Open Hub
Open Hub

 Settings

1
I Use This!
Very High Activity

Commits : Listings

Analyzed 1 day ago. based on code collected 2 days ago.
Nov 06, 2025 — Nov 06, 2026
Commit Message Contributor Files Modified Lines Added Lines Removed Code Location Date
Locate, open and close the BCJSSE default key/trust stores inside AccessController.doPrivileged, so the FilePermission for the JRE's jssecacerts/cacerts is required of the provider rather than of every protection domain on the call stack.
David Hook
More... 3 months ago
Make NTRU's mod3 and modQ reductions division-free, restoring the reference implementation's fold-and-select and its MODQ mask so the secret operand is not exposed through division latency, with an exhaustive regression test and the Ant bctest include it needs; reported by the Robusta team.
David Hook
More... 3 months ago
Make NTRU's mod3 and modQ reductions division-free, restoring the reference implementation's fold-and-select and its MODQ mask so the secret operand is not exposed through division latency, with an exhaustive regression test and the Ant bctest include it needs; reported by the Robusta team.
David Hook
More... 3 months ago
Add the 1.86 release notes for the HQC and NTRU constant-time fixes and raise the count of acknowledged Robusta findings addressed to 38.
David Hook
More... 3 months ago
Make HQC's GF(2^8) arithmetic table-free and its fixed-weight support sampler branch-free, so neither leaks secret-derived values through cache-line selection or control flow, and add an exhaustive GF regression test with the Ant provider-exclude and bctest-include wiring it needs; reported by the Robusta team.
David Hook
More... 3 months ago
Add the 1.86 release notes for the HQC and NTRU constant-time fixes and raise the count of acknowledged Robusta findings addressed to 38.
David Hook
More... 3 months ago
Make HQC's GF(2^8) arithmetic table-free and its fixed-weight support sampler branch-free, so neither leaks secret-derived values through cache-line selection or control flow, and add an exhaustive GF regression test with the Ant provider-exclude and bctest-include wiring it needs; reported by the Robusta team.
David Hook
More... 3 months ago
Add Properties.EC_MAX_F2M_FIELD_SIZE for the org.bouncycastle.ec.max_f2m_field_size F2m field size bound (CVE-2024-29857) and use it in ECCurve rather than the inlined literal, mirroring the constant into the jdk1.4 overlay.
David Hook
More... 3 months ago
Add Properties.EC_MAX_F2M_FIELD_SIZE for the org.bouncycastle.ec.max_f2m_field_size F2m field size bound (CVE-2024-29857) and use it in ECCurve rather than the inlined literal, mirroring the constant into the jdk1.4 overlay.
David Hook
More... 3 months ago
Record the release-note convention that a CVE-bearing fix is cross-referenced between its defects-fixed entry and the security advisory block, with 1.78 as the worked example.
David Hook
More... 3 months ago
Record the release-note convention that a CVE-bearing fix is cross-referenced between its defects-fixed entry and the security advisory block, with 1.78 as the worked example.
David Hook
More... 3 months ago
Replace non-ASCII typographic characters in javadoc and comments with their ASCII equivalents: U+2010 and U+2011 hyphens, an en dash, and smart quotes and apostrophes.
David Hook
More... 3 months ago
Replace non-ASCII typographic characters in javadoc and comments with their ASCII equivalents: U+2010 and U+2011 hyphens, an en dash, and smart quotes and apostrophes.
David Hook
More... 3 months ago
minor correction
David Hook
More... 3 months ago
minor correction
David Hook
More... 3 months ago
Add missing 1.78 defects-fixed entries for CVE-2024-14041 (KyberSlash) and CVE-2024-29857 (F2m field size), cross-reference every 1.78 advisory CVE from its defects-fixed entry, and credit the Robusta team's constant-time analysis.
David Hook
More... 3 months ago
Add missing 1.78 defects-fixed entries for CVE-2024-14041 (KyberSlash) and CVE-2024-29857 (F2m field size), cross-reference every 1.78 advisory CVE from its defects-fixed entry, and credit the Robusta team's constant-time analysis.
David Hook
More... 3 months ago
Merge branch 'sm9-keyexchange'
David Hook
More... 3 months ago
Merge branch 'sm9-keyexchange'
David Hook
More... 3 months ago
Merge remote-tracking branch 'origin/main' into sm9-keyexchange
David Hook
More... 3 months ago
Merge remote-tracking branch 'origin/main' into sm9-keyexchange
David Hook
More... 3 months ago
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
David Hook
More... 3 months ago
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
David Hook
More... 3 months ago
SM9: follow the generatePrivateKey -> generateUserKey rename in the key exchange test and example - the master-key user-derivation method was renamed on main, leaving the two hid = 0x02 call sites in SM9KeyExchangeTest and SM9KeyExchangeExample on the old name
gefeili
More... 3 months ago
SM9: follow the generatePrivateKey -> generateUserKey rename in the key exchange test and example - the master-key user-derivation method was renamed on main, leaving the two hid = 0x02 call sites in SM9KeyExchangeTest and SM9KeyExchangeExample on the old name
gefeili
More... 3 months ago
Fixed a bug that let arbitrary code execution via the property
royb
More... 3 months ago
Fixed a bug that let arbitrary code execution via the property
royb
More... 3 months ago
Add RFC 9850 (SSLKEYLOGFILE) key logging as a new bctls-klog build of the TLS API, reporting connection secrets to a TlsKeyLog named by the org.bouncycastle.tls.keylog.class security property, with the standard bctls jar carrying only an inert seam
royb
More... 3 months ago
Add RFC 9850 (SSLKEYLOGFILE) key logging as a new bctls-klog build of the TLS API, reporting connection secrets to a TlsKeyLog named by the org.bouncycastle.tls.keylog.class security property, with the standard bctls jar carrying only an inert seam
royb
More... 3 months ago
Add HKDF deriveKey coverage to the JDK 25 KDF provider tests, checking extract-then-expand and extract-only derived AES SecretKeys against deriveData and the RFC 8619 CMS vector
royb
More... 3 months ago