Open Hub
Open Hub

 Settings

1
I Use This!
Very High Activity

Commits : Listings

Analyzed 1 day ago. based on code collected 2 days ago.
Nov 06, 2025 — Nov 06, 2026
Commit Message Contributor Files Modified Lines Added Lines Removed Code Location Date
Added 1.86 release note and CONTRIBUTORS credit for the OpenPGP brainpool key-pair generator methods
gefeili
More... 3 months ago
Drive the brainpool key-pair generator tests from one assertion helper per algorithm, and assert the RFC 9580 sec. 11.5.1 per-curve ECDH KDF hash and KEK algorithm for the brainpool and NIST curves alike
gefeili
More... 3 months ago
Use {@code} rather than the block-level <pre> for inline javadoc in PGPKeyPairGenerator, which forced a line break mid-sentence in the rendered docs
gefeili
More... 3 months ago
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
David Hook
More... 3 months ago
Remove the Rainbow implementation under pqc.legacy.rainbow and the dangling Rainbow entry in the BCPQC provider's algorithm list; Rainbow was a NIST round-three finalist that was not selected for standardisation and its JCE-side support was removed earlier.
David Hook
More... 3 months ago
Regenerate the OpenSSH test key vectors with a neutral comment and mark both test classes as deliberately published vectors, so the keys no longer carry the generating user and host name and a scanner alert has something to find, relates to github #2376.
David Hook
More... 3 months ago
Initial push for SMAUG-T
Gefei Li
More... 3 months ago
Merge branch 'kpqc-smaugt-v2' into 'main'
David Hook
More... 3 months ago
Merge branch 'sm9-lightweight-examples' into 'main'
Gefei Li
More... 3 months ago
SM9: add lightweight-API examples for the signature, KEM and public key encryption algorithms
Gefei Li
More... 3 months ago
Remove the Picnic implementation under pqc.legacy.picnic and its BCPQC provider support, along with the hardcoded Picnic branch in BouncyCastleProvider.getPublicKey; Picnic was a NIST round-three alternate that was not selected for standardisation.
David Hook
More... 3 months ago
SM9: assert the remaining official GM/T 0044.5 values, add the GM/T 0081-2020 message-syntax OIDs
Gefei Li
More... 3 months ago
Merge branch 'sm9-vector-coverage-v2' into 'main'
David Hook
More... 3 months ago
Clear the public key on an XMSS and XMSS^MT signing init and open verifySignature with an IllegalStateException when the signer was not initialised for verification, leaving the private key in place so getUpdatedPrivateKey still works after a verification init.
David Hook
More... 3 months ago
Clear both keys on HSSSigner and LMSSigner init and report use in the uninitialised mode, so a signer re-inited for verification no longer signs with the private key left over from a previous init.
David Hook
More... 3 months ago
Guard the RDN first-element lookup in AbstractX500NameStyle.calculateHashCode as equals and toString already do, and mark X500Name's hash calculated only once the value is in hand, so an empty RDN SET no longer throws from hashCode and a throwing style no longer leaves it returning zero.
David Hook
More... 3 months ago
Reject a second ASCII-armor checksum line, per RFC 9580 sec. 6.2, so a repeated one cannot drive ArmoredInputStream.read() into unbounded self-recursion.
David Hook
More... 3 months ago
Fold a session-key pad count that runs past the end of the buffer into PGPPad.unpadSessionData's constant-time reject, and refuse a buffer too short to hold one, so a crafted ECDH-wrapped session key cannot raise an unchecked exception.
David Hook
More... 3 months ago
Bound the depth of nested multipart content both S/MIME canonicalisers will descend with the new org.bouncycastle.mime.max_depth property, so the sender-controlled nesting of an inbound multipart/signed cannot exhaust the stack.
David Hook
More... 3 months ago
Share one header split and Content-Type interpretation across the three mime.Headers constructors, reporting a malformed header block as the declared IOException, accepting a bare RFC 2046 boundary and setting the content type field the String constructor was shadowing.
David Hook
More... 3 months ago
Report an out-of-range or overflowing CHOICE tag, an unimplemented CHOICE tag class, an oversized length determinant and a malformed extension presence bitmap as IOException, and guard the ENUM label lookup behind the debug check, so OER decoding cannot raise an unchecked exception past its declared contract.
David Hook
More... 3 months ago
Start the DTLS reassembly scan from a binary search and bound the number of tracked ranges, so a peer sending fragments at alternating offsets cannot make reassembly quadratic in the message length.
David Hook
More... 3 months ago
Mirror Streams.readLenBytesFully into the j2me overlay, which base DefiniteLengthInputStream already calls.
David Hook
More... 3 months ago
Read the wire-declared length in TlsUtils.readFully and readAllOrNothing through Streams.readLenBytesFully, so a length prefix cannot size an allocation before the bytes behind it have arrived.
David Hook
More... 3 months ago
Relocate the lightweight Hawk and CRYSTALS-Dilithium implementations to org.bouncycastle.pqc.legacy, alongside the other legacy PQC families, and bring the j2me javadoc package list back into step with the tree.
David Hook
More... 3 months ago
Remove BCPQC provider support for Hawk and CRYSTALS-Dilithium, along with the BC key-info converters for the Hawk OIDs and the unreferenced asymmetric.Dilithium mappings left over from the 1.85 round-3 removal.
David Hook
More... 3 months ago
Remove the deprecated FrodoKEM under pqc.crypto.frodo and its BCPQC provider support, as flagged for 1.86 in the 1.85 release notes; the ISO/IEC 18033-2 FrodoKEM under org.bouncycastle.crypto registered in the BC provider replaces it.
David Hook
More... 3 months ago
Remove the deprecated XWingPrivateKeyParameters constructor taking the pqc.crypto.mlkem key parameters, so X-Wing no longer depends on the deprecated ML-KEM package.
David Hook
More... 3 months ago
Exclude the c509 certificate tests from the jdk1.4 and jdk1.3 builds, mirroring the main-source exclude those builds already carry, so bctest stops failing to compile against the C509 and CBOR classes those distributions leave out.
David Hook
More... 3 months ago
Mirror OPENSSH_MAX_ROUNDS into the jdk1.4 Properties overlay, which the base OpenSSHPrivateKeyUtil is compiled against in the jdk1.4 and jdk1.3 distributions, so build1-4 compiles again.
David Hook
More... 3 months ago