 (("(return ctypes.cdll.LoadLibrary\\(')libsodium.so('\\))"
1168 _ pre post)
1169 (let ((libsodium (string-append (assoc-ref inputs "libsodium")
1170 "/lib/libsodium.so")))
1171 (string-append pre libsodium post)))))))))
1172 (native-inputs
1173 `(("python-pyhamcrest" ,python-pyhamcrest)))
1174 (inputs
1175 `(("libsodium" ,libsodium)))
1176 (home-page "https://libnacl.readthedocs.org/")
1177 (synopsis "Python bindings for libsodium based on ctypes")
1178 (description "@code{libnacl} is used to gain direct access to the
1179functions exposed by @code{NaCl} library via @code{libsodium}. It has
1180been constructed to maintain extensive documentation on how to use
1181@code{NaCl} as well as being completely portable.")
1182 (license license:asl2.0)))
1183
1184(define-public python-pyotp
1185 (package
1186 (name "python-pyotp")
1187 (version "2.4.0")
1188 (source
1189 (origin
1190 (method url-fetch)
1191 (uri (pypi-uri "pyotp" version))
1192 (sha256
1193 (base32 "0a1dx07y785xyl70h0vj6vssg13qfx11w04d0gz8h48qffsymv01"))))
1194 (build-system python-build-system)
1195 (home-page "https://github.com/pyauth/pyotp")
1196 (synopsis "Python One Time Password Library")
1197 (description
1198 "PyOTP is a Python library for generating and verifying one-time
1199passwords. It can be used to implement two-factor (2FA) or multi-factor
1200(MFA) authentication methods in web applications and in other systems that
1201require users to log in.")
1202 (license license:expat)))
1203
1204(define-public python-scrypt
1205 (package
1206 (name "python-scrypt")
1207 (version "0.8.7")
1208 (source
1209 (origin
1210 (method url-fetch)
1211 (uri (pypi-uri "scrypt" version))
1212 (sha256
1213 (base32
1214 "0hjk71k3mgnl8siikm9lii9im8kv0rb7inkjzx78rnancra48xxr"))))
1215 (build-system python-build-system)
1216 (inputs
1217 `(("openssl" ,openssl)))
1218 (home-page "https://bitbucket.org/mhallin/py-scrypt")
1219 (synopsis "Bindings for the scrypt key derivation function library")
1220 (description "This is a set of Python bindings for the scrypt key
1221derivation function.")
1222 (license license:bsd-2)))
1223
1224(define-public python-service-identity
1225 (package
1226 (name "python-service-identity")
1227 (version "18.1.0")
1228 (source
1229 (origin
1230 (method url-fetch)
1231 (uri (pypi-uri "service_identity" version))
1232 (sha256
1233 (base32
1234 "0b9f5qiqjy8ralzgwjgkhx82h6h8sa7532psmb8mkd65md5aan08"))))
1235 (build-system python-build-system)
1236 (propagated-inputs
1237 `(("python-attrs" ,python-attrs)
1238 ("python-pyasn1" ,python-pyasn1)
1239 ("python-pyasn1-modules" ,python-pyasn1-modules)
1240 ("python-pyopenssl" ,python-pyopenssl)))
1241 (home-page "https://service-identity.readthedocs.io/")
1242 (synopsis "Service identity verification for PyOpenSSL")
1243 (description
1244 "@code{service_identity} aspires to give you all the tools you need
1245for verifying whether a certificate is valid for the intended purposes.
1246In the simplest case, this means host name verification. However,
1247service_identity implements RFC 6125 fully and plans to add other
1248relevant RFCs too.")
1249 (license license:expat)))
1250
1251(define-public python2-service-identity
1252 (package-with-python2 python-service-identity))
1253
1254(define-public python-hkdf
1255 (package
1256 (name "python-hkdf")
1257 (version "0.0.3")
1258 (source
1259 (origin
1260 (method url-fetch)
1261 (uri (pypi-uri "hkdf" version))
1262 (sha256
1263 (base32
1264 "1jhxk5vhxmxxjp3zj526ry521v9inzzl8jqaaf0ma65w6k332ak2"))))
1265 (build-system python-build-system)
1266 (native-inputs
1267 `(("python-nose" ,python-nose)))
1268 (home-page "https://github.com/casebeer/python-hkdf")
1269 (synopsis "HMAC-based Extract-and-Expand Key Derivation Function (HKDF)")
1270 (description "This package provides a Python implementation of the HMAC Key
1271Derivation function (HKDF) defined in RFC 5869.")
1272 (license license:bsd-2)))
1273
1274(define-public python-spake2
1275 (package
1276 (name "python-spake2")
1277 (version "0.8")
1278 (source
1279 (origin
1280 (method url-fetch)
1281 (uri (pypi-uri "spake2" version))
1282 (sha256
1283 (base32
1284 "1x16r7lrbklvfzbacb66qv9iiih6liq1y612dqh2chgf555n2yn1"))))
1285 (build-system python-build-system)
1286 (propagated-inputs
1287 `(("python-hkdf" ,python-hkdf)))
1288 (home-page "https://github.com/warner/python-spake2")
1289 (synopsis "SPAKE2 password-authenticated key exchange in Python")
1290 (description "This package provides a Python implementation of the SPAKE2
1291Password-Authenticated Key Exchange algorithm.")
1292 (license license:expat)))
1293
1294(define-public python-txtorcon
1295 (package
1296 (name "python-txtorcon")
1297 (version "19.0.0")
1298 (source
1299 (origin
1300 (method url-fetch)
1301 (uri (pypi-uri "txtorcon" version))
1302 (sha256
1303 (base32
1304 "0fxzhsc62bhmr730vj9pzallmw56gz6iykvl28a5agrycm0bfc9p"))))
1305 (build-system python-build-system)
1306 (arguments
1307 ;; The tests fail immediately due to a missing file. Reported upstream:
1308 ;; <https://github.com/meejah/txtorcon/issues/330>
1309 `(#:tests? #f))
1310 (propagated-inputs
1311 `(("python-automat" ,python-automat)
1312 ("python-idna" ,python-idna)
1313 ("python-incremental" ,python-incremental)
1314 ("python-service-identity" ,python-service-identity)
1315 ("python-twisted" ,python-twisted)
1316 ("python-zope-interface" ,python-zope-interface)))
1317 (home-page "https://github.com/meejah/txtorcon")
1318 (synopsis "Twisted-based Tor controller client")
1319 (description "This package provides a Twisted-based Tor controller client,
1320with state-tracking and configuration abstractions.")
1321 (license license:expat)))
1322
1323(define-public python-keyutils
1324 (package
1325 (name "python-keyutils")
1326 (version "0.6")
1327 (source
1328 (origin
1329 (method url-fetch)
1330 (uri (pypi-uri "keyutils" version))
1331 (sha256
1332 (base32
1333 "0lipygpzhwzzsq2k5imb1jgkmj8y4khxdwhzadjs3bd56g6bmkx9"))))
1334 (build-system python-build-system)
1335 (native-inputs
1336 `(("python-pytest" ,python-pytest)
1337 ("python-pytest-runner" ,python-pytest-runner)))
1338 (inputs
1339 `(("keyutils" ,keyutils)))
1340 (arguments
1341 '(#:tests? #f))
1342 (home-page "https://github.com/sassoftware/python-keyutils")
1343 (synopsis "Python bindings for keyutils")
1344 (description
1345 "This is a set of python bindings for keyutils, a key management suite
1346that leverages the infrastructure provided by the Linux kernel for safely
1347storing and retrieving sensitive information in your programs.")
1348 (license license:asl2.0)))
1349
1350(define-public python-mcuboot-imgtool
1351 (package
1352 (name "python-mcuboot-imgtool")
1353 (version "1.4.0")
1354 (source
1355 (origin
1356 (method git-fetch)
1357 (uri (git-reference
1358 (url "https://github.com/JuulLabs-OSS/mcuboot")
1359 (commit (string-append "v" version))))
1360 (file-name (git-file-name name version))
1361 (sha256
1362 (base32
1363 "1m1csyvzq4jx81zg635ssy1n7sc0z539z0myh872ll3nwqx7wa0q"))))
1364 (build-system python-build-system)
1365 (arguments
1366 `(#:phases
1367 (modify-phases %standard-phases
1368 (add-after 'unpack 'fix-broken-test
1369 (lambda _
1370 (substitute* "scripts/imgtool/keys/ed25519_test.py"
1371 (("raw_sign") "sign_digest"))
1372 #t))
1373 (add-before 'build 'change-directory
1374 (lambda _
1375 (chdir "scripts")
1376 #t)))))
1377 (propagated-inputs
1378 `(("python-click" ,python-click)
1379 ("python-intelhex" ,python-intelhex)
1380 ("python-cryptography" ,python-cryptography)))
1381 (home-page "https://mcuboot.com")
1382 (synopsis "Tool to securely sign firmware images for booting by MCUboot")
1383 (description "MCUboot is a secure bootloader for 32-bit MCUs. This
1384package provides a tool to securely sign firmware images for booting by
1385MCUboot.")
1386 (license license:expat)))
1387
1388(define-public python-ntlm-auth
1389 (package
1390 (name "python-ntlm-auth")
1391 (version "1.4.0")
1392 (source
1393 (origin
1394 (method url-fetch)
1395 (uri (pypi-uri "ntlm-auth" version))
1396 (sha256
1397 (base32
1398 "16mavidki4ma5ip8srqalr19gz4f5yn3cnmmgps1fmgfr24j63rm"))))
1399 (build-system python-build-system)
1400 (propagated-inputs
1401 `(("python-cryptography" ,python-cryptography)))
1402 (home-page "https://github.com/jborean93/ntlm-auth")
1403 (synopsis
1404 "Calculates NTLM Authentication codes")
1405 (description
1406 "This library handles the low-level details of NTLM authentication for
1407use in authenticating with a service that uses NTLM. It will create and parse
1408the 3 different message types in the order required and produce a base64
1409encoded value that can be attached to the HTTP header.
1410
1411The goal of this library is to offer full NTLM support including signing and
1412sealing of messages as well as supporting MIC for message integrity and the
1413ability to customise and set limits on the messages sent. Please see Features
1414and Backlog for a list of what is and is not currently supported.")
1415 (license license:expat)))
1416
1417(define-public python-secretstorage
1418 (package
1419 (name "python-secretstorage")
1420 (version "3.1.2")
1421 (source
1422 (origin
1423 (method url-fetch)
1424 (uri (pypi-uri "SecretStorage" version))
1425 (sha256
1426 (base32
1427 "1xmzr0j3066s220bss4nkgqbiwb5k4kkp2rkpqlqwjb5kfc8mnhm"))))
1428 (build-system python-build-system)
1429 (arguments
1430 '(#:tests? #f)) ; Tests require a running dbus service.
1431 (propagated-inputs
1432 `(("python-cryptography" ,python-cryptography)
1433 ("python-jeepney" ,python-jeepney)))
1434 (home-page "https://github.com/mitya57/secretstorage")
1435 (synopsis "Python bindings to FreeDesktop.org Secret Service API")
1436 (description
1437 "@code{python-secretstorage} provides a way for securely storing passwords
1438and other secrets. It uses D-Bus Secret Service API that is supported by GNOME
1439Keyring (since version 2.30) and KSecretsService. SecretStorage supports most
1440of the functions provided by Secret Service, including creating and deleting
1441items and collections, editing items, locking and unlocking collections
1442(asynchronous unlocking is also supported).")
1443 (license license:bsd-3)))
1444
1445(define-public python-trustme
1446 (package
1447 (name "python-trustme")
1448 (version "0.6.0")
1449 (source
1450 (origin
1451 (method url-fetch)
1452 (uri (pypi-uri "trustme" version))
1453 (sha256
1454 (base32 "0v3vr5z6apnfmklf07m45kv5kaqvm6hxrkaqywch57bjd2siiywx"))))
1455 (build-system python-build-system)
1456 (arguments
1457 `(#:phases
1458 (modify-phases %standard-phases
1459 (replace 'check
1460 (lambda* (#:key inputs outputs #:allow-other-keys)
1461 (add-installed-pythonpath inputs outputs)
1462 (invoke "pytest" "-vv"))))))
1463 (native-inputs
1464 `(("python-more-itertools" ,python-more-itertools)
1465 ("python-pyopenssl" ,python-pyopenssl)
1466 ("python-pytest" ,python-pytest)
1467 ("python-pytest-cov" ,python-pytest-cov)
1468 ("python-service-identity" ,python-service-identity)
1469 ("python-zipp" ,python-zipp)))
1470 (propagated-inputs
1471 `(("python-cryptography" ,python-cryptography)))
1472 (home-page "https://github.com/python-trio/trustme")
1473 (synopsis "Fake a certificate authority for tests")
1474 (description
1475 "@code{trustme} is a tiny Python package that does one thing: it gives you
1476a fake certificate authority (CA) that you can use to generate fake TLS certs to
1477use in your tests.")
1478 ;; Either license applies.
1479 (license (list license:expat license:asl2.0))))
1480
1481(define-public python-certipy
1482 (package
1483 (name "python-certipy")
1484 (version "0.1.3")
1485 (source
1486 (origin
1487 (method url-fetch)
1488 (uri (pypi-uri "certipy" version))
1489 (sha256
1490 (base32
1491 "0n980gqpzh0fm58h3i4mi2i10wgj606lscm1r5sk60vbf6vh8mv9"))))
1492 (build-system python-build-system)
1493 (propagated-inputs
1494 `(("python-pyopenssl" ,python-pyopenssl)))
1495 (native-inputs
1496 `(("python-pytest" ,python-pytest)))
1497 (home-page "https://github.com/LLNL/certipy")
1498 (synopsis "Utility to create and sign CAs and certificates")
1499 (description
1500 "Certipy was made to simplify the certificate creation process. To that
1501end, certipy exposes methods for creating and managing certificate authorities,
1502certificates, signing and building trust bundles.")
1503 (license license:bsd-3)))
1504
1505(define-public python-jeepney
1506 (package
1507 (name "python-jeepney")
1508 (version "0.4.3")
1509 (source
1510 (origin
1511 (method url-fetch)
1512 (uri (pypi-uri "jeepney" version))
1513 (sha256
1514 (base32 "0vp3p1lqhqk2kd3254q5sxr50znmm2hmysc8a7g0fr1brihvhy9l"))))
1515 (build-system python-build-system)
1516 (native-inputs
1517 `(("python-testpath" ,python-testpath)
1518 ("python-tornado" ,python-tornado)
1519 ("python-pytest" ,python-pytest)))
1520 (home-page "https://gitlab.com/takluyver/jeepney")
1521 (synopsis "Low-level, pure Python DBus protocol wrapper")
1522 (description
1523 "This is a low-level, pure Python DBus protocol client. It has an
1524I/O-free core, and integration modules for different event loops.")
1525 (license license:expat)))
1526
1527(define-public python-argon2-cffi
1528 (package
1529 (name "python-argon2-cffi")
1530 (version "20.1.0")
1531 (source
1532 (origin
1533 (method url-fetch)
1534 (uri (pypi-uri "argon2-cffi" version))
1535 (sha256
1536 (base32
1537 "0zgr4mnnm0p4i99023safb0qb8cgvl202nly1rvylk2b7qnrn0nq"))
1538 (modules '((guix build utils)))
1539 (snippet '(begin (delete-file-recursively "extras") #t))))
1540 (build-system python-build-system)
1541 (arguments
1542 '(#:phases
1543 (modify-phases %standard-phases
1544 (replace 'build
1545 (lambda _
1546 (setenv "ARGON2_CFFI_USE_SYSTEM" "1")
1547 (invoke "python" "setup.py" "build")))
1548 (replace 'check
1549 (lambda* (#:key inputs outputs #:allow-other-keys)
1550 (add-installed-pythonpath inputs outputs)
1551 (invoke "pytest")
1552 (invoke "python" "-m" "argon2" "--help")
1553 ;; see tox.ini
1554 (invoke "python" "-m" "argon2" "-n" "1" "-t" "1" "-m" "8" "-p" "1"))))))
1555 (propagated-inputs
1556 `(("python-cffi" ,python-cffi)
1557 ("python-six" ,python-six)))
1558 (inputs `(("argon2" ,argon2)))
1559 (native-inputs
1560 `(("python-hypothesis" ,python-hypothesis)
1561 ("python-pytest" ,python-pytest)))
1562 (home-page "https://argon2-cffi.readthedocs.io/")
1563 (synopsis "Secure Password Hashes for Python")
1564 (description
1565 "Argon2 is a secure password hashing algorithm. It is designed to have
1566both a configurable runtime as well as memory consumption. This means that you
1567can decide how long it takes to hash a password and how much memory is required.")
1568 (license license:expat)))
1569
1570(define-public python-privy
1571 (package
1572 (name "python-privy")
1573 (version "6.0.0")
1574 (source
1575 (origin
1576 (method git-fetch)
1577 (uri (git-reference
1578 ;; Releases are untagged
1579 (url "https://github.com/ofek/privy")
1580 (commit "2838db3df239797c71bddacc48a4c49a83f35747")))
1581 (file-name (git-file-name name version))
1582 (sha256
1583 (base32
1584 "1m32dh5fqc8cy7jyf1z5fs6zvmdkbq5fi98hr609gbl7s0l0y0i9"))))
1585 (build-system python-build-system)
1586 (arguments
1587 '(#:phases
1588 (modify-phases %standard-phases
1589 (replace 'check
1590 (lambda _
1591 (invoke "python" "-m" "pytest"))))))
1592 (native-inputs
1593 `(("python-pytest" ,python-pytest)))
1594 (propagated-inputs
1595 `(("python-argon2-cffi" ,python-argon2-cffi)
1596 ("python-cryptography" ,python-cryptography)))
1597 (home-page "https://www.dropbox.com/developers")
1598 (synopsis "Library to password-protect your data")
1599 (description
1600 "Privy is a small and fast utility for password-protecting secret
1601data such as API keys, cryptocurrency wallets, or seeds for digital
1602signatures.")
1603 (license (list license:expat license:asl2.0)))) ; dual licensed
1604
1605(define-public python-pgpy
1606 (package
1607 (name "python-pgpy")
1608 (version "0.5.3")
1609 (source
1610 (origin
1611 (method url-fetch)
1612 (uri (pypi-uri "PGPy" version))
1613 (sha256
1614 (base32 "11rrq15gmn6qbahli7czflfcngjl7zyybjlvk732my6axnf2d754"))))
1615 (build-system python-build-system)
1616 (arguments
1617 `(#:phases
1618 (modify-phases %standard-phases
1619 (replace 'check
1620 (lambda* (#:key tests? #:allow-other-keys)
1621 (when tests?
1622 (invoke "pytest")))))))
1623 (native-inputs
1624 `(("python-cryptography" ,python-cryptography)
1625 ("python-pyasn1" ,python-pyasn1)
1626 ("python-pytest" ,python-pytest)
1627 ("python-singledispatch" ,python-singledispatch)
1628 ("python-six" ,python-six)
1629 ("python-wheel" ,python-wheel)))
1630 (home-page "https://github.com/SecurityInnovation/PGPy")
1631 (synopsis "Python implementation of OpenPGP")
1632 (description
1633 "Currently, PGPy can load keys and signatures of all kinds in both ASCII
1634armored and binary formats.
1635
1636It can create and verify RSA, DSA, and ECDSA signatures, at the moment. It
1637can also encrypt and decrypt messages using RSA and ECDH.")
1638 (license license:bsd-3)))
1639
1640(define-public python-sop
1641 (package
1642 (name "python-sop")
1643 (version "0.2.0")
1644 (source
1645 (origin
1646 (method url-fetch)
1647 (uri (pypi-uri "sop" version))
1648 (sha256
1649 (base32
1650 "0gljyjsdn6hdmwlwwb5g5s0c031p6izamvfxp0d39x60af8k5jyf"))))
1651 (build-system python-build-system)
1652 (arguments
1653 '(#:tests? #f)) ; There are no tests, and unittest throws an error trying
1654 ; to find some:
1655 ; TypeError: don't know how to make test from: 0.2.0
1656 (home-page "https://gitlab.com/dkg/python-sop")
1657 (synopsis "Stateless OpenPGP Command-Line Interface")
1658 (description
1659 "The Stateless OpenPGP Command-Line Interface (or sop) is a
1660specification that encourages OpenPGP implementors to provide a common,
1661relatively simple command-line API for purposes of object security.
1662
1663This Python module helps implementers build such a CLI from any implementation
1664accessible to the Python interpreter.
1665
1666It does not provide such an implementation itself -- this is just the
1667scaffolding for the command line, which should make it relatively easy to
1668supply a handful of python functions as methods to a class.")
1669 (license license:expat))) ; MIT license