3.0 phase 1a: account cryptography (no app change)

README.md

@@ -41,7 +41,8 @@ cd PassMan-Client-Linux
 python3 deb/build_deb.py          # writes build/passman_<version>_all.deb
 ```
 
-Then install it — apt pulls in Tk, cryptography and Pillow from Ubuntu:
+Then install it — apt pulls in Tk, cryptography, Argon2 (`python3-argon2`, in
+the *universe* section, on by default on Ubuntu desktops) and Pillow from Ubuntu:
 
 ```bash
 sudo apt install ./build/passman_*_all.deb

deb/build_deb.py

@@ -53,6 +53,9 @@
     "python3 (>= 3.10)",
     "python3-tk",
     "python3-cryptography",
+    # Argon2id for 3.0 accounts: Ubuntu's python3-cryptography (3.4 on
+    # 22.04, 41 on 24.04) predates it. In universe on both.
+    "python3-argon2",
     "python3-pil",
     "python3-pil.imagetk",
     "fonts-dejavu-core",

deb/tests/test_build_deb.py

@@ -86,7 +86,8 @@ def test_control_file(tree):
     assert fields["Version"] == "9.8.7"
     assert fields["Architecture"] == "all"
     assert int(fields["Installed-Size"]) > 0
-    for dep in ("python3-tk", "python3-cryptography", "python3-pil.imagetk"):
+    for dep in ("python3-tk", "python3-cryptography", "python3-argon2",
+                "python3-pil.imagetk"):
         assert dep in fields["Depends"]
     assert text.endswith("\n")
 

requirements-dev.txt

@@ -1,3 +1,4 @@
 # Development / test dependencies (the app itself needs only requirements.txt)
 -r requirements.txt
 pytest>=8
+argon2-cffi>=21.1    # what Ubuntu's python3-argon2 is; the tests check it agrees with cryptography's Argon2id

requirements.txt

@@ -1,4 +1,5 @@
 # PassMan dependencies. Also needs Tk from the system: sudo apt install python3-tk
 cryptography>=42      # AES-GCM + PBKDF2 vault encryption
+argon2-cffi>=21.1     # Argon2id for 3.0 accounts (Ubuntu: python3-argon2; or cryptography>=44)
 customtkinter>=5.2    # modern UI toolkit
 Pillow>=10            # logo image rendering on the login screen