fix(grz-common): drop pynacl, use cryptography for X25519 keygen (#572)

- **fix(grz-common): drop pynacl, use cryptography for X25519 keygen**
- **update uv.lock**

Author: Hoeze

packages/grz-common/pyproject.toml

@@ -16,7 +16,6 @@ dependencies = [
     "boto3 >=1.36,<2",
     "click >=8.2,<9",
     "crypt4gh >=1.8.6,<2",
-    "pynacl >=1.6.2,<2",
     "jsonschema >=4.23.0,<5",
     "pyyaml >=6.0.2,<7",
     "tqdm >=4.66.5,<5",

packages/grz-common/src/grz_common/utils/crypt.py

@@ -13,7 +13,8 @@
 import crypt4gh.header
 import crypt4gh.keys
 import crypt4gh.lib
-from nacl.public import PrivateKey
+from cryptography.hazmat.primitives import serialization
+from cryptography.hazmat.primitives.asymmetric.x25519 import X25519PrivateKey
 from tqdm.auto import tqdm
 
 from ..constants import TQDM_DEFAULTS
@@ -47,7 +48,11 @@ def prepare_c4gh_keys(
         if sender_private_key is not None:
             sk = Crypt4GH.retrieve_private_key(sender_private_key)
         else:
-            sk = bytes(PrivateKey.generate())
+            sk = X25519PrivateKey.generate().private_bytes(
+                encoding=serialization.Encoding.Raw,
+                format=serialization.PrivateFormat.Raw,
+                encryption_algorithm=serialization.NoEncryption(),
+            )
         keys = ((0, sk, crypt4gh.keys.get_public_key(recipient_key_file_path)),)
         return keys