1
I Use This!
Very High Activity

Commits : Listings

Analyzed 1 day ago. based on code collected 2 days ago.
Nov 06, 2025 — Nov 06, 2026
Commit Message Contributor Files Modified Lines Added Lines Removed Code Location Date
EST: stop a close() failure masking the settled 204/404 status in ESTService.getCSRAttributes, relates to github #781. More... 4 months ago
Merge branch 'pg-seipdv2-reland' into 'main' More... 4 months ago
Merge branch 'pg-seipdv2-reland' into 'main' More... 4 months ago
OpenPGP v6 SEIPDv2 AEAD chunkSize is unbounded on decrypt → 1L<<(chunkSize+6)... More... 4 months ago
OpenPGP v6 SEIPDv2 AEAD chunkSize is unbounded on decrypt → 1L<<(chunkSize+6)... More... 4 months ago
SM9: reject non-positive key lengths in SM9KEMGenerator / SM9KEMExtractor -... More... 4 months ago
Merge branch 'sm9-kem-keylen' into 'main' More... 4 months ago
SM9: reject non-positive key lengths in SM9KEMGenerator / SM9KEMExtractor -... More... 4 months ago
Merge branch 'sm9-kem-keylen' into 'main' More... 4 months ago
SM9: consolidate the five per-algorithm SM9 release notes into a single GM/T 0044 family entry - the KEM, KEM JDK-21 API, public-key encryption, signature and key exchange bullets accreted one per merge but all ship in the same release, so they read better as one entry describing the identity-based suite More... 4 months ago
SM9: consolidate the five per-algorithm SM9 release notes into a single GM/T 0044 family entry - the KEM, KEM JDK-21 API, public-key encryption, signature and key exchange bullets accreted one per merge but all ship in the same release, so they read better as one entry describing the identity-based suite More... 4 months ago
Merge remote-tracking branch 'origin/main' into sm9-keyexchange More... 4 months ago
Merge remote-tracking branch 'origin/main' into sm9-keyexchange More... 4 months ago
Merge branch 'sm9-sign' into 'main' More... 4 months ago
Merge branch 'sm9-sign' into 'main' More... 4 months ago
SM9: add the identity-based digital signature algorithm (Signature.SM3withSM9, GM/T 0044.2) More... 4 months ago
SM9: add the identity-based digital signature algorithm (Signature.SM3withSM9, GM/T 0044.2) More... 4 months ago
SM9: add the identity-based key exchange protocol (GM/T 0044.3), completing the GM/T 0044 family More... 4 months ago
SM9: add the identity-based key exchange protocol (GM/T 0044.3), completing the GM/T 0044 family More... 4 months ago
TLS: fall back to the generic RSASSA-PSS signature name (digest via PSSParameterSpec) when an alternate provider such as SunMSCAPI registers no digest-specific PSS algorithm, fixing RSA-PSS CertificateVerify with Windows smart-card (Windows-MY/CPrivateKey) client keys under TLS 1.2 and 1.3 More... 4 months ago
TLS: fall back to the generic RSASSA-PSS signature name (digest via PSSParameterSpec) when an alternate provider such as SunMSCAPI registers no digest-specific PSS algorithm, fixing RSA-PSS CertificateVerify with Windows smart-card (Windows-MY/CPrivateKey) client keys under TLS 1.2 and 1.3 More... 4 months ago
Reshaped SM9Engine to the SM2Engine API pattern (Mode constructor, init/processBlock, ParametersWithRandom), fixed the non-terminating retry loop when stream-mode encrypting an empty message, and classified Cipher.SM9 as pke in generateCbom. More... 4 months ago
Reshaped SM9Engine to the SM2Engine API pattern (Mode constructor, init/processBlock, ParametersWithRandom), fixed the non-terminating retry loop when stream-mode encrypting an empty message, and classified Cipher.SM9 as pke in generateCbom. More... 4 months ago
SM9: encrypt to the recipient's public key rather than master public key + SM9ParameterSpec - Cipher.SM9 in ENCRYPT_MODE now takes the key from SM9EncMasterPublicKey.getUserPublicKey(id), the same recipient key the SM9-KEM encapsulates to, and SM9ParameterSpec is removed; an AlgorithmParameterSpec or a master public key at encrypt init is rejected with a pointer to getUserPublicKey More... 4 months ago
SM9: encrypt to the recipient's public key rather than master public key + SM9ParameterSpec - Cipher.SM9 in ENCRYPT_MODE now takes the key from SM9EncMasterPublicKey.getUserPublicKey(id), the same recipient key the SM9-KEM encapsulates to, and SM9ParameterSpec is removed; an AlgorithmParameterSpec or a master public key at encrypt init is rejected with a pointer to getUserPublicKey More... 4 months ago
SM9: add identity-based public-key encryption (Cipher.SM9, GM/T 0044.4) More... 4 months ago
SM9: add identity-based public-key encryption (Cipher.SM9, GM/T 0044.4) More... 4 months ago
SM9: expose the KEM through the JDK 21 javax.crypto.KEM API as KEM.SM9-KEM, following the ML-KEM KEMSpi pattern (jdk17 overlay, SpiUtil.hasKEM() gated). By default (null spec or withNoKdf) the shared secret is the mechanism's own GM/T 0044.4 KDF output at the requested size - the interoperable form; a KTSParameterSpec KDF can optionally be layered on top for generic use, taking a 256-bit GM/T 0044.4 shared secret as input More... 4 months ago
SM9: implement the Destroyable pattern on the SM9 private keys - destroy() drops the master secret ke / the user key point de and zeroizes the carried identity, isDestroyed() reflects the state, and the secret-bearing operations (getEncoded, generateUserKeyPair, decapsulation) throw IllegalStateException afterwards; a destroyed master key no longer serializes, and the published master public key is unaffected More... 4 months ago
SM9: expose the KEM through the JDK 21 javax.crypto.KEM API as KEM.SM9-KEM, following the ML-KEM KEMSpi pattern (jdk17 overlay, SpiUtil.hasKEM() gated). By default (null spec or withNoKdf) the shared secret is the mechanism's own GM/T 0044.4 KDF output at the requested size - the interoperable form; a KTSParameterSpec KDF can optionally be layered on top for generic use, taking a 256-bit GM/T 0044.4 shared secret as input More... 4 months ago