chore(deps): bump pycryptodome from 3.19.0 to 3.20.0

[dependabot[bot]]

Bumps pycryptodome from 3.19.0 to 3.20.0.

Release notes

Sourced from pycryptodome's releases.

v3.20.0 - Amiens

New features

• Added support for TurboSHAKE128 and TurboSHAKE256.
• Added method Crypto.Hash.new() to generate a hash object given a hash name.
• Added support for AES-GCM encryption of PBES2 and PKCS#8 containers.
• Added support for SHA-2 and SHA-3 algorithms in PBKDF2 when creating PBES2 and PKCS#8 containers.
• Export of RSA keys accepts the prot_params dictionary as parameter to control the number of iterations for PBKDF2 and scrypt.
• C unit tests also run on non-x86 architectures.

Resolved issues

• GH#787: Fixed autodetect logic for GCC 14 in combination with LTO.

v3.20.0 - Amiens (pycryptodomex)

New features

• Added support for TurboSHAKE128 and TurboSHAKE256.
• Added method Crypto.Hash.new() to generate a hash object given a hash name.
• Added support for AES-GCM encryption of PBES2 and PKCS#8 containers.
• Added support for SHA-2 and SHA-3 algorithms in PBKDF2 when creating PBES2 and PKCS#8 containers.
• Export of RSA keys accepts the prot_params dictionary as parameter to control the number of iterations for PBKDF2 and scrypt.
• C unit tests also run on non-x86 architectures.

Resolved issues

• GH#787: Fixed autodetect logic for GCC 14 in combination with LTO.

v3.19.1 - Zeil

Resolved issues

• Fixed a side-channel leakage with OAEP decryption that could be exploited to carry out a Manger attack. Thanks to Hubert Kario.

v3.19.1 - Zeil (pycryptodomex)

Resolved issues

• Fixed a side-channel leakage with OAEP decryption that could be exploited to carry out a Manger attack. Thanks to Hubert Kario.

Changelog

Sourced from pycryptodome's changelog.

3.20.0 (9 January 2024) ++++++++++++++++++++++++++

New features

• Added support for TurboSHAKE128 and TurboSHAKE256.
• Added method Crypto.Hash.new() to generate a hash object given a hash name.
• Added support for AES-GCM encryption of PBES2 and PKCS#8 containers.
• Added support for SHA-2 and SHA-3 algorithms in PBKDF2 when creating PBES2 and PKCS#8 containers.
• Export of RSA keys accepts the prot_params dictionary as parameter to control the number of iterations for PBKDF2 and scrypt.
• C unit tests also run on non-x86 architectures.

Resolved issues

• GH#787: Fixed autodetect logic for GCC 14 in combination with LTO.

3.19.1 (28 December 2023) ++++++++++++++++++++++++++

Resolved issues

• Fixed a side-channel leakage with OAEP decryption that could be exploited to carry out a Manger attack (CVE-2023-52323). Thanks to Hubert Kario.

Commits

• b6ab946 Bump version and update changelog
• ebfef94 Update examples
• 03a66b2 Merge branch 'rsa_pkcs8_params'
• df3d9a5 Update requirements-test.txt
• 6f51811 Update Changelog
• a05e61b Update typing for RSA and ECC
• dcb92e2 Update RSA and ECC documentation
• 22b854b Fix typing for PBES and PKCS8
• a14a222 Update the PKCS#8 documentation
• 8677775 Add AES-GCM as PBES2/PKCS8 mode
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)