48.0.0
Added 1
- Support for ML-KEM key encapsulation and ML-DSA signing when using OpenSSL 3.5.0 or later
Changed 1
- Loading an X.509 CRL whose inner TBSCertList.signature algorithm does not match the outer signatureAlgorithm now raises ValueError instead of being parsed successfully
Removed 1
- Support for Python 3.8 has been removed; cryptography now requires Python 3.9 or later
From cryptography
-
BACKWARDS INCOMPATIBLE: Support for Python 3.8 has been removed.
cryptographynow requires Python 3.9 or later. -
BACKWARDS INCOMPATIBLE: Loading an X.509 CRL whose inner
TBSCertList.signaturealgorithm does not match the outersignatureAlgorithmnow raisesValueError. Previously, such CRLs were parsed successfully and only rejected during signature validation. -
Added support for ML-KEM key encapsulation and ML-DSA signing when using OpenSSL 3.5.0 or later, in addition to the existing AWS-LC and BoringSSL support. This means post-quantum algorithms are now available to users of our wheels.
- Note: Going forward, we do not guarantee that all functionality in
cryptographywill be available when building against OpenSSL. See The State of OpenSSL for pyca/cryptography for more information.
- Note: Going forward, we do not guarantee that all functionality in