# when there is no import error then it worked # start the interactive python console and import the Crypto module # now activate your venv and install pycryptodome # install and create a virtual environment in your target folder To install a virtual environment and setup everything, use the following commands: # install python3 and pip3 There, the installed pip packages can be managed for every single project individually. pycrypto and pycryptodome) you can make use of a so called virtual environment. In order to avoid problems with pip packages in different versions or packages that install under the same folder (i.e. Installing different packages under the same folder name can be a common source for errors!įor more information, see. Make sure to uninstall all versions of crypto and pycrypto first, then install pycryptodome: pip3 uninstall cryptoĪll of these three packages get installed to the same folder, named Crypto. You can find the current status of the open security tickets for each package at the Debian security tracker: The CVE is fixed now (thanks for pointing it out!). Pycrypto didn’t release any fix to that vulnerability and no commit was made to the project since Jun 20, 2014. It was assigned the CVE-2013-7459 number.

It allows remote attackers to execute arbitrary code in the python application. Pycrypto is vulnerable to a heap-based buffer overflow in the ALGnew function in block_templace.c. WARNING: Don't use crypto or pycrypto anymore!Īs you can read on this page, the usage of pycrypto is not safe anymore:

Mediaportal python 3