Tag: python

As a part of a larger effort to design a complex authentication system, the developers asked for an OpenAPI (formerly Swagger) specification for one RESTful API of the system in question. Although it is pretty straightforward to write both in YAML and JSON, we needed validation and it turned out that there is a validation tool that is both easy to install and use!

As discussed earlier, using Crypt4GH with remote keys is a vital ingredient to make the whole ecosystem work and protect sensitive genomic data at rest. A similar issue arises when there is a system - such as a repository platform - that needs to process uploaded Crypt4GH containers. With the latest Crypt4GH 0.12 release the solution has arrived.

Originally working on a YubiKey support for Crypt4GH stream processing library turned out to become a work to fully support GnuPG at least on UNIX platforms. In recent GnuPG versions everything is handled by gpg-agent but an interesting problem arose - how to find its socket when using alternative GnuPG homedir?

Faced with the requirement of computing symmetric key from the result of Elliptic-Curve Diffie-Hellman key exchange according to a specification, the primary ingredient for such calculation is the result itself. Read on to see how Interesting things you may find if you need to use YubiKey's OpenPGP Card application as a foundational component of any solution.

Working on a cryptographic library comes with certain challenges - like testing all the functions with (ideally all) incorrect inputs. In our recent project we leveraged Python's testing framework pytest with its support for coverage reporting to ensure we get to handle various - but very specific - kinds of corrupted input.