[dependabot]

Bumps pycryptodomex from 3.23.0 to 3.24.2.

Release notes

Sourced from pycryptodomex's releases.

v3.24.1 - Frejus

Resolved issues

• Security: the time to create an ECDSA, EdDSA or DSA signature depended on the secret nonce, enough to recover the private key with a lattice attack. DSA signing is now about 40% slower with GMP. Thanks to Daniel Bleichenbacher.

v3.24.0 - Evreux

New features

• Speed up KangarooTwelve by 50% for long messages (1MB or more).
• New parameter threads for Crypto.Hash.KangarooTwelve.new(), to hash long messages on several CPU cores (threads=0 for all of them). The output does not depend on the number of threads.

Resolved issues

• GH#875: Fixed the Object Identifiers (OID) for BLAKE2.
• Fixed a potential DOS attack when decrypting a password-encrypted PKCS#8 key, when the iteration count is enourmous. Decryption will now fail if it exceeds 50M iterations; the limit can be changed or removed via the new max_iteration_count option. Thanks to afldl for reporting.
• Fixed the maximum number of bytes that GCM should encrypt. Thanks to Loganaden Velvindron.
• Fixed ECC operations on 32-bit Windows (x86) wheels: due to a compiler bug in Visual Studio 2022, the modular inversion skipped half of the exponent bits, producing wrong results.
• Fixed a bug in KangarooTwelve in the scenario where customization string is very long (8190 bytes or longer) and the message to hash is empty.

Other changes

• Build Windows wheel with Visual Studio 2022, from Visual Studio 2019.
• Remove support for Python 3.7.

Changelog

Sourced from pycryptodomex's changelog.

3.24.2 (5 November 2026) ++++++++++++++++++++++++++

This release is only for pycryptodomex.

Resolved issues

• GH#958: on Windows with PyPy, native modules built with setuptools 84.2 or newer could not be loaded because they were named .pyd.

Other changes

• Build wheels for PyPy 8.0 (Python 3.11), in addition to PyPy 7.3.

3.24.1 (11 October 2026) ++++++++++++++++++++++++++

Resolved issues

• Security: the time to create an ECDSA, EdDSA or DSA signature depended on the secret nonce, enough to recover the private key with a lattice attack. DSA signing is now about 40% slower with GMP. Thanks to Daniel Bleichenbacher.

3.24.0 (4 October 2026) ++++++++++++++++++++++++++

New features

• Speed up KangarooTwelve by 50% for long messages (1MB or more).
• New parameter threads for Crypto.Hash.KangarooTwelve.new(), to hash long messages on several CPU cores (threads=0 for all of them). The output does not depend on the number of threads.

Resolved issues

• GH#875: Fixed the Object Identifiers (OID) for BLAKE2.
• Fixed a potential DOS attack when decrypting a password-encrypted PKCS#8 key, when the iteration count is enourmous. Decryption will now fail if it exceeds 50M iterations; the limit can be changed or removed via the new max_iteration_count option. Thanks to afldl for reporting.
• Fixed the maximum number of bytes that GCM should encrypt. Thanks to Loganaden Velvindron.
• Fixed ECC operations on 32-bit Windows (x86) wheels: due to a compiler bug in Visual Studio 2022, the modular inversion skipped half of the exponent bits, producing wrong results.
• Fixed a bug in KangarooTwelve in the scenario where customization string is very long (8190 bytes or longer) and the message to hash is empty.
• GH#922: Fixed incorrect verification of an otherwise valid ECDSA signature, when the raw x-coordinate of the computed point is not reduced. Thanks to afldl for reporting and Ville Vesilehto for the fix.

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)