1
I Use This!
Very High Activity

Commits : Listings

Analyzed 1 day ago. based on code collected 2 days ago.
Nov 06, 2025 — Nov 06, 2026
Commit Message Contributor Files Modified Lines Added Lines Removed Code Location Date
PKIX: add regression tests pinning the corrected ReasonsMask.hasNewReasons semantics in both the prov and pkix copies, with legacy-build excludes for the package-private pkix.jcajce test, and release-note the ReasonsMask fixes. More... 4 months ago
Fix ReasonsMask and usage More... 4 months ago
Fix ReasonsMask and usage More... 4 months ago
Salsa20/ChaCha family: fix skip(Long.MIN_VALUE) silently moving nothing while returning as if it had - the negation overflowed back to itself; the move is now split in two so it lands exactly or throws the existing past-zero exception. More... 4 months ago
Salsa20/ChaCha family: fix skip(Long.MIN_VALUE) silently moving nothing while returning as if it had - the negation overflowed back to itself; the move is now split in two so it lands exactly or throws the existing past-zero exception. More... 4 months ago
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java More... 4 months ago
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java More... 4 months ago
CMS: add direct edge-case coverage for the id-shake256-len output-length parsing in CMSUtils.getDigestOutputLength (absent, non-integer, zero, negative, non-octet and beyond-int-range parameters all yield no prediction), ported back from the BC-LTS tree. More... 4 months ago
CMS: add direct edge-case coverage for the id-shake256-len output-length parsing in CMSUtils.getDigestOutputLength (absent, non-integer, zero, negative, non-octet and beyond-int-range parameters all yield no prediction), ported back from the BC-LTS tree. More... 4 months ago
CTR/SIC: bound the full-block-IV counter advance at 2^64 blocks (stateless guard byte plus full-width delta), extend the short-IV range check to the previously unchecked processBlock path, and replace the skip/seekTo increment cascades with a constant-time counter addition - fixing the skip(Long.MIN_VALUE) unbounded spin and the near-Long.MAX_VALUE mid-block overflow. More... 4 months ago
CTR/SIC: bound the full-block-IV counter advance at 2^64 blocks (stateless guard byte plus full-width delta), extend the short-IV range check to the previously unchecked processBlock path, and replace the skip/seekTo increment cascades with a constant-time counter addition - fixing the skip(Long.MIN_VALUE) unbounded spin and the near-Long.MAX_VALUE mid-block overflow. More... 4 months ago
Merge branch 'pr-2359-wrap-length-guards' into 'main' More... 4 months ago
Merge branch 'pr-2359-wrap-length-guards' into 'main' More... 4 months ago
CMS: parse the output length carried in id-shake256-len's parameter in CMSUtils.getDigestOutputLength, so SignerInfoGenerator.getPredictedEncodedLength works for Ed448 with signed attributes (RFC 8419 sec. 3.1) and definite-length SignedData streaming no longer falls back to indefinite-length there. More... 4 months ago
CMS: parse the output length carried in id-shake256-len's parameter in CMSUtils.getDigestOutputLength, so SignerInfoGenerator.getPredictedEncodedLength works for Ed448 with signed attributes (RFC 8419 sec. 3.1) and definite-length SignedData streaming no longer falls back to indefinite-length there. More... 4 months ago
Updated the Claude guidance: UPSTREAM-*.md porting workflow from BC-LTS, CMS AbstractRecipient constraint discipline, enforcement-only stash-the-fix for additive API, core JDK-import rule and its ImportControl enforcement. More... 4 months ago
Machine-enforce core's JDK security surface (SecureRandom, Destroyable, DestroyFailedException only, no javax.crypto) with a checkstyle ImportControl scoped to core/src/main/java. More... 4 months ago
Machine-enforce core's JDK security surface (SecureRandom, Destroyable, DestroyFailedException only, no javax.crypto) with a checkstyle ImportControl scoped to core/src/main/java. More... 4 months ago
Updated the Claude guidance: UPSTREAM-*.md porting workflow from BC-LTS, CMS AbstractRecipient constraint discipline, enforcement-only stash-the-fix for additive API, core JDK-import rule and its ImportControl enforcement. More... 4 months ago
OpenPGP: stop BcAEADUtil's AEAD encrypt stream encrypting chunks in place into a plaintext-sized buffer - size the output buffer from the cipher's getOutputSize() so conforming AEADBlockCipher implementations that buffer differently are safe. More... 4 months ago
OpenPGP: stop BcAEADUtil's AEAD encrypt stream encrypting chunks in place into a plaintext-sized buffer - size the output buffer from the cipher's getOutputSize() so conforming AEADBlockCipher implementations that buffer differently are safe. More... 4 months ago
Credit rootvector2 in CONTRIBUTORS for the SM2 / GOST28147 / DSTU7624 / DESede / RC2 unwrap minimum-length guards (PR #2359) More... 4 months ago
Credit rootvector2 in CONTRIBUTORS for the SM2 / GOST28147 / DSTU7624 / DESede / RC2 unwrap minimum-length guards (PR #2359) More... 4 months ago
Align the SM2 short-ciphertext message with the rest of the lightweight engines More... 4 months ago
Align the SM2 short-ciphertext message with the rest of the lightweight engines More... 4 months ago
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java More... 4 months ago
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java More... 4 months ago
CMS: JceKTSKeyTransRecipient now extends AbstractRecipient, so KTS recipients support the setAllowedContentAlgorithms / setMinimumTagSize constraints like every other recipient type. More... 4 months ago
CMS: JceKTSKeyTransRecipient now extends AbstractRecipient, so KTS recipients support the setAllowedContentAlgorithms / setMinimumTagSize constraints like every other recipient type. More... 4 months ago
EST: stop a close() failure masking the settled 204/404 status in ESTService.getCSRAttributes, relates to github #781. More... 4 months ago