build(deps): bump pycryptodome from 3.11.0 to 3.23.0 in /riotbuild

[dependabot]

Bumps pycryptodome from 3.11.0 to 3.19.1.

Release notes

Sourced from pycryptodome's releases.

v3.19.1 - Zeil

Resolved issues

• Fixed a side-channel leakage with OAEP decryption that could be exploited to carry out a Manger attack. Thanks to Hubert Kario.

v3.19.0 - Ulm

New features

• The update() methods of TupleHash128 and TupleHash256 objects can now hash multiple items (byte strings) at once. Thanks to Sylvain Pelissier.
• Added support for ECDH, with Crypto.Protocol.DH.

Resolved issues

• GH#754: due to a bug in cffi, do not use it on Windows with Python 3.12+.

v3.18.0 - Trier

New features

• Added support for DER BOOLEAN encodings.

• The library now compiles on Windows ARM64. Thanks to Niyas Sait.

  Resolved issues

---

• GH#722: nonce attribute was not correctly set for XChaCha20_Poly1305 ciphers. Thanks to Liam Haber.
• GH#728: Workaround for a possible x86 emulator bug in Windows for ARM64.
• GH#739: OID encoding for arc 2 didn't accept children larger than 39. Thanks to James.
• Correctly check that the scalar matches the point when importing an ECC private key.

v3.17.0 - Stuttgart

No release notes provided.

v3.16.0 - Ravensburg

New features

• Build wheels for musl Linux. Thanks to Ben Raz.

Resolved issues

• GH#639: ARC4 now also works with 'keys' as short as 8 bits.
• GH#669: fix segfaults when running in a manylinux2010 i686 image.

Changelog

Sourced from pycryptodome's changelog.

3.19.1 (28 December 2023) ++++++++++++++++++++++++++

Resolved issues

• Fixed a side-channel leakage with OAEP decryption that could be exploited to carry out a Manger attack (CVE-2023-52323). Thanks to Hubert Kario.

3.19.0 (16 September 2023) ++++++++++++++++++++++++++

New features

• The update() methods of TupleHash128 and TupleHash256 objects can now hash multiple items (byte strings) at once. Thanks to Sylvain Pelissier.
• Added support for ECDH, with Crypto.Protocol.DH.

Resolved issues

• GH#754: due to a bug in cffi, do not use it on Windows with Python 3.12+.

3.18.0 (18 May 2023) ++++++++++++++++++++++++++

New features

• Added support for DER BOOLEAN encodings.
• The library now compiles on Windows ARM64. Thanks to Niyas Sait.

Resolved issues

• GH#722: nonce attribute was not correctly set for XChaCha20_Poly1305 ciphers. Thanks to Liam Haber.
• GH#728: Workaround for a possible x86 emulator bug in Windows for ARM64.
• GH#739: OID encoding for arc 2 didn't accept children larger than 39. Thanks to James.
• Correctly check that the scalar matches the point when importing an ECC private key.

3.17.0 (29 January 2023) ++++++++++++++++++++++++++

New features

• Added support for the Counter Mode KDF defined in SP 800-108 Rev 1.
• Reduce the minimum tag length for the EAX cipher to 2 bytes.
• An RSA object has 4 new properties for the CRT coefficients: dp, dq, invq and invq (invp is the same value as the existing u).

Resolved issues

... (truncated)

Commits

• ef270ab Update wheels action
• 3278edd Update changelog and version
• 10e8216 Update PSS verify signature code example.
• 4ec4b85 Bump version
• 0deea1b Use constant-time (faster) padding decoding also for OAEP
• 519e7ae Avoid changing signature of RSA._decrypt() method if possible
• 1aa9dca Update changelog and bump version
• afb5e27 Fix side-channel leakage in RSA decryption
• ee91c67 Update CMAC.py
• 43a466d Fix small "passes" typo.
• Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[crasbe]

@dependabot recreate

[crasbe]

Tested in conjuction with updating ecdsa and pyasn1 as well.

[crasbe]

@dependabot rebase

[dependabot]

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.