Open Hub
Open Hub

 Settings

1
I Use This!
Very High Activity

Commits : Listings

Analyzed about 11 hours ago. based on code collected 1 day ago.
Nov 07, 2025 — Nov 07, 2026
Commit Message Contributor Files Modified Lines Added Lines Removed Code Location Date
SM9: implement the Destroyable pattern on the SM9 private keys - destroy() drops the master secret ke / the user key point de and zeroizes the carried identity, isDestroyed() reflects the state, and the secret-bearing operations (getEncoded, generateUserKeyPair, decapsulation) throw IllegalStateException afterwards; a destroyed master key no longer serializes, and the published master public key is unaffected
gefeili
More... 4 months ago
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
David Hook
More... 4 months ago
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
David Hook
More... 4 months ago
Classify the SM9-ENC master keypair asset as kem in the generateCbom inventory.
David Hook
More... 4 months ago
Classify the SM9-ENC master keypair asset as kem in the generateCbom inventory.
David Hook
More... 4 months ago
Added SM9EncMasterPrivateKey and SM9EncMasterPublicKey interfaces for SM9 user key derivation, replacing the SM9UserKeyParameterSpec KeyPairGenerator path, and minimised visibility in the sm9 provider package.
David Hook
More... 4 months ago
Added SM9EncMasterPrivateKey and SM9EncMasterPublicKey interfaces for SM9 user key derivation, replacing the SM9UserKeyParameterSpec KeyPairGenerator path, and minimised visibility in the sm9 provider package.
David Hook
More... 4 months ago
Revert "OpenPGP v6 SEIPDv2 AEAD chunkSize is unbounded on decrypt → 1L<<(chunkSize+6) buffer: chunkSize 24 → 1 GiB alloc (memory-DoS), 25 → NegativeArraySizeException. Concrete sibling asymmetry: v5 AEADEncDataPacket:51 has if (chunkSize > 16) throw (CVE-2026-3505) but v6 SymmetricEncIntegrityPacket:54 reads chunkSize=in.read() with no bound — the missed sibling. Attacker needs only the recipient's public key."
gefeili
More... 4 months ago
Revert "OpenPGP v6 SEIPDv2 AEAD chunkSize is unbounded on decrypt → 1L<<(chunkSize+6) buffer: chunkSize 24 → 1 GiB alloc (memory-DoS), 25 → NegativeArraySizeException. Concrete sibling asymmetry: v5 AEADEncDataPacket:51 has if (chunkSize > 16) throw (CVE-2026-3505) but v6 SymmetricEncIntegrityPacket:54 reads chunkSize=in.read() with no bound — the missed sibling. Attacker needs only the recipient's public key."
gefeili
More... 4 months ago
OpenPGP v6 SEIPDv2 AEAD chunkSize is unbounded on decrypt → 1L<<(chunkSize+6) buffer: chunkSize 24 → 1 GiB alloc (memory-DoS), 25 → NegativeArraySizeException. Concrete sibling asymmetry: v5 AEADEncDataPacket:51 has if (chunkSize > 16) throw (CVE-2026-3505) but v6 SymmetricEncIntegrityPacket:54 reads chunkSize=in.read() with no bound — the missed sibling. Attacker needs only the recipient's public key.
gefeili
More... 4 months ago
OpenPGP v6 SEIPDv2 AEAD chunkSize is unbounded on decrypt → 1L<<(chunkSize+6) buffer: chunkSize 24 → 1 GiB alloc (memory-DoS), 25 → NegativeArraySizeException. Concrete sibling asymmetry: v5 AEADEncDataPacket:51 has if (chunkSize > 16) throw (CVE-2026-3505) but v6 SymmetricEncIntegrityPacket:54 reads chunkSize=in.read() with no bound — the missed sibling. Attacker needs only the recipient's public key.
gefeili
More... 4 months ago
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
David Hook
More... 4 months ago
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
David Hook
More... 4 months ago
Merge branch 'cbom-lightweight-api'
David Hook
More... 4 months ago
Merge branch 'cbom-lightweight-api'
David Hook
More... 4 months ago
Extended the generateCbom lightweight sweep to standalone parameterised algorithms (Elephant, ISAP, Photon-Beetle, Romulus, Schwaemm, cSHAKE, SHA-512/t - one asset per named variant), distinguishing generic constructions by primitive-taking constructors instead of missing no-arg constructors, and moved the lightweight-sweep release note from the shipped 1.85 block to 1.86.
David Hook
More... 4 months ago
Extended the generateCbom lightweight sweep to standalone parameterised algorithms (Elephant, ISAP, Photon-Beetle, Romulus, Schwaemm, cSHAKE, SHA-512/t - one asset per named variant), distinguishing generic constructions by primitive-taking constructors instead of missing no-arg constructors, and moved the lightweight-sweep release note from the shipped 1.85 block to 1.86.
David Hook
More... 4 months ago
SM9-KEM: add the SM9 identity-based key encapsulation mechanism (GM/T 0044.4)
Gefei Li
More... 4 months ago
Merge branch 'sm9-kem' into 'main'
David Hook
More... 4 months ago
SM9-KEM: add the SM9 identity-based key encapsulation mechanism (GM/T 0044.4)
Gefei Li
More... 4 months ago
Merge branch 'sm9-kem' into 'main'
David Hook
More... 4 months ago
Fall back to CRL checking when the OCSP responder is unreachable, relates to github #2372
royb
More... 4 months ago
Fall back to CRL checking when the OCSP responder is unreachable, relates to github #2372
royb
More... 4 months ago
Extended generateCbom to sweep the public lightweight API (org.bouncycastle.crypto.*) for algorithms with no JCA registration, tagging every CBOM asset with a bc:api property and lightweight assets with their defining classes.
mwcw
More... 4 months ago
Extended generateCbom to sweep the public lightweight API (org.bouncycastle.crypto.*) for algorithms with no JCA registration, tagging every CBOM asset with a bc:api property and lightweight assets with their defining classes.
mwcw
More... 4 months ago
Corrected SICBlockCipher.getPosition() borrow propagation for counter increments that carry across 0xFF IV bytes, and skip() for backward moves smaller than the current intra-block offset.
gefeili
More... 4 months ago
Corrected SICBlockCipher.getPosition() borrow propagation for counter increments that carry across 0xFF IV bytes, and skip() for backward moves smaller than the current intra-block offset.
gefeili
More... 4 months ago
Cap the PBMAC1 PBKDF2 iteration count in JcePBMac1CalculatorBuilder (pre-auth CPU DoS)
Gefei Li
More... 4 months ago
Cap the PBMAC1 PBKDF2 iteration count in JcePBMac1CalculatorBuilder (pre-auth CPU DoS)
Gefei Li
More... 4 months ago
Merge branch 'pkcs-pbmac1-iteration-cap' into 'main'
Gefei Li
More... 4 months ago