FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

gh-134531: use `EVP_MAC` API for `_hashlib.HMAC` by picnixz · Pull Request #135235 · python/cpython · GitHub

Repository navigation

gh-134531: use EVP_MAC API for _hashlib.HMAC - #135235

Merged
picnixz merged 63 commits into
python:mainfrom
picnixz:feat/hashopenssl/refactoring-134531
Sep 10, 2025
Merged

picnixz merged 63 commits into
python:mainfrom
picnixz:feat/hashopenssl/refactoring-134531

Conversation

picnixz commented Jun 7, 2025 •
edited
Loading

Copy link
Copy Markdown
Member

Just a draft PR for the CI. I'll split the PR tomorrow. Some parts are part of #135234.

This is based on top of #135250 and #135254 so it's a bit messy.

picnixz commented Jun 7, 2025

Copy link
Copy Markdown
Member Author

!buildbot FIPS

Copy link
Copy Markdown

🤖 New build scheduled with the buildbot fleet by @picnixz for commit c444180 🤖

Results will be shown at:

https://buildbot.python.org/all/#/grid?branch=refs%2Fpull%2F135235%2Fmerge

The command will test the builders whose names match following regular expression: FIPS

The builders matched are:

  • AMD64 CentOS9 FIPS No Builtin Hashes PR
  • AMD64 RHEL8 FIPS Only Blake2 Builtin Hash PR
  • AMD64 RHEL8 FIPS No Builtin Hashes PR
  • AMD64 CentOS9 FIPS Only Blake2 Builtin Hash PR

picnixz left a comment

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

Overall, there is also something I wanted to investigate, namely "is it faster to use SN_* names or LN_* names for OpenSSL" and whether it's better to cache the NID (as it's only used in __repr__ or .name) or directly cache a const char *.

I'll need more experiments for this one but this also applies to the existing code where we work with EVP_MD objects instead of caching their properties.

Comment thread Modules/_hashopenssl.c Outdated
Comment thread Modules/_hashopenssl.c Outdated
Comment thread Modules/_hashopenssl.c Outdated
Comment thread Modules/_hashopenssl.c Outdated
Comment thread Modules/_hashopenssl.c Outdated
Comment thread Modules/_hashopenssl.c Outdated

picnixz commented Aug 22, 2025

Copy link
Copy Markdown
Member Author

I'll split the PR a bit more (some changes can be atomically changed). IOW, I'll first split the changes that I can and then I'll just need to add the OpenSSL 3 path

picnixz marked this pull request as draft August 22, 2025 09:22
picnixz dismissed qmuntal’s stale review August 22, 2025 09:34

changes were addressed

picnixz marked this pull request as ready for review August 22, 2025 09:38

picnixz commented Aug 22, 2025

Copy link
Copy Markdown
Member Author

!buildbot FIPS only

Copy link
Copy Markdown

🤖 New build scheduled with the buildbot fleet by @picnixz for commit 3559f22 🤖

Results will be shown at:

https://buildbot.python.org/all/#/grid?branch=refs%2Fpull%2F135235%2Fmerge

The command will test the builders whose names match following regular expression: FIPS only

The builders matched are:

  • AMD64 RHEL8 FIPS Only Blake2 Builtin Hash PR
  • AMD64 CentOS9 FIPS Only Blake2 Builtin Hash PR

picnixz added the 🔨 test-with-refleak-buildbots Test PR w/ refleak buildbots; report in status section label Sep 9, 2025

Copy link
Copy Markdown

🤖 New build scheduled with the buildbot fleet by @picnixz for commit 36f26a0 🤖

Results will be shown at:

https://buildbot.python.org/all/#/grid?branch=refs%2Fpull%2F135235%2Fmerge

If you want to schedule another build, you need to add the 🔨 test-with-refleak-buildbots label again.

bedevere-bot removed the 🔨 test-with-refleak-buildbots Test PR w/ refleak buildbots; report in status section label Sep 9, 2025

picnixz commented Sep 9, 2025

Copy link
Copy Markdown
Member Author

!buildbot FIPS only

Copy link
Copy Markdown

🤖 New build scheduled with the buildbot fleet by @picnixz for commit 36f26a0 🤖

Results will be shown at:

https://buildbot.python.org/all/#/grid?branch=refs%2Fpull%2F135235%2Fmerge

The command will test the builders whose names match following regular expression: FIPS only

The builders matched are:

  • AMD64 RHEL8 FIPS Only Blake2 Builtin Hash PR
  • AMD64 CentOS9 FIPS Only Blake2 Builtin Hash PR

picnixz merged commit b9c50b4 into python:main Sep 10, 2025
45 checks passed
picnixz deleted the feat/hashopenssl/refactoring-134531 branch September 10, 2025 08:35
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants


Back | FazBrowse Home | New Git URL