Open Hub
Open Hub

 Settings

1
I Use This!
Very High Activity

Commits : Listings

Analyzed about 21 hours ago. based on code collected 2 days ago.
Nov 07, 2025 — Nov 07, 2026
Commit Message Contributor Files Modified Lines Added Lines Removed Code Location Date
SP800SecureRandomBuilder now has a usage example in its javadoc, and the SP 800-90A DRBG javadoc says a nonce is required for full compliance.
David Hook
More... 4 days ago
The BCJSSE delegated task properties are now named by Properties.JSSE_CLIENT_ENABLE_DELEGATED_TASKS and Properties.JSSE_SERVER_ENABLE_DELEGATED_TASKS.
David Hook
More... 4 days ago
Merge branch 'bcjsse_delegated_tasks' into 'main'
David Hook
More... 4 days ago
The jdk1.4 and jdk1.3 BCFKS overlays now zeroize their derived keys, password bytes and plaintext key encodings, the jdk1.4 recovered PBE key is Destroyable, and the jdk1.4 BCFKSStoreTest covers PBE keys and expects a failed load to leave the store as it was.
David Hook
More... 4 days ago
CCMBlockCipher now zeroizes its buffered message and plaintext copies, the AES and DES engines clear their previous key schedule on re-keying, the BCFKS key store zeroizes its derived keys, password bytes and plaintext key encodings and returns a Destroyable PBE key, and BCPBEKey.getEncoded() returns a copy.
David Hook
More... 4 days ago
Added the PKIXCertPathReviewer CRL findings to Arpan Sharma's contributor entry.
David Hook
More... 5 days ago
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
David Hook
More... 5 days ago
PKIXCertPathReviewer now decides a certificate's status only from a complete CRL, refuses a CRL with an unsupported critical extension, and matches indirect CRL entries on the certificate issuer.
David Hook
More... 5 days ago
CMS AuthenticatedData now writes the des-ede3-cbc and rc2-cbc MACs with a zero IV and requires authenticated attributes for a non-zero one, RecipientInformation.getMac() checks the content-type attribute, and the AuthenticatedData javadoc examples use HMAC-SHA256.
David Hook
More... 5 days ago
Hash OpenPGP text-mode bare CR unaltered and stop treating it as a line ending in cleartext signatures, keeping a legacy verify fallback, relates to github #2553.
royb
More... 5 days ago
Hash OpenPGP text-mode bare CR unaltered and stop treating it as a line ending in cleartext signatures, keeping a legacy verify fallback, relates to github #2553.
royb
More... 5 days ago
Fixed PGPCanonicalizedDataGenerator rewrites a bare CR to CRLF in the literal data it writes.
royb
More... 5 days ago
Hash bare CR unaltered in OpenPGP text signatures, keep legacy CR->CRLF verify fallback, relates to github #2553.
royb
More... 5 days ago
The BCJSSE SSLEngine can now delegate handshake work: with org.bouncycastle.jsse.client.enableDelegatedTasks or org.bouncycastle.jsse.server.enableDelegatedTasks set, getDelegatedTask() hands out one task per inbound handshake message (and for the initial ClientHello) that runs its processing and response flight on the caller's thread, with the same mechanism available to non-blocking TlsClientProtocol/TlsServerProtocol subclasses through shouldDeferHandshakeMessage(), hasDeferredHandshake() and processDeferredHandshake(); both properties default to false.
Peter Dettman
More... 5 days ago
The release note for the ML-DSA and ML-KEM private key CHOICE parsing now says the raw forms are recognised by their length before parsing.
David Hook
More... 5 days ago
The certificate, CRL, attribute certificate, PKCS#10, CRMF, CMP, SPKAC and related-certificate signature checks now report a signature their verifier cannot decode as the checked exception they declare, the jdk1.1 and jdk1.3 DSA signers report an unusable key as InvalidKeyException, and the build notes cover keeping the build compatible with OSS-Fuzz.
David Hook
More... 5 days ago
Malformed input to the key factories, PrivateKeyInfo, the CMS SignerInfo, the CMP PKIMessage and PKIHeader, OCSPResponseStatus, RSAKeyParameters, the legacy Dilithium and BIKE private keys, PGPObjectFactory, the DSA signers and key fingerprint, ECNamedDomainParameters, SignerInformation.verify, JcaContentVerifierProviderBuilder and X509CertificateReviewer is now refused with the exceptions those APIs declare, and DERGeneralizedTime writes a time with a fraction of an hour or minute as DER.
David Hook
More... 5 days ago
SM9: hold an encryption user key to one of the KEM and public-key decryption
Gefei Li
More... 5 days ago
Merge branch 'sm9-key-usage-guard' into 'main'
David Hook
More... 5 days ago
CMSTestUtil no longer depends on JUnit, so OSS-Fuzz's CMS fuzzer, which compiles it without JUnit, builds again.
David Hook
More... 5 days ago
The NTRU, Dilithium and BIKE public key decoders now try the raw form BC writes before the draft OCTET STRING form, and the Dilithium and BIKE public key classes check the encoding length.
David Hook
More... 5 days ago
PrivateKeyFactory now recognises the raw ML-DSA and ML-KEM private key forms by their length before parsing, so a raw expanded key whose leading bytes read as a DER header is still read as the raw key.
David Hook
More... 5 days ago
NTRU+ decapsulation now reports a rejected ciphertext as the reference implementation does, and NTRU+ refuses non-canonical ciphertext, secret key and public key encodings.
David Hook
More... 5 days ago
The BC FrodoKEM keys now implement getParams(), returning a NamedParameterSpec naming the parameter set on Java 11 and later, as the ML-KEM keys do, relates to github #2467.
David Hook
More... 6 days ago
The jdk15to18 build now uses the base JcaPGPKeyConverter and an OpenPGPDefaultPolicy that accepts the RFC 9980 algorithms, and ECIESTest only checks SunEC keys where the provider exists.
David Hook
More... 6 days ago
Updated Checkstyle from 9.0 to 14.0.0, relates to github PR #2423.
David Hook
More... 6 days ago
The Ant jdk18+ build now stages the DTLS13KeyUpdateTestSupport helper bctest needs, as jdk15+.xml already does, and the jdk15to18 skill gives the build, build-test, sign, test-signed order with Ant 1.6.5 that the JRE 5 run needs.
David Hook
More... 6 days ago
The first DER encoding of an ASN1Set now caches its sorted copy of the elements only once it is sorted, so a concurrent DER encoding or equals() of the same SET can no longer use it unsorted or part way through the sort.
Peter Dettman
More... 6 days ago
The ASN1Set array constructor now records its own copy of the elements, sorted for a DERSet, as their DER order, rather than the caller's array, relates to github #2550.
Peter Dettman
More... 6 days ago
docs/interoperability.md now gives FrodoKEM and Classic McEliece as standardized in ISO/IEC 18033-2:2006/Amd 2:2026, and Classic McEliece as no longer recommended by BSI and likely to be deprecated.
David Hook
More... 6 days ago