OLD | NEW |
(Empty) | |
| 1 Upgrading from older versions |
| 2 ================================================== |
| 3 |
| 4 Previous versions of Python-RSA were less secure than the current |
| 5 version. In order to be able to gradually upgrade your software, those |
| 6 old versions are still available. |
| 7 |
| 8 To use version 1.3.3, use this:: |
| 9 |
| 10 import rsa._version133 as rsa |
| 11 |
| 12 And to use version 2.0, use this:: |
| 13 |
| 14 import rsa._version200 as rsa |
| 15 |
| 16 You can import all three versions at the same time. This allows you to |
| 17 use an old version to decrypt your messages, and a new version to |
| 18 re-encrypt them:: |
| 19 |
| 20 import rsa._version200 as rsa200 |
| 21 import rsa # this imports version 3.0 |
| 22 |
| 23 decrypted = rsa200.decrypt(old_crypto, version_200_private_key) |
| 24 new_crypto = rsa.encrypt(decrypted, version_3_public_key) |
| 25 |
| 26 Those import statements *will create warnings* as they import much |
| 27 less secure code into your project. |
| 28 |
| 29 The random padding introduced in version 3.0 made things much more |
| 30 secure, but also requires a larger key to encrypt the same message. |
| 31 You can either generate a new key with :py:func:`rsa.newkeys`, or use |
| 32 :py:func:`rsa.bigfile.encrypt_bigfile` to encrypt your files. |
| 33 |
| 34 Converting keys |
| 35 -------------------------------------------------- |
| 36 |
| 37 Version 3.0 introduced industrial standard RSA keys according to |
| 38 PKCS#1. The old keys were just dictionaries. To convert a key from an |
| 39 older version of Python-RSA, use the following:: |
| 40 |
| 41 import rsa |
| 42 |
| 43 # Load the old key somehow. |
| 44 old_pub_key = { |
| 45 'e': 65537, |
| 46 'n': 31698122414741849421263704398157795847591L |
| 47 } |
| 48 |
| 49 old_priv_key = { |
| 50 'd': 7506520894712811128876594754922157377793L, |
| 51 'p': 4169414332984308880603L, |
| 52 'q': 7602535963858869797L |
| 53 } |
| 54 |
| 55 # Create new key objects like this: |
| 56 pub_key = rsa.PublicKey(n=old_pub_key['n'], e=old_pub_key['e']) |
| 57 |
| 58 priv_key = rsa.PrivateKey(n=old_pub_key['n'], e=old_pub_key['e'], |
| 59 d=old_priv_key['d'], p=old_priv_key['p'], q=old_priv_key['q']) |
| 60 |
| 61 |
| 62 # Or use this shorter notation: |
| 63 pub_key = rsa.PublicKey(**old_pub_key) |
| 64 |
| 65 old_priv_key.update(old_pub_key) |
| 66 priv_key = rsa.PrivateKey(**old_priv_key) |
| 67 |
OLD | NEW |