Pycryptodome

Latest version: v3.22.0

Safety actively analyzes 723177 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 8 of 11

3.5.1

Not secure
++++++++++++++++++++

Resolved issues
---------------

* GH142. Fix mismatch with declaration and definition of addmul128.

3.5.0

Not secure
++++++++++++++++++++

New features
------------
* Import and export of ECC curves in compressed form.
* The initial counter for a cipher in CTR mode can be a byte string
(in addition to an integer).
* Faster PBKDF2 for HMAC-based PRFs (at least 20x for short passwords,
more for longer passwords). Thanks to Christian Heimes for pointing
out the implementation was under-optimized.
* The salt for PBKDF2 can be either a string or bytes (GH67).
* Ciphers and hash functions accept data as `bytearray`, not just
binary strings.
* The old SHA-1 and MD5 hash functions are available even when Python's
own `hashlib` does not include them.

Resolved issues
---------------

* Without libgmp, modular exponentiation (since v3.4.8) crashed
on 32-bit big-endian systems.

Breaks in compatibility
-----------------------

* Removed support for Python < 2.6.

3.4.12

++++++++++++++++++++++++

Resolved issues
---------------

* GH129. pycryptodomex could only be installed via wheels.

3.4.11

Not secure
++++++++++++++++++++++++

Resolved issues
---------------

* GH121. the record list was still not correct due to PEP3147
and __pycache__ directories. Thanks again to John O'Brien.

3.4.10

++++++++++++++++++++++++

Resolved issues
---------------

* When creating ElGamal keys, the generator wasn't a square residue:
ElGamal encryption done with those keys cannot be secure under
the DDH assumption. Thanks to Weikeng Chen.

3.4.9

Not secure
+++++++++++++++++++++++

New features
------------
* More meaningful error messages while importing an ECC key.

Resolved issues
---------------

* GH123 and 125. The SSE2 command line switch was not always passed on 32-bit x86 platforms.
* GH121. The record list (--record) was not always correctly filled for the
pycryptodomex package. Thanks to John W. O'Brien.

Page 8 of 11

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.