No that's totally fair, it's just obnoxious that they standardized a thing
no one actualyl uses.


On Mon, Apr 21, 2014 at 1:40 PM, Paul Kehrer <notifications@github.com>wrote:

> In cryptography/hazmat/backends/openssl/backend.py:
>
> > +            padding_enum = self._lib.RSA_PKCS1_OAEP_PADDING
> > +            if not isinstance(padding._mgf, MGF1):
> > +                raise UnsupportedAlgorithm(
> > +                    "Only MGF1 is supported by this backend",
> > +                    _Reasons.UNSUPPORTED_MGF
> > +                )
> > +
> > +            if not isinstance(padding._mgf._
> algorithm, hashes.SHA1):
> > +                raise UnsupportedAlgorithm(
> > +                    "This backend supports only SHA1 inside MGF1 when "
> > +                    "using OAEP",
> > +                    _Reasons.UNSUPPORTED_HASH
> > +                )
> > +
> > +            if padding._label is not None and padding._label != b"":
> > +                raise ValueError("This backend does not support OAEP labels")
>
> There may be a way to do this in some versions of OpenSSL but I wanted to
> land without it (especially since nobody uses it anyway) first.
>
> —
> Reply to this email directly or view it on GitHub<https://github.com/pyca/cryptography/pull/949/files#r11825211>
> .
>



-- 
"I disapprove of what you say, but I will defend to the death your right to
say it." -- Evelyn Beatrice Hall (summarizing Voltaire)
"The people's good is the highest law." -- Cicero
GPG Key fingerprint: 125F 5C67 DFE9 4084