Credstash Throws RIPEMD160 Error

[andrewkrug]

AttributeError: 'module' object has no attribute 'RIPEMD160'

credstash==1.13.3
cryptography==2.1

CentOS Linux release 7.4.1708 (Core)

[root@329a265ae9c0 ]# credstash
Traceback (most recent call last):
File "/usr/bin/credstash", line 5, in
from pkg_resources import load_entry_point
File "/usr/lib/python2.7/site-packages/pkg_resources.py", line 3007, in
working_set.require(requires)
File "/usr/lib/python2.7/site-packages/pkg_resources.py", line 728, in require
needed = self.resolve(parse_requirements(requirements))
File "/usr/lib/python2.7/site-packages/pkg_resources.py", line 631, in resolve
requirements.extend(dist.requires(req.extras)[::-1])
File "/usr/lib/python2.7/site-packages/pkg_resources.py", line 2489, in requires
dm = self._dep_map
File "/usr/lib/python2.7/site-packages/pkg_resources.py", line 2700, in _dep_map
self.__dep_map = self._compute_dependencies()
File "/usr/lib/python2.7/site-packages/pkg_resources.py", line 2733, in _compute_dependencies
common = frozenset(reqs_for_extra(None))
File "/usr/lib/python2.7/site-packages/pkg_resources.py", line 2730, in reqs_for_extra
if req.marker_fn(override={'extra':extra}):
File "/usr/lib/python2.7/site-packages/_markerlib/markers.py", line 113, in marker_fn
return eval(compiled_marker, environment)
File "", line 1, in
NameError: name 'python_implementation' is not defined

[sjwoodr]

I started getting this error on installations today

[tomyam1]

Got this too.
Seem to be because changes in cryptography 2.1

BACKWARDS INCOMPATIBLE: Whirlpool, RIPEMD160, and UnsupportedExtension have been removed in accordance with our :doc:/api-stability policy.

And this commit which allows to use latest cryptography.

You can use credstash v1.13.2 until this is fixed.

[artburkart]

Downgrading to v1.13.2 didn't resolve it for me. But this did:

pip install -I cryptography==2.0.3

[Hashfyre]

Can confirm that this error is appearing across our apps.
From https://cryptography.io/en/latest/changelog/#v2-1

2.1 - 2017-10-11
FINAL DEPRECATION Python 2.6 support is deprecated, and will be removed in the next release of cryptography.
BACKWARDS INCOMPATIBLE: Whirlpool, RIPEMD160, and UnsupportedExtension have been removed in accordance with our API stability policy.

[evanstachowiak]

Same here.

[jomunoz]

Solution without downgrading the cryptography library:
#176

[mfisher29]

Having same issue:

AttributeError: 'module' object has no attribute 'RIPEMD160'

@jomunoz is that safe though? Assuming these hash methods are there for good reason.

[jomunoz]

@mfisher29 The lines are there to expose what hash methods are supported by the cryptography library.
Since those two has methods are now longer supported, the lines can be removed.
The only downside I could see is for people that were using those hashing methods. But on the other side, the other solution is to lock to a particular version of the cryptography library, missing bug fixes that will be made to that library in the future. There is no complete happy solution.

[acejam]

I came across the same issue today in many of our Docker images. pip install credstash==1.13.2 solved it for me.

[alex]

Hi all, I'm one of the developer of pyca/cryptography.

Is there anything we could have done to have prevented this from breaking credstash suddenly? It's been deprecated for 5 months, so I'd have hoped someone would have seen the warning :-(

[mblakele]

Someone did: #165

Alex, can I ask why these hashes were deprecated? I've been unable to find a reason