Usage of pycrypto

[Lance Bragstad]

The pycrypto library is unmaintained. There is an effort across various OpenStack projects to move away from it and use something else that is better supported [0].

Keystonemiddleware uses pycrypto to encrypt and decrypt things before caching them [1]. At the time of opening this bug report, we can either use the drop-in replacement (pycryptdome [2]) or we can rewrite the crypto stuff in keystonemiddleware to use another supported crypto library (i.e. pyca/cryptography [3])

[0] http://lists.openstack.org/pipermail/openstack-dev/2017-March/113568.html
[1] http://lists.openstack.org/pipermail/openstack-dev/2017-March/114710.html
[2] https://pypi.python.org/pypi/pycryptodome
[3] https://cryptography.io/en/latest/

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/451941

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/451941
Committed: https://git.openstack.org/cgit/openstack/keystonemiddleware/commit/?id=e23cb36ac03c5e3a368cb8c493927cf8babc8dbc
Submitter: Jenkins
Branch: master

commit e23cb36ac03c5e3a368cb8c493927cf8babc8dbc
Author: Tin Lam <email address hidden>
Date: Thu Mar 30 13:17:44 2017 -0500

    Replace pycrypto with cryptography

    The pycrypto library is unmaintained, and keystonemiddleware currently
    uses pycrypto to encrypt and decrpyt things before caching them.
    This patch set removes the pycrypto dependency and updates the code
    to use the cryptography library. See [1]. Replacing the cryptographic
    library is backward compatible. See [2].

    [1] http://lists.openstack.org/pipermail/openstack-dev/2017-March/113568.html
    [2] http://paste.openstack.org/show/610186/

    Change-Id: Iced7f5115e49ccf4f7f5bf6813cb5988b95c248b
    Closes-Bug: #1677308

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/keystonemiddleware 4.16.0 release.