-
-
Notifications
You must be signed in to change notification settings - Fork 33.1k
gh-134531: use EVP_MAC
API for _hashlib.HMAC
#135235
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
gh-134531: use EVP_MAC
API for _hashlib.HMAC
#135235
Conversation
!buildbot FIPS |
🤖 New build scheduled with the buildbot fleet by @picnixz for commit c444180 🤖 Results will be shown at: https://buildbot.python.org/all/#/grid?branch=refs%2Fpull%2F135235%2Fmerge The command will test the builders whose names match following regular expression: The builders matched are:
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Overall, there is also something I wanted to investigate, namely "is it faster to use SN_* names or LN_* names for OpenSSL" and whether it's better to cache the NID (as it's only used in __repr__
or .name
) or directly cache a const char *
.
I'll need more experiments for this one but this also applies to the existing code where we work with EVP_MD objects instead of caching their properties.
…shlib/evp-mac-134531
…/evp-mac-134531 # Conflicts: # Modules/_hashopenssl.c
I'll split the PR a bit more (some changes can be atomically changed). IOW, I'll first split the changes that I can and then I'll just need to add the OpenSSL 3 path |
…ixz/cpython into feat/hashlib/evp-mac-134531
!buildbot FIPS only |
🤖 New build scheduled with the buildbot fleet by @picnixz for commit 3559f22 🤖 Results will be shown at: https://buildbot.python.org/all/#/grid?branch=refs%2Fpull%2F135235%2Fmerge The command will test the builders whose names match following regular expression: The builders matched are:
|
🤖 New build scheduled with the buildbot fleet by @picnixz for commit 36f26a0 🤖 Results will be shown at: https://buildbot.python.org/all/#/grid?branch=refs%2Fpull%2F135235%2Fmerge If you want to schedule another build, you need to add the 🔨 test-with-refleak-buildbots label again. |
!buildbot FIPS only |
🤖 New build scheduled with the buildbot fleet by @picnixz for commit 36f26a0 🤖 Results will be shown at: https://buildbot.python.org/all/#/grid?branch=refs%2Fpull%2F135235%2Fmerge The command will test the builders whose names match following regular expression: The builders matched are:
|
Just a draft PR for the CI. I'll split the PR tomorrow. Some parts are part of #135234.
This is based on top of #135250 and #135254 so it's a bit messy.