Commits

Commit history

1. Commits on Nov 1, 2026

   • BCPGOutputStream now writes a first partial body length of at least 512 octets whatever buffer it is given, and BCPGInputStream rejects a shorter one when org.bouncycastle.openpgp.strict_partial_bo…

     Show description for 1c8066d
     dghgit

     committed
     1c8066dView commit details

     Copy full SHA for 1c8066d

     Browse repository at this point

   • Blake2bDigest(byte[], byte[]) now uses the key and the salt and personalization in the parameter block, and an empty key now gives the unkeyed hash.

     dghgit

     committed
     89ca8b9View commit details

     Copy full SHA for 89ca8b9

     Browse repository at this point
2. Commits on Oct 31, 2026

   • X931Signer, ISO9796d2Signer and ISO9796d2PSSSigner now reset on every failed verification, and the ISO 9796-2 Signature implementations report a trailer for a different digest as a SignatureException.

     dghgit

     committed
     bea1963View commit details

     Copy full SHA for bea1963

     Browse repository at this point

   • ISO9796d2PSSSigner now compares the message passed in with the message recovered from the signature.

     dghgit

     committed
     ac39d84View commit details

     Copy full SHA for ac39d84

     Browse repository at this point

   • CMSMalformedContentTest now compiles and runs on the jdk1.4 distribution.

     dghgit

     committed
     72a408dView commit details

     Copy full SHA for 72a408d

     Browse repository at this point

   • The GOST R 34.10 Signature implementations now only verify a signature of exactly the encoded length, 64 bytes or 128 for GOST R 34.10-2012 512 bit.

     dghgit

     committed
     8c611d9View commit details

     Copy full SHA for 8c611d9

     Browse repository at this point

   • BcDefaultDigestProvider now requires the output length of an id-shake128-len or id-shake256-len identifier to be present, positive, a whole number of bytes and at most 4096 bits, and reports anythi…

     Show description for 7cd92c5
     dghgit

     committed
     7cd92c5View commit details

     Copy full SHA for 7cd92c5

     Browse repository at this point

   • KMAC.reset(Memoable) now copies the key, so MACs after the first no longer use the key the target held before, or no key at all, relates to github #2542.

     dghgit

     committed
     79b9b35View commit details

     Copy full SHA for 79b9b35

     Browse repository at this point

   • X509StreamParser.getInstance() and X509Store.getInstance() without a provider now search every registered provider rather than stopping at the first one lacking the service, relates to github #2544.

     dghgit

     committed
     63da515View commit details

     Copy full SHA for 63da515

     Browse repository at this point

   • Blake2bDigest now reads the leaf length, fanout, depth and node offset of the parameter block correctly, Blake2sDigest reads its parameter block unsigned with the full node offset, and the Blake2bD…

     Show description for 555bdae
     dghgit

     committed
     555bdaeView commit details

     Copy full SHA for 555bdae

     Browse repository at this point

   • Base64Encoder and Base32Encoder decode() of part of an array no longer read past the requested range: an empty range now produces nothing and a truncated final block now fails with an IOException, …

     Show description for 7bcee88
     dghgit

     committed
     7bcee88View commit details

     Copy full SHA for 7bcee88

     Browse repository at this point

   • ASN1InputStream, the ASN.1 streaming parsers and the streaming CMS and time-stamped data parsers now report malformed content, including bad BIT STRING encodings in indefinite-length constructions,…

     Show description for 2ce543a
     dghgit

     committed
     2ce543aView commit details

     Copy full SHA for 2ce543a

     Browse repository at this point

   • ECPoint.hashCode() now hashes the coordinate values rather than their field element representation, so equal EC points and keys on custom and generic curves hash equal, relates to github #2545.

     dghgit

     committed
     8cd419cView commit details

     Copy full SHA for 8cd419c

     Browse repository at this point

   • DESedeParameters.isWeakKey now checks every part of a key at a non-zero offset, and isRealEDEKey takes the key length from the offset rather than the array, relates to github #2548.

     dghgit

     committed
     48534f0View commit details

     Copy full SHA for 48534f0

     Browse repository at this point

   • The CMS linear-growth checks now time the small and large inputs alternately, repeat each run to at least 20ms and retry a noisy comparison, so load from parallel test forks no longer fails them.

     dghgit

     committed
     6f09530View commit details

     Copy full SHA for 6f09530

     Browse repository at this point

   • Certificate signature algorithm names no longer come from a non-BouncyCastle provider registered as "BC", and BCJSSE now names the common certificate signature algorithms from the OID, so such a pr…

     Show description for 16f8d3c
     dghgit

     committed
     16f8d3cView commit details

     Copy full SHA for 16f8d3c

     Browse repository at this point

   • PGPObjectFactory.nextObject() now reports a packet of unsupported version as an IOException rather than letting UnsupportedPacketVersionException escape, and a v4 secret key with an unknown S2K typ…

     Show description for e153d31
     dghgit

     committed
     e153d31View commit details

     Copy full SHA for e153d31

     Browse repository at this point

   • NTRU Prime now multiplies polynomials by Karatsuba and reduces each coefficient once through an allocation-free multiply-shift, with SNTRU Prime's inversions folding their small sums directly and i…

     Show description for b3cbdee
     dghgit

     committed
     b3cbdeeView commit details

     Copy full SHA for b3cbdee

     Browse repository at this point

   • KeyGripCalculator now hashes the RSA modulus in the signed form GnuPG uses, so the keygrip matches gpg's, relates to github #2534.

     dghgit

     committed
     c121ebbView commit details

     Copy full SHA for c121ebb

     Browse repository at this point

   • Corrected the CMS authenticated-data parser, CRL generator, ISO 7816-4 padding and DH agreement javadoc and exception messages (PR #2537), relates to github #2526, #2527, #2528, #2529 and #2530.

     dghgit

     committed
     5c6d48dView commit details

     Copy full SHA for 5c6d48d

     Browse repository at this point

   • SExpression.hasLabel() now returns false for an expression starting with a nested expression, or an empty one, rather than throwing, relates to github #2535.

     dghgit

     committed
     f92fb10View commit details

     Copy full SHA for f92fb10

     Browse repository at this point

   • CryptoServicesRegistrar no longer copies a global property onto the calling thread unless that thread already has its own value, so the thread running the static initializer no longer pins the clas…

     Show description for f12f595
     dghgit

     committed
     f12f595View commit details

     Copy full SHA for f12f595

     Browse repository at this point

   • Fixed post-1.4 API use (generics-dependent casts, Integer.valueOf, System.nanoTime, java.util.Arrays.copyOf) in pg, pkix and their tests, synced the jdk1.4 PQCParametersTest, RegressionTest and Par…

     Show description for ef69dc8
     dghgit

     committed
     ef69dc8View commit details

     Copy full SHA for ef69dc8

     Browse repository at this point

   • The BCFKS, GOST R 34.10, DSTU4145, AttributeTypeAndValue, DigestInfo, X9FieldID, X9Curve, qualified certificate, CMS Attribute, IssuerAndSerialNumber and KEKIdentifier, CrlListID, DataGroupHash, CA…

     Show description for a6d6b56
     dghgit

     committed
     a6d6b56View commit details

     Copy full SHA for a6d6b56

     Browse repository at this point

   • Deprecated the BCObjectIdentifiers id_rcd discovery-intent placeholders, removed with the intent field in draft-ietf-lamps-certdiscovery-04.

     dghgit

     committed
     668dc86View commit details

     Copy full SHA for 668dc86

     Browse repository at this point

   • Removed the deprecated LMS/HSS implementation in org.bouncycastle.pqc.crypto.lms, its key handling in org.bouncycastle.pqc.crypto.util and the deprecated pqc.crypto.lms constructors and getters of …

     Show description for fc3da1a
     dghgit

     committed
     fc3da1aView commit details

     Copy full SHA for fc3da1a

     Browse repository at this point

   • Deprecated the Classic McEliece (CMCE) lightweight, parameter, JCA interface and provider classes as now believed unsafe to use, to be removed in a future release.

     dghgit

     committed
     712019cView commit details

     Copy full SHA for 712019c

     Browse repository at this point

   • The PKCS#12 and PKCS#7 types in org.bouncycastle.asn1.pkcs (ContentInfo, SafeBag, CertBag, CRLBag, SecretBag, EncryptedData, Pfx, MacData and the PBE, PBKDF2, PBES2, PBMAC1, RC2, DH, RSA private ke…

     Show description for da08e48
     dghgit

     committed
     da08e48View commit details

     Copy full SHA for da08e48

     Browse repository at this point

   • AttributeCertificateInfo, ECPrivateKey, ECPrivateKeyStructure, OtherName, CertificationRequestInfo and BasicConstraints now take each optional field at most once, in definition order and with its t…

     Show description for a1bdb32
     dghgit

     committed
     a1bdb32View commit details

     Copy full SHA for a1bdb32

     Browse repository at this point
3. Commits on Oct 30, 2026

   • The GOST transport, ECC-CMS-SharedInfo, MQVuserKeyingMaterial, IetfAttrSyntax, SigI PersonalData, ISIS-MTT and X509Extensions SEQUENCE parsers now take each optional field at most once, in definiti…

     Show description for 32f7c86
     dghgit

     committed
     32f7c86View commit details

     Copy full SHA for 32f7c86

     Browse repository at this point

   • CMSAuthenticatedDataParser now marks the unauthenticated attributes as unread so getUnauthAttrs() returns them, and AuthenticatedDataParser.getUnauthAttrs() reads the streamed element as an ASN1Tag…

     Show description for e9f1aba
     dghgit

     committed
     e9f1abaView commit details

     Copy full SHA for e9f1aba

     Browse repository at this point

   • Release note and contributor entry for the Blake2bpDigest.getByteLength() fix, and the block, key, output size and parallelism constants of Blake2bpDigest and Blake2spDigest are now static, relates…

     Show description for 3215d9f
     dghgit

     committed
     3215d9fView commit details

     Copy full SHA for 3215d9f

     Browse repository at this point

   • Merge pull request #2538 from jonelo/fix-blake2bp-getbytelength

     dghgit

     committed
     0d997fdView commit details

     Copy full SHA for 0d997fd

     Browse repository at this point

   • Release note and contributor entry for the GCMBlockCipher counter block reuse, relates to github #2539.

     dghgit

     committed
     ec69413View commit details

     Copy full SHA for ec69413

     Browse repository at this point

   • Merge pull request #2540 from bright-k/perf/gcm-reuse-scratch

     dghgit

     committed
     3b28ed7View commit details

     Copy full SHA for 3b28ed7

     Browse repository at this point