Open Hub
Open Hub

 Settings

1
I Use This!
Very High Activity

Commits : Listings

Analyzed 1 day ago. based on code collected 2 days ago.
Nov 06, 2025 — Nov 06, 2026
Commit Message Contributor Files Modified Lines Added Lines Removed Code Location Date
Read an XMSS or XMSS^MT private key wrapped under the ISARA vendor OIDs, which name the same structures as the legacy form the public key path has always accepted under them - a key pair stored that way was previously half readable.
gefeili
More... 2 months ago
Reject a legacy serialized BDS state whose collections are missing when it is read rather than when it is walked - Java deserialization skips field initializers, so a crafted stream could leave them null and withWOTSDigest() dereferenced them ahead of validate().
gefeili
More... 2 months ago
LMS: equals/hashCode/concurrency hardening
Peter Dettman
More... 2 months ago
Read the stored index of an XMSS^MT private key as a long in XmssKeyUtil.xmssmtCreateKeyStructure - the narrowing cast truncated an index of a tree taller than 32 before the bounds check, so the key was exported at a position it had already signed from.
gefeili
More... 2 months ago
Fix two critical issues.
gefeili
More... 2 months ago
Refactor around XMSS
gefeili
More... 2 months ago
Simplify conditions
gefeili
More... 2 months ago
Refactor in LTreeAddress and HashTreeAddress builder
gefeili
More... 2 months ago
Refactor in WOTSPlus
gefeili
More... 2 months ago
Fix 6 issues
gefeili
More... 2 months ago
Clear the buffered message when init() is called on the promoted XMSS and XMSS^MT signers, so a signer reused across operations no longer signs or verifies bytes absorbed for the previous one.
gefeili
More... 2 months ago
Merge branch 'refs/heads/main' into xmss-promote-crypto-signers-pick
gefeili
More... 2 months ago
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
David Hook
More... 2 months ago
LMSSigner and HSSSigner clear any buffered message on init() and refuse a one-shot generateSignature(byte[]) / verifySignature(byte[], byte[]) call made with a message already absorbed through update(), the refusal preceding the key read so a rejected call spends no one-time key.
David Hook
More... 2 months ago
Remove the one-shot generateSignature(byte[]) / verifySignature(byte[], byte[]) from the promoted XMSS and XMSS^MT signers, which implement org.bouncycastle.crypto.Signer and take the message through update().
gefeili
More... 2 months ago
Merge branch 'main' into xmss-promote-crypto-signers-pick
gefeili
More... 2 months ago
Resolve merge conflicts. Fix issues related XMSS phase 1.
gefeili
More... 2 months ago
Support SM2 client/server credentials in the JSSE provider, relates to github #2416.
royb
More... 2 months ago
Fix LMS exception message
Peter Dettman
More... 2 months ago
SHA-2 performance: keep the message schedule in locals
Peter Dettman
More... 2 months ago
Key Flags are a statement about the key the carrying signature refers to, so a subkey no longer inherits them from the primary key's certificate-wide signatures - a Subkey Binding signature that omits the subpacket now leaves the subkey with no capabilities rather than the primary's, which brings the flags consulted when requiring a signing subkey's embedded PrimaryKeyBinding signature into line with the flags every other capability decision reads.
David Hook
More... 2 months ago
Resolve merge conflicts, update xmss based on issue #2414
gefeili
More... 2 months ago
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
David Hook
More... 2 months ago
Bind the HSS and XMSS^MT private key indices to the traversal state stored beside them, cross-check the XMSS and XMSS^MT root against the BDS state's own copy, carry a checksum over the encoded BDS state bound to the owning key's public seed since its node values cannot be recomputed cheaply, and regenerate the byte-level format documents the state change moves, relates to github #2414.
David Hook
More... 2 months ago
Validate the LMS / HSS private key fields at decode - the HSS level count and index pair, the LMS one-time index and its limit, and the tree cache nodes against their cached children - cross-check a supplied public key against an already-cached root, and stop the single-LMS-key retry in getInstance(byte[]) masking the real parse failure, relates to github #2414.
David Hook
More... 2 months ago
BCJSSE: More logging in ProvAlgorithmConstraints
Peter Dettman
More... 2 months ago
Convert docs/index, docs/releasenotes, docs/specifications and CONTRIBUTORS from hand-edited HTML to GitHub-flavoured markdown, keeping the per-version deep-link anchors and the CONTRIBUTORS address obfuscation intact, and repoint the Ant and shell distribution file lists, the internal links and the contributing guidance at the new names.
David Hook
More... 2 months ago
Restore the Java 1.4 source floor in the EC point-decoding exception messages and sync the hex formatting and empty-encoding guard into the jdk1.2 and j2me ECCurve overlays.
David Hook
More... 2 months ago
Narrow the new opt-out for malformed ASN.1 time content to the one value it was wanted for, the zone-less UTCTime YYMMDDHHMMSS, renaming it org.bouncycastle.asn1.allow_zoneless_utctime: the property has to be set for that value to decode, admits nothing else, and no longer touches GeneralizedTime, whose zone is optional to begin with, plus add the AllowZonelessUTCTimeTest the property's introduction registered but did not include and restore the release note a merge dropped, relates to github #2411.
David Hook
More... 2 months ago
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
David Hook
More... 2 months ago