SaQura Python · Upgrade notes
Versions & compatibility — SaQura Python
Before you update
Current version: 1.0.9 · PyPI · saqura (PyPI) · to the documentation
- 1.0.9 is the first and currently only version on PyPI; the number follows the Swift and .NET SDKs. All data is byte-identical to the other SDKs, in both directions.
- License validation is offline only (signature of the .lic file against the built-in public key). There is deliberately no app binding in Python: servers, command-line tools and libraries have no OS-attested app identity.
- Compiled wheels for CPython 3.10 to 3.14 on macOS (Intel and Apple silicon), Linux (x86_64 and ARM64) and Windows x64. Post-quantum algorithms come via the saqura[quantum] extra.
The tables under each version answer the same five questions in the same order. “Drop-in update: yes” means: our cross-platform test corpus has shown that the new version reads the data of the previous one and no call needs to change.
Optional modules
- Extra quantum (pip install "saqura[quantum]"): pulls liboqs-python and enables FrodoKEM, Classic McEliece, ML-KEM, ML-DSA and SLH-DSA. Without the extra, AES, RSA, hybrid, password hashing and license validation are available.
- Windows with post-quantum algorithms: the default build of liboqs-python miscompiles SLH-DSA. After installing the extra, run the bundled helper tools\setup_liboqs_windows.ps1 once; macOS and Linux are not affected.
Licenses & app binding
- The same .lic file as with every SaQura SDK; distribution licenses and unbound standard licenses are accepted. Binding fields are not evaluated.
1.0.9 · 2026-06-25
First release on PyPI
- AES-256-GCM (also reads legacy CBC-with-HMAC ciphertexts), RSA-4096 (OAEP-SHA256, PSS-SHA256), RSA hybrid envelope for large payloads (new and legacy HYBR format), post-quantum KEMs of generations 2 to 8 and ML-DSA / SLH-DSA signatures via liboqs, password hashing PBKDF2-HMAC-SHA512 with 210,000 iterations, offline license validation.
- Async-first (await saqura.aes.encrypt(…)) with a synchronous facade saqura.sync. Wheels ship compiled, without .py source.
| Compatibility | Status | Note |
|---|---|---|
| Data formats (keys, ciphertexts, streams) | baseline | Baseline; byte-identical to the other SDKs. |
| License files (bound / unbound) | baseline | Offline validation; no binding fields. |
| Native libraries / ABI | baseline | Compiled wheels; post-quantum via liboqs-python. |
| R8 / keep rules, trimming / linker | baseline | — |
| Minimum platform | baseline | CPython 3.10 |
| Drop-in update? | Yes | First version. |