Bump ecdsa from 0.16.0 to 0.16.1 in /util/verification

[dependabot-preview[bot]]

Bumps ecdsa from 0.16.0 to 0.16.1.

Release notes

Sourced from ecdsa's releases.

ecdsa 0.16.1

New API:

• VerifyingKey.precompute() supports lazy argument to delay precomputation to the first time the key is used to verify a signature.

Doc fixes:

• Documentation for the VerifyingKey.precompute() method.

Bug fix:

• Make created signatures correct when the hash used is bigger than the curve order bit size and the curve order is not a multiple of 8 (this affects only users of custom curves or hashes with output larger than 512 bits when used with NIST P-521 curve).

Performance:

• Speed up library load time by calculating the generator point multiplication tables the first time the points are used, not when they are initialised.

Maintenance:

• Include Python 3.9 in CI testing.
• Test coverage for the VerifyingKey.precompute() method.
• Small speed-ups for the test suite.

Changelog

Sourced from ecdsa's changelog.

• Release 0.16.1 (12 Nov 2020)

New API: VerifyingKey.precompute() supports lazy argument to delay precomputation to the first time the key is used to verify a signature.

Doc fixes: Documentation for the VerifyingKey.precompute() method.

Bug fix: Make created signatures correct when the hash used is bigger than the curve order bit size and the curve order is not a multiple of 8 (this affects only users of custom curves or hashes with output larger than 512 bits).

Performance: Speed up library load time by calculating the generator point multiplication tables the first time the points are used, not when they are initialised.

Maintenance: Include Python 3.9 in CI testing. Test coverage for the VerifyingKey.precompute() method. Small speed-ups for the test suite.

• Release 0.16.0 (27 Aug 2020)

New features: Support for reading and writing private keys in PKCS#8 format.

New API: to_pem and to_der now accept new parameter, format, to specify the format of the encoded files, either the dafault, legacy "ssleay", or the new pkcs8 to use PKCS#8. Note that only unencrypted PKCS#8 files are supported. Add allow_truncate to verify in VerifyingKey, it defaults to True, when specified as False, use of large hashes smaller than curves will be disallowed (as it was in 0.14.1 and earlier).

Bug fix: Correctly calculate signatures for private keys equal to n-1. Make PointJacobi and thus SigningKey and VerifyingKey pickleable.

Doc fixes: to_pem functions return bytes not str, document them as such. from_pem and from_pem in SigningKey returns SigningKey, document them as such.

Maintenance: Ensure that version checks will work with Python 4. Format the source with black. Fix uses of assert_ in test suite.

Commits

• 9d5a727 release 0.16.1
• 33d59da Merge pull request #215 from tomato42/fix-truncation
• 23a5b65 Merge pull request #213 from tomato42/precompute-updates
• ccff823 fix truncation of hash input with order bit size not multiple of 8
• 0dc17f0 use smaller parameters for hypothesis tests to make them faster
• e5a6c0b add test coverage for the VerifyingKey.precompute method
• 38e5253 add testing on python 3.9
• fe62ed3 fix doc formatting
• 24abe65 rename _scale_lock to _update_lock
• 20f0051 document VerifyingKey.precompute add lazy option
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Pull request limits (per update run and/or open at any time) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired)

[dependabot-preview[bot]]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.