Bump hass-nabucasa to avoid the performance penalty loading ecdsa

[bdraco]

Proposed change

The ecdsa module which is used by jose via cloud does it calculations
in pure python. The latest python-jose release no longer loads ecdsa
if cryptography is available.

This shaved another second off of startup time.

On a basic install:

Home Assistant initialized in 7.93s -> Home Assistant initialized in 6.82s

Type of change

• Dependency upgrade
• Bugfix (non-breaking change which fixes an issue)
• New integration (thank you!)
• New feature (which adds functionality to an existing integration)
• Breaking change (fix/feature causing existing functionality to break)
• Code quality improvements to existing code or addition of tests

Example entry for configuration.yaml:

# Example configuration.yaml

Additional information

• This PR fixes or closes issue: fixes #
• This PR is related to issue:
• Link to documentation pull request:

Checklist

• The code change is tested and works locally.
• Local tests pass. Your PR cannot be merged unless tests pass
• There is no commented out code in this PR.
• I have followed the development checklist
• The code has been formatted using Black (black --fast homeassistant tests)
• Tests have been added to verify that the new code works.

If user exposed functionality or configuration variables are added/changed:

• Documentation added/updated for www.home-assistant.io

If the code communicates with devices, web services, or third-party tools:

• The manifest file has all fields filled out correctly.
  Updated and included derived files by running: python3 -m script.hassfest.
• New or updated dependencies have been added to requirements_all.txt.
  Updated by running python3 -m script.gen_requirements_all.
• Untested files have been added to .coveragerc.

The integration reached or maintains the following Integration Quality Scale:

• No score or internal
• 🥈 Silver
• 🥇 Gold
• 🏆 Platinum

[bdraco]

apk add gmp-dev mpfr-dev mpc1-dev gcc musl-dev

I assume we need pre-built wheels to make this work?

[pvizeli]

We do not use this libs because we use cryptography. The question is, why they there...
https://pypi.org/project/python-jose/

[bdraco]

It looks like the cryptography backend still uses ecdsa via jose/backends/cryptography_backend.py

try:
    from ecdsa import SigningKey as EcdsaSigningKey, VerifyingKey as EcdsaVerifyingKey
except ImportError:
    EcdsaSigningKey = EcdsaVerifyingKey = None

  File "/usr/src/homeassistant/homeassistant/components/cloud/__init__.py", line 4, in <module>
    from hass_nabucasa import Cloud
  File "/usr/local/lib/python3.8/site-packages/hass_nabucasa/__init__.py", line 12, in <module>
    from jose import jwt
  File "/usr/local/lib/python3.8/site-packages/jose/jwt.py", line 13, in <module>
    from jose import jws
  File "/usr/local/lib/python3.8/site-packages/jose/jws.py", line 11, in <module>
    from jose import jwk
  File "/usr/local/lib/python3.8/site-packages/jose/jwk.py", line 10, in <module>
    from jose.backends.base import Key
  File "/usr/local/lib/python3.8/site-packages/jose/backends/__init__.py", line 3, in <module>
    from jose.backends.cryptography_backend import CryptographyRSAKey as RSAKey  # noqa: F401
  File "/usr/local/lib/python3.8/site-packages/jose/backends/cryptography_backend.py", line 8, in <module>
    from ecdsa import SigningKey as EcdsaSigningKey, VerifyingKey as EcdsaVerifyingKey
  File "/usr/local/lib/python3.8/site-packages/ecdsa/__init__.py", line 1, in <module>
    from .keys import SigningKey, VerifyingKey, BadSignatureError, BadDigestError,\
  File "/usr/local/lib/python3.8/site-packages/ecdsa/keys.py", line 72, in <module>
    from . import ecdsa
  File "/usr/local/lib/python3.8/site-packages/ecdsa/ecdsa.py", line 61, in <module>

[bdraco]

Seems better to fix this upstream.

mpdavis/python-jose#178

[pvizeli]

Yeah, cryptography is allready high optimize and running in C with openssl with is better optimize as ecdsa with the gmp helper.

[bdraco]

Update chain

• python-jose: Avoid loading python-ecdsa when using the cryptography backend mpdavis/python-jose#178
• pycognito: Bump python-jose to 3.2.0 to avoid loading ecdsa NabuCasa/pycognito#15
• hass-nabucasa: Bump pycognito to 0.1.4 NabuCasa/hass-nabucasa#176

[bdraco]

Just the hass-nabucasa change left, and this can move forward.