Open Hub
Open Hub

 Settings

1
I Use This!
Very High Activity

Commits : Listings

Analyzed 1 day ago. based on code collected 2 days ago.
Nov 06, 2025 — Nov 06, 2026
Commit Message Contributor Files Modified Lines Added Lines Removed Code Location Date
Make BLS12_381BasicScheme.keyValidate confirm the point's curve is the canonical G1 curve before the subgroup check.
David Hook
More... 3 months ago
Bound the PBKDF2 keyLength in PKCS12PBEUtils.createPBMac1Calculator, the remaining RFC 9579 PBMAC1 call site.
David Hook
More... 3 months ago
added 1.85.2
David Hook
More... 3 months ago
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
David Hook
More... 3 months ago
Restore testComposite as a standalone positive-path test for a modern composite key protecting a ProtectedPKIMessage, dropping the legacy id_alg_composite forged half entirely rather than leaving it commented out - that scenario is already asserted by openssl.test.CompositeKeyTest.testModernCompositeKeyRejectsLegacyCompositeSignature, and the empty-signature forgery against a non-composite key is covered by testForgedComposite in the same suite.
David Hook
More... 3 months ago
Replace both Shamir secret splitting GF(256) implementations with one...
Gefei Li
More... 3 months ago
Merge branch 'shamir-gf-constant-time' into 'main'
Gefei Li
More... 3 months ago
Comment out testComposite
gefeili
More... 3 months ago
Fixed AES CBC256 passing the wrong key size (192 instead of 256) to BaseBlockCipher, which silently derived only a 192 bit key when the cipher was obtained via the id_aes256_CBC OID and initialised with a password-based key, relates to github #2390.
David Hook
More... 3 months ago
Drop the composite-signature component-count check added while re-verifying the modern-key/legacy-signature fix: legacy id_alg_composite never required every declared component to validate per the original composite-keys draft, so requiring the signature's component count to match the key's was incorrect hardening, not a fix; the OID-binding check (reject legacy verification against a modern fixed-algorithm composite key) remains.
David Hook
More... 3 months ago
lockdown of composite key type for legacy phase out
David Hook
More... 3 months ago
Remove creation of legacy generic composite (id_alg_composite) signatures from JcaContentSignerBuilder, deprecating CompositeAlgorithmSpec; verification of existing legacy composite signatures is unaffected but planned for removal next release.
David Hook
More... 3 months ago
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
David Hook
More... 3 months ago
Rename the empty-issuer parse concession to Properties.X509_ALLOW_EMPTY_ISSUER_CERT (org.bouncycastle.x509.allow_empty_issuer_cert) so the flag names the certificate parse path it relaxes, relates to github #2387.
David Hook
More... 3 months ago
Reject malformed RFC 4998 evidence records with ERSException rather than...
Gefei Li
More... 3 months ago
Merge branch 'ers-evidencerecord-size-guard-v2' into 'main'
Gefei Li
More... 3 months ago
Accumulate the ZUC EIA3 mac contribution of each message bit branchlessly, so...
Gefei Li
More... 3 months ago
Merge branch 'alg-zuc-mac-ct-fix-v2' into 'main'
Gefei Li
More... 3 months ago
Announce the LMS tree cache in HSS component keys with an HSS encoding version of 1 rather than inferring it from trailing stream data, which misread multi-level HSS private keys written before the cache existed - version 0 encodings now parse their component keys cache-free, relates to github #2365.
David Hook
More... 3 months ago
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
David Hook
More... 3 months ago
Assert an absent certificate yields a null alias in the PKCS12 alias-consistency test and cite rimuln's PR in the CONTRIBUTORS entry, relates to github #2384 and PR #2385.
David Hook
More... 3 months ago
Closed two list items in CONTRIBUTORS.html that were missing their </li>, so the contributor list renders flat again rather than nesting the 493 entries that follow Eugen Kuleshov and Casey Marshall inside them
gefeili
More... 3 months ago
Correct the BDSStateCodec javadoc's RFC 8391 reference for the BDS algorithm: the authentication-path optimization discussion is section 4.1.9 via [BDS09], not section 7, which is the reference code.
David Hook
More... 3 months ago
Document the LMS and XMSS private key encodings under docs/formats, with worked example keys covering the LMS tree-cache trailer, the binary BDS state, and both PKCS8 wrappings.
David Hook
More... 3 months ago
Add the org.bouncycastle.x509.allow_empty_issuer property to relax the RFC 5280 sec. 4.1.2.4 empty-issuer rejection on the certificate parse path only, for non-PKIX profiles such as libp2p TLS - generation and the reviewer stay strict, relates to github #2387.
David Hook
More... 3 months ago
Merge branch 'xmss-bds-binary-state' into main
David Hook
More... 3 months ago
Remove the XMSS BDS state size property and the generation of the legacy Java-serialized traversal state
gefeili
More... 3 months ago
Merge branch 'main' into xmss-bds-binary-state
gefeili
More... 3 months ago
Carry the XMSS and XMSS^MT BDS traversal state in an ASN.1 CHOICE, tagging the legacy Java serialization [0] and the versioned binary state [1]
gefeili
More... 3 months ago
Look certificate aliases up by key in the PKCS12 keystores rather than pairing the alias and certificate enumerations positionally, as keys() enumerates a copy whose order can diverge from the live table's, relates to github #2384.
David Hook
More... 3 months ago