PyElliptic

PyElliptic is a high level wrapper for the cryptographic library : OpenSSL. Under the Berkeley software distribution license (see LICENSE).

Python3 compatible. For GNU/Linux and Windows. Require OpenSSL

WARNING

Backward incompatibility in release 1.5.7.

See issue yann2192#39 .

Features

Asymmetric cryptography using Elliptic Curve Cryptography (ECC)

• Key agreement : ECDH
• Digital signatures : ECDSA
• Hybrid encryption : ECIES (like RSA)

Symmetric cryptography

• AES-128 (CBC, OFB, CFB, CTR)
• AES-256 (CBC, OFB, CFB, CTR)
• Blowfish (CFB and CBC)
• RC4

Other

• CSPRNG
• HMAC (using SHA512)
• PBKDF2 (SHA256 and SHA512)

Example

#!/usr/bin/python

from binascii import hexlify

import pyelliptic

# Symmetric encryption
iv = pyelliptic.Cipher.gen_IV('aes-256-cfb')
ctx = pyelliptic.Cipher("secretkey", iv, 1, ciphername='aes-256-cfb')

ciphertext = ctx.update('test1')
ciphertext += ctx.update('test2')
ciphertext += ctx.final()

ctx2 = pyelliptic.Cipher("secretkey", iv, 0, ciphername='aes-256-cfb')
print(ctx2.ciphering(ciphertext))

# Asymmetric encryption
alice = pyelliptic.ECC() # default curve: sect283r1
bob = pyelliptic.ECC(curve='sect571r1')

ciphertext = alice.encrypt("Hello Bob", bob.get_pubkey(),
                           ephemcurve='sect571r1')
print(bob.decrypt(ciphertext))

signature = bob.sign("Hello Alice")
# alice's job :
print(pyelliptic.ECC(pubkey=bob.get_pubkey(),
                     curve='sect571r1').verify(signature, "Hello Alice"))

# ERROR !!!
try:
    key = alice.get_ecdh_key(bob.get_pubkey())
except:
    print("For ECDH key agreement, the keys must be defined on the same curve !")

alice = pyelliptic.ECC(curve='sect571r1')
print(hexlify(alice.get_ecdh_key(bob.get_pubkey())))
print(hexlify(bob.get_ecdh_key(alice.get_pubkey())))