chore(deps): bump ecdsa from 0.16.1 to 0.18.0

[dependabot[bot]]

Bumps ecdsa from 0.16.1 to 0.18.0.

Release notes

Sourced from ecdsa's releases.

ecdsa 0.18.0

New features:

• Support for EdDSA (Ed25519, Ed448) signature creation and verification.
• Support for Ed25519 and Ed448 in PKCS#8 and public key files.
• Support for point precomputation for EdDSA.

New API:

• CurveEdTw class to represent the Twisted Edwards curve parameters.
• PointEdwards class to represent points on Twisted Edwards curve and provide point arithmetic on it.
• curve_by_name in curves module to get a Curve object by providing curve name.

Bug fix:

• Accept private EdDSA keys that include public key in the ASN.1 structure.
• Fix incompatibility with Python 3.3 in handling of memoryviews of empty strings.
• Make the VerifyingKey encoded with explicit parameters use the same kind of point encoding for public key and curve generator.
• Better handling of malformed curve parameters (as in CVE-2022-0778); make python-ecdsa raise MalformedPointError instead of AssertionError.

Doc fix:

• Publish the documentation on https://ecdsa.readthedocs.io/, include explanation of basics of handling of ECC data formats and how to use the library for elliptic curve arithmetic.
• Make object names more consistent, make them into hyperlinks on the readthedocs documentation.
• Make security note more explicit (Ian Rodney)
• Fix the explicit vs named_curve confusion in VerifyingKey docs.

Maintenance:

• Fix few typos (thanks to Tim Gates and Kian Meng Ang).
• Updated black version; slight changes to formatting
• Include interoperability tests for Ed25519 and Ed448 with OpenSSL.

ecdsa 0.18.0 beta2

changes since 0.18.0-beta1

New features:

• Support for point precomputation for EdDSA.

Maintenance:

... (truncated)

Changelog

Sourced from ecdsa's changelog.

• Release 0.18.0 (09 Jul 2022)

New API:

• curve_by_name in curves module to get a Curve object by providing curve name.

Bug fix:

• Make the VerifyingKey encoded with explicit parameters use the same kind of point encoding for public key and curve generator.
• Better handling of malformed curve parameters (as in CVE-2022-0778); make python-ecdsa raise MalformedPointError instead of AssertionError.

Doc fix:

• Publish the documentation on https://ecdsa.readthedocs.io/, include explanation of basics of handling of ECC data formats and how to use the library for elliptic curve arithmetic.
• Make object names more consistent, make them into hyperlinks on the readthedocs documentation.
• Make security note more explicit (Ian Rodney)
• Fix the explicit vs named_curve confusion in VerifyingKey docs.

Maintenance:

• Updated black version; slight changes to formatting

• Include interoperability tests for Ed25519 and Ed448 with OpenSSL.

• Release 0.18.0-beta2 (05 Jan 2022)

New features:

• Support for point precomputation for EdDSA.

Maintenance:

• Fix few typos (thanks to Tim Gates and Kian Meng Ang).

Bug fix:

• Accept private EdDSA keys that include public key in the ASN.1 structure.

• Fix incompatibility with Python 3.3 in handling of memoryviews of empty strings.

• Release 0.18.0-beta1 (03 Aug 2021)

New features:

• Support for EdDSA (Ed25519, Ed448) signature creation and verification.
• Support for Ed25519 and Ed448 in PKCS#8 and public key files.

New API:

• CurveEdTw class to represent the Twisted Edwards curve parameters.

• PointEdwards class to represent points on Twisted Edwards curve and provide point arithmetic on it.

• Release 0.17.0 (27 May 2021)

... (truncated)

Commits

• 341e0d8 Release 0.18.0
• ada68f8 fix typo in source index
• af3d97c Merge pull request #303 from tlsfuzzer/equation-fix
• 534eb3d fixup the curve equation
• 3a8bc4e Merge pull request #290 from tomato42/docs-updates
• 1943ef3 fixup formatting in keys module
• 4d9ed5d Expand quickstart - add basic operations
• 0d26993 expand on ECC basics
• 5151271 ec arithmetic additions
• f08f04d document that EdDSA is supported too
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov-commenter]

Codecov Report

Merging #2788 (3de46ac) into develop (66e3ae7) will increase coverage by 0.20%. The diff coverage is 97.42%.

:exclamation: Current head 3de46ac differs from pull request most recent head 6d276eb. Consider uploading reports for the commit 6d276eb to get more accurate results

@@             Coverage Diff             @@
##           develop    #2788      +/-   ##
===========================================
+ Coverage    97.96%   98.17%   +0.20%     
===========================================
  Files          522      535      +13     
  Lines        36498    37280     +782     
===========================================
+ Hits         35757    36599     +842     
+ Misses         741      681      -60     

Flag	Coverage Δ
unittests	98.17% <97.42%> (+0.20%)	:arrow_up:

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files	Coverage Δ
aea/aea.py	100.00% <ø> (ø)
aea/agent.py	100.00% <ø> (ø)
aea/cli/add.py	100.00% <ø> (ø)
aea/cli/add_key.py	100.00% <ø> (ø)
aea/cli/build.py	100.00% <ø> (ø)
aea/cli/delete.py	100.00% <ø> (ø)
aea/cli/generate_key.py	100.00% <ø> (ø)
aea/cli/get_multiaddress.py	100.00% <ø> (ø)
aea/cli/get_wealth.py	100.00% <ø> (ø)
aea/cli/publish.py	100.00% <ø> (ø)
... and 185 more

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.