Bump pycryptodomex from 3.9.8 to 3.11.0

[dependabot]

Bumps pycryptodomex from 3.9.8 to 3.11.0.

Changelog

Sourced from pycryptodomex's changelog.

3.11.0 (8 October 2021) ++++++++++++++++++++++++++

Resolved issues

• GH#512: Especially for very small bit sizes, Crypto.Util.number.getPrime() was occasionally generating primes larger than given the bit size. Thanks to Koki Takahashi.
• GH#552: Correct typing annotations for PKCS115_Cipher.decrypt().
• GH#555: decrypt() method of a PKCS#1v1.5 cipher returned a bytearray instead of bytes.
• GH#557: External DSA domain parameters were accepted even when the modulus (p) was not prime. This affected Crypto.PublicKey.DSA.generate() and Crypto.PublicKey.DSA.construct(). Thanks to Koki Takahashi.

New features

• Added cSHAKE128 and cSHAKE256 (of SHA-3 family). Thanks to Michael Schaffner.
• GH#558: The flag RTLD_DEEPBIND passed to dlopen() is not well supported by address sanitizers <https://github.com/google/sanitizers/issues/611>_. It is now possible to set the environment variable PYCRYPTDOME_DISABLE_DEEPBIND to drop that flag and allow security testing.

3.10.4 (25 September 2021) ++++++++++++++++++++++++++

Resolved issues

• Output of Crypto.Util.number.long_to_bytes() was not always a multiple of blocksize.

3.10.3 (22 September 2021) ++++++++++++++++++++++++++

Resolved issues

• GH#376: Fixed symbol conflict between different versions of libgmp.
• GH#481: Improved robustness of PKCS#1v1.5 decryption against timing attacks.
• GH#506 and GH#509: Fixed segmentation faults on Apple M1 and other Aarch64 SoCs, when the GMP library add accessed via ctypes. Do not use GMP's own sscanf and snprintf routines: instead, use simpler conversion routines.
• GH#510: Workaround for cffi calling ctypes.util.find_library(), which invokes gcc and ld on Linux, considerably slowing down all imports. On certain configurations, that may also leave temporary files behind.
• GH#517: Fix RSAES-OAEP, as it didn't always fail when zero padding was incorrect.

New features

• Added support for SHA-3 hash functions to HMAC.

Other changes

• The Windows wheels of Python 2.7 now require the VS2015 runtime to be installed in the system,

... (truncated)

Commits

• b92494b Bump version
• 016252b Fix #558: add environment variable PYCRYPTODOME_DISABLE_DEEPBIND to help addr...
• 61e1e6b Clarify in the docs that VS2015 redistributable is required for Python 2 on W...
• 36d9bd2 Fixed the issue Crypto.Util.number.getPrime may occasionally generate prime l...
• 4273aff Bump version
• 89e9364 Update Changelog for GH#557
• 6c0944a Fix parameter check in DSA construction
• 0b17e20 Merge branch 'cshake'
• d92998e Some tweaks to the original cSHAKE contribution
• fdc6846 Update changelog, readme and docs
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #28.