PyPinkSign

Python code for PKI certificate. 공인인증서(공동인증서)를 다루는 파이썬 코드입니다.

Status

Support method

Load personal purpose of PKI a.k.a "NPKI" or "공동인증서 (formerly 공인인증서)"
Encrypt, Decrypt, Sign, Verify (part of Public-key cryptography)
Get Details (Valid date, Serial number, CN)
PKCS#7 sign

Usage example

Load public key file and private key file.

importpypinksignp=pypinksign.PinkSign()
p.load_pubkey(pubkey_path="/path/signCert.der")
p.load_prikey(prikey_path="/path/signPri.key", prikey_password=b"my-0wn-S3cret")
sign=p.sign(b'1') verify=p.verify(sign, b'1') # True

Load specific certificate. (by CN)

importpypinksign# choose_cert function automatically fetch path for certificates# and load certificate which match CN and passpharase for Private Keyp=pypinksign.choose_cert(cn="홍길순", pw=b"i-am-h0ng")
sign=p.sign(b'1') verify=p.verify(sign, b'1') # Trueenvelop=p.pkcs7_signed_msg(b'message') # PKCS7 signed with K-PKI

Load PFX(p12) certificate.

importpypinksign# choose_cert function automatically fetch path for certificates# and load certificate which match DN and passpharase for Private Keyp=pypinksign.PinkSign(p12_path="홍길순.pfx", prikey_password=b"i-am-h0ng")
sign=p.sign(b'1') verify=p.verify(sign, b'1') # Trueenvelop=p.pkcs7_enveloped_msg(b'message') # Envelop with K-PKI - Temporary removed

Requirement & Dependency

Python 3.8 or above
PyASN1 for pyasn1
cryptography for cryptography.hazmat
OpenSSL 1.1.1 or above due to cryptography package

Installation

The easiest way to get PyPinkSign is pip

pip install pypinksign

The current development version can be found at http://github.com/bandoche/pypinksign/tarball/main

Changelog

v0.5.4 (2025-10-17)

Update dependency (cryptography>=46.0.3) to include latest security patches and compatibility updates.
Require OpenSSL 3.0.0 or newer.
Add Python 3.14 support.

v0.5.3 (2025-02-22)

Update dependency (cryptography==44.0.1) to resolves multiple vulnerabilities.
Update dependency (pyasn1==0.6.1) to support recent python versions.
Update cryptography deprecations. (move SEED algo, use not_valid_before/after_utc) (thanks to kerokim)
Drop Python 3.7 support.

v0.5.2 (2024-12-21)

Update dependency (cryptography==42.0.8) to resolves multiple vulnerabilities.

v0.5.1 (2022-11-02)

Update dependency (cryptography==38.0.3) which resolves CVE-2022-3602 and CVE-2022-3786.

v0.5.0 (2022-01-18)

Upgrade dependency. (cryptography==36.0.1)
Fix file handle leakage.

v0.4.5 (2020-12-03)

Fix import path issue. (thanks to Gyong1211)

v0.4.4 (2020-12-03)

Fix CRT related param error.
Remove PyOpenSSL dependency.
Remove old OpenSSL version dependency with pure SEED implementation.
- If SEED algorithm is not supported by local OpenSSL, use python version of SEED algorithm automatically.

v0.4.3 (2020-02-26)

Fix seed_generator to generate bytes.

v0.4.2 (2020-02-26)

Test code fix.

v0.4.1 (2020-02-26)

Add PKCS7 sign message.

v0.4 (2020-02-26)

Drop Python 2 support.
Support Python 3.6 or above.
Add type hinting.
Add test code.
Add PBKDF2 for support PBES2 private key. (by [yongminz])
Add function to inject r (rand num) value to private key.
Update pyasn1 to 0.4.8.
Update cryptography to 2.8.
Update pyOpenSSL to 19.1.0.
Temporary remove enveloping function.

v0.3 (2017-03-14)

Add support for PFX (PKCS 12).
Add PyOpenSSL module for PFX support.
Remove PBKDF1 module.

v0.2.3 (2016-09-19)

Update cryptography dependency version to 1.5.

v0.2.2 (2016-07-25)

You can load private key file from string.
Update Docstring format.

v0.2.1 (2016-06-23)

Bug fix.

v0.2 (2016-06-21)

Add function for get serial number of cert.
Remove README.rst in repository.

v0.1.1 (2015-06-07)

Add README.rst for PyPI.

v0.1 (2015-06-07)

First release.

Thanks to

item4
peio for PBKDF1 code.
youngminz for PBES2 support.
Gyong1211 for v0.4.5
kerokim for v0.5.3

PyPinkSign

Python code for PKI certificate. 공인인증서(공동인증서)를 다루는 파이썬 코드입니다.

Status

Support method

Load personal purpose of PKI a.k.a "NPKI" or "공동인증서 (formerly 공인인증서)"
Encrypt, Decrypt, Sign, Verify (part of Public-key cryptography)
Get Details (Valid date, Serial number, CN)
PKCS#7 sign

Usage example

Load public key file and private key file.

importpypinksignp=pypinksign.PinkSign()
p.load_pubkey(pubkey_path="/path/signCert.der")
p.load_prikey(prikey_path="/path/signPri.key", prikey_password=b"my-0wn-S3cret")
sign=p.sign(b'1') verify=p.verify(sign, b'1') # True

Load specific certificate. (by CN)

importpypinksign# choose_cert function automatically fetch path for certificates# and load certificate which match CN and passpharase for Private Keyp=pypinksign.choose_cert(cn="홍길순", pw=b"i-am-h0ng")
sign=p.sign(b'1') verify=p.verify(sign, b'1') # Trueenvelop=p.pkcs7_signed_msg(b'message') # PKCS7 signed with K-PKI

Load PFX(p12) certificate.

importpypinksign# choose_cert function automatically fetch path for certificates# and load certificate which match DN and passpharase for Private Keyp=pypinksign.PinkSign(p12_path="홍길순.pfx", prikey_password=b"i-am-h0ng")
sign=p.sign(b'1') verify=p.verify(sign, b'1') # Trueenvelop=p.pkcs7_enveloped_msg(b'message') # Envelop with K-PKI - Temporary removed

Requirement & Dependency

Python 3.8 or above
PyASN1 for pyasn1
cryptography for cryptography.hazmat
OpenSSL 1.1.1 or above due to cryptography package

Installation

The easiest way to get PyPinkSign is pip

pip install pypinksign

The current development version can be found at http://github.com/bandoche/pypinksign/tarball/main

Changelog

v0.5.4 (2025-10-17)

Update dependency (cryptography>=46.0.3) to include latest security patches and compatibility updates.
Require OpenSSL 3.0.0 or newer.
Add Python 3.14 support.

v0.5.3 (2025-02-22)

Update dependency (cryptography==44.0.1) to resolves multiple vulnerabilities.
Update dependency (pyasn1==0.6.1) to support recent python versions.
Update cryptography deprecations. (move SEED algo, use not_valid_before/after_utc) (thanks to kerokim)
Drop Python 3.7 support.

v0.5.2 (2024-12-21)

Update dependency (cryptography==42.0.8) to resolves multiple vulnerabilities.

v0.5.1 (2022-11-02)

Update dependency (cryptography==38.0.3) which resolves CVE-2022-3602 and CVE-2022-3786.

v0.5.0 (2022-01-18)

Upgrade dependency. (cryptography==36.0.1)
Fix file handle leakage.

v0.4.5 (2020-12-03)

Fix import path issue. (thanks to Gyong1211)

v0.4.4 (2020-12-03)

Fix CRT related param error.
Remove PyOpenSSL dependency.
Remove old OpenSSL version dependency with pure SEED implementation.
- If SEED algorithm is not supported by local OpenSSL, use python version of SEED algorithm automatically.

v0.4.3 (2020-02-26)

Fix seed_generator to generate bytes.

v0.4.2 (2020-02-26)

Test code fix.

v0.4.1 (2020-02-26)

Add PKCS7 sign message.

v0.4 (2020-02-26)

Drop Python 2 support.
Support Python 3.6 or above.
Add type hinting.
Add test code.
Add PBKDF2 for support PBES2 private key. (by [yongminz])
Add function to inject r (rand num) value to private key.
Update pyasn1 to 0.4.8.
Update cryptography to 2.8.
Update pyOpenSSL to 19.1.0.
Temporary remove enveloping function.

v0.3 (2017-03-14)

Add support for PFX (PKCS 12).
Add PyOpenSSL module for PFX support.
Remove PBKDF1 module.

v0.2.3 (2016-09-19)

Update cryptography dependency version to 1.5.

v0.2.2 (2016-07-25)

You can load private key file from string.
Update Docstring format.

v0.2.1 (2016-06-23)

Bug fix.

v0.2 (2016-06-21)

Add function for get serial number of cert.
Remove README.rst in repository.

v0.1.1 (2015-06-07)

Add README.rst for PyPI.

v0.1 (2015-06-07)

First release.

Thanks to

item4
peio for PBKDF1 code.
youngminz for PBES2 support.
Gyong1211 for v0.4.5
kerokim for v0.5.3

PyPinkSign

Python code for PKI certificate. 공인인증서(공동인증서)를 다루는 파이썬 코드입니다.

Status

Support method

Load personal purpose of PKI a.k.a "NPKI" or "공동인증서 (formerly 공인인증서)"
Encrypt, Decrypt, Sign, Verify (part of Public-key cryptography)
Get Details (Valid date, Serial number, CN)
PKCS#7 sign

Usage example

Load public key file and private key file.

importpypinksignp=pypinksign.PinkSign()
p.load_pubkey(pubkey_path="/path/signCert.der")
p.load_prikey(prikey_path="/path/signPri.key", prikey_password=b"my-0wn-S3cret")
sign=p.sign(b'1') verify=p.verify(sign, b'1') # True

Load specific certificate. (by CN)

importpypinksign# choose_cert function automatically fetch path for certificates# and load certificate which match CN and passpharase for Private Keyp=pypinksign.choose_cert(cn="홍길순", pw=b"i-am-h0ng")
sign=p.sign(b'1') verify=p.verify(sign, b'1') # Trueenvelop=p.pkcs7_signed_msg(b'message') # PKCS7 signed with K-PKI

Load PFX(p12) certificate.

importpypinksign# choose_cert function automatically fetch path for certificates# and load certificate which match DN and passpharase for Private Keyp=pypinksign.PinkSign(p12_path="홍길순.pfx", prikey_password=b"i-am-h0ng")
sign=p.sign(b'1') verify=p.verify(sign, b'1') # Trueenvelop=p.pkcs7_enveloped_msg(b'message') # Envelop with K-PKI - Temporary removed

Requirement & Dependency

Python 3.8 or above
PyASN1 for pyasn1
cryptography for cryptography.hazmat
OpenSSL 1.1.1 or above due to cryptography package

Installation

The easiest way to get PyPinkSign is pip

pip install pypinksign

The current development version can be found at http://github.com/bandoche/pypinksign/tarball/main

Changelog

v0.5.4 (2025-10-17)

Update dependency (cryptography>=46.0.3) to include latest security patches and compatibility updates.
Require OpenSSL 3.0.0 or newer.
Add Python 3.14 support.

v0.5.3 (2025-02-22)

Update dependency (cryptography==44.0.1) to resolves multiple vulnerabilities.
Update dependency (pyasn1==0.6.1) to support recent python versions.
Update cryptography deprecations. (move SEED algo, use not_valid_before/after_utc) (thanks to kerokim)
Drop Python 3.7 support.

v0.5.2 (2024-12-21)

Update dependency (cryptography==42.0.8) to resolves multiple vulnerabilities.

v0.5.1 (2022-11-02)

Update dependency (cryptography==38.0.3) which resolves CVE-2022-3602 and CVE-2022-3786.

v0.5.0 (2022-01-18)

Upgrade dependency. (cryptography==36.0.1)
Fix file handle leakage.

v0.4.5 (2020-12-03)

Fix import path issue. (thanks to Gyong1211)

v0.4.4 (2020-12-03)

Fix CRT related param error.
Remove PyOpenSSL dependency.
Remove old OpenSSL version dependency with pure SEED implementation.
- If SEED algorithm is not supported by local OpenSSL, use python version of SEED algorithm automatically.

v0.4.3 (2020-02-26)

Fix seed_generator to generate bytes.

v0.4.2 (2020-02-26)

Test code fix.

v0.4.1 (2020-02-26)

Add PKCS7 sign message.

v0.4 (2020-02-26)

Drop Python 2 support.
Support Python 3.6 or above.
Add type hinting.
Add test code.
Add PBKDF2 for support PBES2 private key. (by [yongminz])
Add function to inject r (rand num) value to private key.
Update pyasn1 to 0.4.8.
Update cryptography to 2.8.
Update pyOpenSSL to 19.1.0.
Temporary remove enveloping function.

v0.3 (2017-03-14)

Add support for PFX (PKCS 12).
Add PyOpenSSL module for PFX support.
Remove PBKDF1 module.

v0.2.3 (2016-09-19)

Update cryptography dependency version to 1.5.

v0.2.2 (2016-07-25)

You can load private key file from string.
Update Docstring format.

v0.2.1 (2016-06-23)

Bug fix.

v0.2 (2016-06-21)

Add function for get serial number of cert.
Remove README.rst in repository.

v0.1.1 (2015-06-07)

Add README.rst for PyPI.

v0.1 (2015-06-07)

First release.

Thanks to

item4
peio for PBKDF1 code.
youngminz for PBES2 support.
Gyong1211 for v0.4.5
kerokim for v0.5.3

PyPinkSign

Python code for PKI certificate. 공인인증서(공동인증서)를 다루는 파이썬 코드입니다.

Status

Support method

Load personal purpose of PKI a.k.a "NPKI" or "공동인증서 (formerly 공인인증서)"
Encrypt, Decrypt, Sign, Verify (part of Public-key cryptography)
Get Details (Valid date, Serial number, CN)
PKCS#7 sign

Usage example

Load public key file and private key file.

importpypinksignp=pypinksign.PinkSign()
p.load_pubkey(pubkey_path="/path/signCert.der")
p.load_prikey(prikey_path="/path/signPri.key", prikey_password=b"my-0wn-S3cret")
sign=p.sign(b'1') verify=p.verify(sign, b'1') # True

Load specific certificate. (by CN)

importpypinksign# choose_cert function automatically fetch path for certificates# and load certificate which match CN and passpharase for Private Keyp=pypinksign.choose_cert(cn="홍길순", pw=b"i-am-h0ng")
sign=p.sign(b'1') verify=p.verify(sign, b'1') # Trueenvelop=p.pkcs7_signed_msg(b'message') # PKCS7 signed with K-PKI

Load PFX(p12) certificate.

importpypinksign# choose_cert function automatically fetch path for certificates# and load certificate which match DN and passpharase for Private Keyp=pypinksign.PinkSign(p12_path="홍길순.pfx", prikey_password=b"i-am-h0ng")
sign=p.sign(b'1') verify=p.verify(sign, b'1') # Trueenvelop=p.pkcs7_enveloped_msg(b'message') # Envelop with K-PKI - Temporary removed

Requirement & Dependency

Python 3.8 or above
PyASN1 for pyasn1
cryptography for cryptography.hazmat
OpenSSL 1.1.1 or above due to cryptography package

Installation

The easiest way to get PyPinkSign is pip

pip install pypinksign

The current development version can be found at http://github.com/bandoche/pypinksign/tarball/main

Changelog

v0.5.4 (2025-10-17)

Update dependency (cryptography>=46.0.3) to include latest security patches and compatibility updates.
Require OpenSSL 3.0.0 or newer.
Add Python 3.14 support.

v0.5.3 (2025-02-22)

Update dependency (cryptography==44.0.1) to resolves multiple vulnerabilities.
Update dependency (pyasn1==0.6.1) to support recent python versions.
Update cryptography deprecations. (move SEED algo, use not_valid_before/after_utc) (thanks to kerokim)
Drop Python 3.7 support.

v0.5.2 (2024-12-21)

Update dependency (cryptography==42.0.8) to resolves multiple vulnerabilities.

v0.5.1 (2022-11-02)

Update dependency (cryptography==38.0.3) which resolves CVE-2022-3602 and CVE-2022-3786.

v0.5.0 (2022-01-18)

Upgrade dependency. (cryptography==36.0.1)
Fix file handle leakage.

v0.4.5 (2020-12-03)

Fix import path issue. (thanks to Gyong1211)

v0.4.4 (2020-12-03)

Fix CRT related param error.
Remove PyOpenSSL dependency.
Remove old OpenSSL version dependency with pure SEED implementation.
- If SEED algorithm is not supported by local OpenSSL, use python version of SEED algorithm automatically.

v0.4.3 (2020-02-26)

Fix seed_generator to generate bytes.

v0.4.2 (2020-02-26)

Test code fix.

v0.4.1 (2020-02-26)

Add PKCS7 sign message.

v0.4 (2020-02-26)

Drop Python 2 support.
Support Python 3.6 or above.
Add type hinting.
Add test code.
Add PBKDF2 for support PBES2 private key. (by [yongminz])
Add function to inject r (rand num) value to private key.
Update pyasn1 to 0.4.8.
Update cryptography to 2.8.
Update pyOpenSSL to 19.1.0.
Temporary remove enveloping function.

v0.3 (2017-03-14)

Add support for PFX (PKCS 12).
Add PyOpenSSL module for PFX support.
Remove PBKDF1 module.

v0.2.3 (2016-09-19)

Update cryptography dependency version to 1.5.

v0.2.2 (2016-07-25)

You can load private key file from string.
Update Docstring format.

v0.2.1 (2016-06-23)

Bug fix.

v0.2 (2016-06-21)

Add function for get serial number of cert.
Remove README.rst in repository.

v0.1.1 (2015-06-07)

Add README.rst for PyPI.

v0.1 (2015-06-07)

First release.

Thanks to

item4
peio for PBKDF1 code.
youngminz for PBES2 support.
Gyong1211 for v0.4.5
kerokim for v0.5.3

PyPinkSign

Python code for PKI certificate. 공인인증서(공동인증서)를 다루는 파이썬 코드입니다.

Status

Support method

Load personal purpose of PKI a.k.a "NPKI" or "공동인증서 (formerly 공인인증서)"
Encrypt, Decrypt, Sign, Verify (part of Public-key cryptography)
Get Details (Valid date, Serial number, CN)
PKCS#7 sign

Usage example

Load public key file and private key file.

importpypinksignp=pypinksign.PinkSign()
p.load_pubkey(pubkey_path="/path/signCert.der")
p.load_prikey(prikey_path="/path/signPri.key", prikey_password=b"my-0wn-S3cret")
sign=p.sign(b'1') verify=p.verify(sign, b'1') # True

Load specific certificate. (by CN)

importpypinksign# choose_cert function automatically fetch path for certificates# and load certificate which match CN and passpharase for Private Keyp=pypinksign.choose_cert(cn="홍길순", pw=b"i-am-h0ng")
sign=p.sign(b'1') verify=p.verify(sign, b'1') # Trueenvelop=p.pkcs7_signed_msg(b'message') # PKCS7 signed with K-PKI

Load PFX(p12) certificate.

importpypinksign# choose_cert function automatically fetch path for certificates# and load certificate which match DN and passpharase for Private Keyp=pypinksign.PinkSign(p12_path="홍길순.pfx", prikey_password=b"i-am-h0ng")
sign=p.sign(b'1') verify=p.verify(sign, b'1') # Trueenvelop=p.pkcs7_enveloped_msg(b'message') # Envelop with K-PKI - Temporary removed

Requirement & Dependency

Python 3.8 or above
PyASN1 for pyasn1
cryptography for cryptography.hazmat
OpenSSL 1.1.1 or above due to cryptography package

Installation

The easiest way to get PyPinkSign is pip

pip install pypinksign

The current development version can be found at http://github.com/bandoche/pypinksign/tarball/main

Changelog

v0.5.4 (2025-10-17)

Update dependency (cryptography>=46.0.3) to include latest security patches and compatibility updates.
Require OpenSSL 3.0.0 or newer.
Add Python 3.14 support.

v0.5.3 (2025-02-22)

Update dependency (cryptography==44.0.1) to resolves multiple vulnerabilities.
Update dependency (pyasn1==0.6.1) to support recent python versions.
Update cryptography deprecations. (move SEED algo, use not_valid_before/after_utc) (thanks to kerokim)
Drop Python 3.7 support.

v0.5.2 (2024-12-21)

Update dependency (cryptography==42.0.8) to resolves multiple vulnerabilities.

v0.5.1 (2022-11-02)

Update dependency (cryptography==38.0.3) which resolves CVE-2022-3602 and CVE-2022-3786.

v0.5.0 (2022-01-18)

Upgrade dependency. (cryptography==36.0.1)
Fix file handle leakage.

v0.4.5 (2020-12-03)

Fix import path issue. (thanks to Gyong1211)

v0.4.4 (2020-12-03)

Fix CRT related param error.
Remove PyOpenSSL dependency.
Remove old OpenSSL version dependency with pure SEED implementation.
- If SEED algorithm is not supported by local OpenSSL, use python version of SEED algorithm automatically.

v0.4.3 (2020-02-26)

Fix seed_generator to generate bytes.

v0.4.2 (2020-02-26)

Test code fix.

v0.4.1 (2020-02-26)

Add PKCS7 sign message.

v0.4 (2020-02-26)

Drop Python 2 support.
Support Python 3.6 or above.
Add type hinting.
Add test code.
Add PBKDF2 for support PBES2 private key. (by [yongminz])
Add function to inject r (rand num) value to private key.
Update pyasn1 to 0.4.8.
Update cryptography to 2.8.
Update pyOpenSSL to 19.1.0.
Temporary remove enveloping function.

v0.3 (2017-03-14)

Add support for PFX (PKCS 12).
Add PyOpenSSL module for PFX support.
Remove PBKDF1 module.

v0.2.3 (2016-09-19)

Update cryptography dependency version to 1.5.

v0.2.2 (2016-07-25)

You can load private key file from string.
Update Docstring format.

v0.2.1 (2016-06-23)

Bug fix.

v0.2 (2016-06-21)

Add function for get serial number of cert.
Remove README.rst in repository.

v0.1.1 (2015-06-07)

Add README.rst for PyPI.

v0.1 (2015-06-07)

First release.

Thanks to

item4
peio for PBKDF1 code.
youngminz for PBES2 support.
Gyong1211 for v0.4.5
kerokim for v0.5.3

PyPinkSign

Python code for PKI certificate. 공인인증서(공동인증서)를 다루는 파이썬 코드입니다.

Status

Support method

Load personal purpose of PKI a.k.a "NPKI" or "공동인증서 (formerly 공인인증서)"
Encrypt, Decrypt, Sign, Verify (part of Public-key cryptography)
Get Details (Valid date, Serial number, CN)
PKCS#7 sign

Usage example

Load public key file and private key file.

importpypinksignp=pypinksign.PinkSign()
p.load_pubkey(pubkey_path="/path/signCert.der")
p.load_prikey(prikey_path="/path/signPri.key", prikey_password=b"my-0wn-S3cret")
sign=p.sign(b'1') verify=p.verify(sign, b'1') # True

Load specific certificate. (by CN)

importpypinksign# choose_cert function automatically fetch path for certificates# and load certificate which match CN and passpharase for Private Keyp=pypinksign.choose_cert(cn="홍길순", pw=b"i-am-h0ng")
sign=p.sign(b'1') verify=p.verify(sign, b'1') # Trueenvelop=p.pkcs7_signed_msg(b'message') # PKCS7 signed with K-PKI

Load PFX(p12) certificate.

importpypinksign# choose_cert function automatically fetch path for certificates# and load certificate which match DN and passpharase for Private Keyp=pypinksign.PinkSign(p12_path="홍길순.pfx", prikey_password=b"i-am-h0ng")
sign=p.sign(b'1') verify=p.verify(sign, b'1') # Trueenvelop=p.pkcs7_enveloped_msg(b'message') # Envelop with K-PKI - Temporary removed

Requirement & Dependency

Python 3.8 or above
PyASN1 for pyasn1
cryptography for cryptography.hazmat
OpenSSL 1.1.1 or above due to cryptography package

Installation

The easiest way to get PyPinkSign is pip

pip install pypinksign

The current development version can be found at http://github.com/bandoche/pypinksign/tarball/main

Changelog

v0.5.4 (2025-10-17)

Update dependency (cryptography>=46.0.3) to include latest security patches and compatibility updates.
Require OpenSSL 3.0.0 or newer.
Add Python 3.14 support.

v0.5.3 (2025-02-22)

Update dependency (cryptography==44.0.1) to resolves multiple vulnerabilities.
Update dependency (pyasn1==0.6.1) to support recent python versions.
Update cryptography deprecations. (move SEED algo, use not_valid_before/after_utc) (thanks to kerokim)
Drop Python 3.7 support.

v0.5.2 (2024-12-21)

Update dependency (cryptography==42.0.8) to resolves multiple vulnerabilities.

v0.5.1 (2022-11-02)

Update dependency (cryptography==38.0.3) which resolves CVE-2022-3602 and CVE-2022-3786.

v0.5.0 (2022-01-18)

Upgrade dependency. (cryptography==36.0.1)
Fix file handle leakage.

v0.4.5 (2020-12-03)

Fix import path issue. (thanks to Gyong1211)

v0.4.4 (2020-12-03)

Fix CRT related param error.
Remove PyOpenSSL dependency.
Remove old OpenSSL version dependency with pure SEED implementation.
- If SEED algorithm is not supported by local OpenSSL, use python version of SEED algorithm automatically.

v0.4.3 (2020-02-26)

Fix seed_generator to generate bytes.

v0.4.2 (2020-02-26)

Test code fix.

v0.4.1 (2020-02-26)

Add PKCS7 sign message.

v0.4 (2020-02-26)

Drop Python 2 support.
Support Python 3.6 or above.
Add type hinting.
Add test code.
Add PBKDF2 for support PBES2 private key. (by [yongminz])
Add function to inject r (rand num) value to private key.
Update pyasn1 to 0.4.8.
Update cryptography to 2.8.
Update pyOpenSSL to 19.1.0.
Temporary remove enveloping function.

v0.3 (2017-03-14)

Add support for PFX (PKCS 12).
Add PyOpenSSL module for PFX support.
Remove PBKDF1 module.

v0.2.3 (2016-09-19)

Update cryptography dependency version to 1.5.

v0.2.2 (2016-07-25)

You can load private key file from string.
Update Docstring format.

v0.2.1 (2016-06-23)

Bug fix.

v0.2 (2016-06-21)

Add function for get serial number of cert.
Remove README.rst in repository.

v0.1.1 (2015-06-07)

Add README.rst for PyPI.

v0.1 (2015-06-07)

First release.

Thanks to

item4
peio for PBKDF1 code.
youngminz for PBES2 support.
Gyong1211 for v0.4.5
kerokim for v0.5.3

PyPinkSign

Python code for PKI certificate. 공인인증서(공동인증서)를 다루는 파이썬 코드입니다.

Status

Support method

Load personal purpose of PKI a.k.a "NPKI" or "공동인증서 (formerly 공인인증서)"
Encrypt, Decrypt, Sign, Verify (part of Public-key cryptography)
Get Details (Valid date, Serial number, CN)
PKCS#7 sign

Usage example

Load public key file and private key file.

importpypinksignp=pypinksign.PinkSign()
p.load_pubkey(pubkey_path="/path/signCert.der")
p.load_prikey(prikey_path="/path/signPri.key", prikey_password=b"my-0wn-S3cret")
sign=p.sign(b'1') verify=p.verify(sign, b'1') # True

Load specific certificate. (by CN)

importpypinksign# choose_cert function automatically fetch path for certificates# and load certificate which match CN and passpharase for Private Keyp=pypinksign.choose_cert(cn="홍길순", pw=b"i-am-h0ng")
sign=p.sign(b'1') verify=p.verify(sign, b'1') # Trueenvelop=p.pkcs7_signed_msg(b'message') # PKCS7 signed with K-PKI

Load PFX(p12) certificate.

importpypinksign# choose_cert function automatically fetch path for certificates# and load certificate which match DN and passpharase for Private Keyp=pypinksign.PinkSign(p12_path="홍길순.pfx", prikey_password=b"i-am-h0ng")
sign=p.sign(b'1') verify=p.verify(sign, b'1') # Trueenvelop=p.pkcs7_enveloped_msg(b'message') # Envelop with K-PKI - Temporary removed

Requirement & Dependency

Python 3.8 or above
PyASN1 for pyasn1
cryptography for cryptography.hazmat
OpenSSL 1.1.1 or above due to cryptography package

Installation

The easiest way to get PyPinkSign is pip

pip install pypinksign

The current development version can be found at http://github.com/bandoche/pypinksign/tarball/main

Changelog

v0.5.4 (2025-10-17)

Update dependency (cryptography>=46.0.3) to include latest security patches and compatibility updates.
Require OpenSSL 3.0.0 or newer.
Add Python 3.14 support.

v0.5.3 (2025-02-22)

Update dependency (cryptography==44.0.1) to resolves multiple vulnerabilities.
Update dependency (pyasn1==0.6.1) to support recent python versions.
Update cryptography deprecations. (move SEED algo, use not_valid_before/after_utc) (thanks to kerokim)
Drop Python 3.7 support.

v0.5.2 (2024-12-21)

Update dependency (cryptography==42.0.8) to resolves multiple vulnerabilities.

v0.5.1 (2022-11-02)

Update dependency (cryptography==38.0.3) which resolves CVE-2022-3602 and CVE-2022-3786.

v0.5.0 (2022-01-18)

Upgrade dependency. (cryptography==36.0.1)
Fix file handle leakage.

v0.4.5 (2020-12-03)

Fix import path issue. (thanks to Gyong1211)

v0.4.4 (2020-12-03)

Fix CRT related param error.
Remove PyOpenSSL dependency.
Remove old OpenSSL version dependency with pure SEED implementation.
- If SEED algorithm is not supported by local OpenSSL, use python version of SEED algorithm automatically.

v0.4.3 (2020-02-26)

Fix seed_generator to generate bytes.

v0.4.2 (2020-02-26)

Test code fix.

v0.4.1 (2020-02-26)

Add PKCS7 sign message.

v0.4 (2020-02-26)

Drop Python 2 support.
Support Python 3.6 or above.
Add type hinting.
Add test code.
Add PBKDF2 for support PBES2 private key. (by [yongminz])
Add function to inject r (rand num) value to private key.
Update pyasn1 to 0.4.8.
Update cryptography to 2.8.
Update pyOpenSSL to 19.1.0.
Temporary remove enveloping function.

v0.3 (2017-03-14)

Add support for PFX (PKCS 12).
Add PyOpenSSL module for PFX support.
Remove PBKDF1 module.

v0.2.3 (2016-09-19)

Update cryptography dependency version to 1.5.

v0.2.2 (2016-07-25)

You can load private key file from string.
Update Docstring format.

v0.2.1 (2016-06-23)

Bug fix.

v0.2 (2016-06-21)

Add function for get serial number of cert.
Remove README.rst in repository.

v0.1.1 (2015-06-07)

Add README.rst for PyPI.

v0.1 (2015-06-07)

First release.

Thanks to

item4
peio for PBKDF1 code.
youngminz for PBES2 support.
Gyong1211 for v0.4.5
kerokim for v0.5.3

PyPinkSign

Python code for PKI certificate. 공인인증서(공동인증서)를 다루는 파이썬 코드입니다.

Status

Support method

Load personal purpose of PKI a.k.a "NPKI" or "공동인증서 (formerly 공인인증서)"
Encrypt, Decrypt, Sign, Verify (part of Public-key cryptography)
Get Details (Valid date, Serial number, CN)
PKCS#7 sign

Usage example

Load public key file and private key file.

importpypinksignp=pypinksign.PinkSign()
p.load_pubkey(pubkey_path="/path/signCert.der")
p.load_prikey(prikey_path="/path/signPri.key", prikey_password=b"my-0wn-S3cret")
sign=p.sign(b'1') verify=p.verify(sign, b'1') # True

Load specific certificate. (by CN)

importpypinksign# choose_cert function automatically fetch path for certificates# and load certificate which match CN and passpharase for Private Keyp=pypinksign.choose_cert(cn="홍길순", pw=b"i-am-h0ng")
sign=p.sign(b'1') verify=p.verify(sign, b'1') # Trueenvelop=p.pkcs7_signed_msg(b'message') # PKCS7 signed with K-PKI

Load PFX(p12) certificate.

importpypinksign# choose_cert function automatically fetch path for certificates# and load certificate which match DN and passpharase for Private Keyp=pypinksign.PinkSign(p12_path="홍길순.pfx", prikey_password=b"i-am-h0ng")
sign=p.sign(b'1') verify=p.verify(sign, b'1') # Trueenvelop=p.pkcs7_enveloped_msg(b'message') # Envelop with K-PKI - Temporary removed

Requirement & Dependency

Python 3.8 or above
PyASN1 for pyasn1
cryptography for cryptography.hazmat
OpenSSL 1.1.1 or above due to cryptography package

Installation

The easiest way to get PyPinkSign is pip

pip install pypinksign

The current development version can be found at http://github.com/bandoche/pypinksign/tarball/main

Changelog

v0.5.4 (2025-10-17)

Update dependency (cryptography>=46.0.3) to include latest security patches and compatibility updates.
Require OpenSSL 3.0.0 or newer.
Add Python 3.14 support.

v0.5.3 (2025-02-22)

Update dependency (cryptography==44.0.1) to resolves multiple vulnerabilities.
Update dependency (pyasn1==0.6.1) to support recent python versions.
Update cryptography deprecations. (move SEED algo, use not_valid_before/after_utc) (thanks to kerokim)
Drop Python 3.7 support.

v0.5.2 (2024-12-21)

Update dependency (cryptography==42.0.8) to resolves multiple vulnerabilities.

v0.5.1 (2022-11-02)

Update dependency (cryptography==38.0.3) which resolves CVE-2022-3602 and CVE-2022-3786.

v0.5.0 (2022-01-18)

Upgrade dependency. (cryptography==36.0.1)
Fix file handle leakage.

v0.4.5 (2020-12-03)

Fix import path issue. (thanks to Gyong1211)

v0.4.4 (2020-12-03)

Fix CRT related param error.
Remove PyOpenSSL dependency.
Remove old OpenSSL version dependency with pure SEED implementation.
- If SEED algorithm is not supported by local OpenSSL, use python version of SEED algorithm automatically.

v0.4.3 (2020-02-26)

Fix seed_generator to generate bytes.

v0.4.2 (2020-02-26)

Test code fix.

v0.4.1 (2020-02-26)

Add PKCS7 sign message.

v0.4 (2020-02-26)

Drop Python 2 support.
Support Python 3.6 or above.
Add type hinting.
Add test code.
Add PBKDF2 for support PBES2 private key. (by [yongminz])
Add function to inject r (rand num) value to private key.
Update pyasn1 to 0.4.8.
Update cryptography to 2.8.
Update pyOpenSSL to 19.1.0.
Temporary remove enveloping function.

v0.3 (2017-03-14)

Add support for PFX (PKCS 12).
Add PyOpenSSL module for PFX support.
Remove PBKDF1 module.

v0.2.3 (2016-09-19)

Update cryptography dependency version to 1.5.

v0.2.2 (2016-07-25)

You can load private key file from string.
Update Docstring format.

v0.2.1 (2016-06-23)

Bug fix.

v0.2 (2016-06-21)

Add function for get serial number of cert.
Remove README.rst in repository.

v0.1.1 (2015-06-07)

Add README.rst for PyPI.

v0.1 (2015-06-07)

First release.

Thanks to

item4
peio for PBKDF1 code.
youngminz for PBES2 support.
Gyong1211 for v0.4.5
kerokim for v0.5.3

Name		Name	Last commit message	Last commit date
.github/workflows		.github/workflows
pypinksign		pypinksign
.gitignore		.gitignore
.travis.yml		.travis.yml
LICENSE		LICENSE
README.md		README.md
setup.cfg		setup.cfg
setup.py		setup.py

Name		Name	Last commit message	Last commit date
.github/workflows		.github/workflows
pypinksign		pypinksign
.gitignore		.gitignore
.travis.yml		.travis.yml
LICENSE		LICENSE
README.md		README.md
setup.cfg		setup.cfg
setup.py		setup.py

Name		Name	Last commit message	Last commit date
.github/workflows		.github/workflows
pypinksign		pypinksign
.gitignore		.gitignore
.travis.yml		.travis.yml
LICENSE		LICENSE
README.md		README.md
setup.cfg		setup.cfg
setup.py		setup.py

Name		Name	Last commit message	Last commit date
.github/workflows		.github/workflows
pypinksign		pypinksign
.gitignore		.gitignore
.travis.yml		.travis.yml
LICENSE		LICENSE
README.md		README.md
setup.cfg		setup.cfg
setup.py		setup.py

Name		Name	Last commit message	Last commit date
.github/workflows		.github/workflows
pypinksign		pypinksign
.gitignore		.gitignore
.travis.yml		.travis.yml
LICENSE		LICENSE
README.md		README.md
setup.cfg		setup.cfg
setup.py		setup.py

Latest commit

History

Folders and files

Repository files navigation

PyPinkSign

Status

Support method

Usage example

Requirement & Dependency

Installation

Changelog

v0.5.4 (2025-10-17)

v0.5.3 (2025-02-22)

v0.5.2 (2024-12-21)

v0.5.1 (2022-11-02)

v0.5.0 (2022-01-18)

v0.4.5 (2020-12-03)

v0.4.4 (2020-12-03)

v0.4.3 (2020-02-26)

v0.4.2 (2020-02-26)

v0.4.1 (2020-02-26)

v0.4 (2020-02-26)

v0.3 (2017-03-14)

v0.2.3 (2016-09-19)

v0.2.2 (2016-07-25)

v0.2.1 (2016-06-23)

v0.2 (2016-06-21)

v0.1.1 (2015-06-07)

v0.1 (2015-06-07)

Thanks to

See also

About

Topics

Resources

Stars

Watchers

Forks

Releases

Used by

Contributors

Languages

Latest commit

History

Folders and files

Repository files navigation

PyPinkSign

Status

Support method

Usage example

Requirement & Dependency

Installation

Changelog

v0.5.4 (2025-10-17)

v0.5.3 (2025-02-22)

v0.5.2 (2024-12-21)

v0.5.1 (2022-11-02)

v0.5.0 (2022-01-18)

v0.4.5 (2020-12-03)

v0.4.4 (2020-12-03)

v0.4.3 (2020-02-26)

v0.4.2 (2020-02-26)

v0.4.1 (2020-02-26)

v0.4 (2020-02-26)

v0.3 (2017-03-14)

v0.2.3 (2016-09-19)

v0.2.2 (2016-07-25)

v0.2.1 (2016-06-23)

v0.2 (2016-06-21)

v0.1.1 (2015-06-07)

v0.1 (2015-06-07)

Thanks to

See also

About

Topics

Resources

Stars

Watchers

Forks

Releases

Used by