Morph MORPH
SIGN IN SIGN UP
dhruvhead / bc-java UNCLAIMED
0 0 172 Java

COMMITS

main
August 31, 2026
P
Fix LMS exception message
Peter Dettman committed
8bc1c8b
P
SHA-2 performance: keep the message schedule in locals
Peter Dettman committed
9d5432f
August 30, 2026
D
Key Flags are a statement about the key the carrying signature refers to, so a subkey no longer inherits them from the primary key's certificate-wide signatures - a Subkey Binding signature that omits the subpacket now leaves the subkey with no capabilities rather than the primary's, which brings the flags consulted when requiring a signing subkey's embedded PrimaryKeyBinding signature into line with the flags every other capability decision reads.
David Hook committed
b51452f
August 29, 2026
D
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
David Hook committed
eb57122
D
Bind the HSS and XMSS^MT private key indices to the traversal state stored beside them, cross-check the XMSS and XMSS^MT root against the BDS state's own copy, carry a checksum over the encoded BDS state bound to the owning key's public seed since its node values cannot be recomputed cheaply, and regenerate the byte-level format documents the state change moves, relates to github #2414.
David Hook committed
ffca364
D
Validate the LMS / HSS private key fields at decode - the HSS level count and index pair, the LMS one-time index and its limit, and the tree cache nodes against their cached children - cross-check a supplied public key against an already-cached root, and stop the single-LMS-key retry in getInstance(byte[]) masking the real parse failure, relates to github #2414.
David Hook committed
32ebf8f
August 28, 2026
P
BCJSSE: More logging in ProvAlgorithmConstraints
Peter Dettman committed
42c938d
D
Convert docs/index, docs/releasenotes, docs/specifications and CONTRIBUTORS from hand-edited HTML to GitHub-flavoured markdown, keeping the per-version deep-link anchors and the CONTRIBUTORS address obfuscation intact, and repoint the Ant and shell distribution file lists, the internal links and the contributing guidance at the new names.
David Hook committed
36f2d9f
D
Restore the Java 1.4 source floor in the EC point-decoding exception messages and sync the hex formatting and empty-encoding guard into the jdk1.2 and j2me ECCurve overlays.
David Hook committed
08df2c2
D
Narrow the new opt-out for malformed ASN.1 time content to the one value it was wanted for, the zone-less UTCTime YYMMDDHHMMSS, renaming it org.bouncycastle.asn1.allow_zoneless_utctime: the property has to be set for that value to decode, admits nothing else, and no longer touches GeneralizedTime, whose zone is optional to begin with, plus add the AllowZonelessUTCTimeTest the property's introduction registered but did not include and restore the release note a merge dropped, relates to github #2411.
David Hook committed
e38a548
D
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
David Hook committed
faa7f2d
D
Guard the composite ML-DSA engineSetParameter re-init on a key being present so a context can be set before initSign / initVerify as it can on the base engines, clear the cached AlgorithmParameters when the context changes, have the fall-through branch either accept a context-carrying spec or reject it rather than both, and record a CompositeSignatureSpec's pre-hash choice until the generic COMPOSITE service learns its algorithm, relates to github #2412.
David Hook committed
ff7f378
August 27, 2026
R
Merge remote-tracking branch 'origin/main'
royb committed
6bebad5
R
Add property to opt-out for malformed ASN.1 time content, fix CMS parser exception, relates to github #2411.
royb committed
ced7851
P
SLH-DSA: Don't recompute PK.root when signing
Peter Dettman committed
af3c793
P
Add ECAlgorithms.sumOfTwoMultipliesSecret placeholders
Peter Dettman committed
b1c75bf
P
Tweak EC point decoding exception message
Peter Dettman committed
a0aba13
D
Compare the SRP-6a evidence messages and the J-PAKE MacTag in constant time over fixed-width encodings rather than with BigInteger.equals, keeping each expected value in the digest's own output form so its length cannot vary with the secret, and sign-extending the J-PAKE tag, which is read signed, incorporating github PR #2406, relates to github #2406.
David Hook committed
a70fa22
D
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
David Hook committed
e0dce82
D
Let Kangaroo produce its output in more than one piece: switchToSqueezing() now records that it has run, so repeated doOutput() and doFinal() after doOutput() work, incorporating the doFinal() guard removal from github PR #2409, relates to github #2409.
David Hook committed
41478e3
August 26, 2026
P
(D)TLS: OCSP stapling followup changes
Peter Dettman committed
83622d5
D
Bring the stateful hash-based signers into line with the JCA contract the newer signers already follow: LMSSignatureSpi.engineVerify() answers false for a signature it cannot decode and raises SignatureException through SecurityExceptions for one naming an OTS type other than the verifying key's rather than letting the lightweight API's unchecked exceptions out, clearing the accumulated message in a finally either way, XMSSSignature.Builder.withSignature() rejects any length other than the RFC 8391 sec. 4.1.8 fixed size so trailing data no longer gives a valid signature a second encoding the way XMSSMTSignature has always refused, and the uninitialised XMSS / XMSS^MT generateKeyPair() branches set their tree digest and default to the constructible XMSSMT-SHA2_20/2_512 parameter set, with the verify contract and the two keygen and parse pitfalls written up in the conventions, architecture and BCPQC skill docs, relates to github #2408.
David Hook committed
d143504
August 25, 2026
D
Wrap the cms, cades, c509, est.jcajce, pkix.jcajce and crypto.signers.lms AllTests suites in a nested BCTestSetup and make the cades suite extend TestCase, so the Gradle AllTest* test filter no longer rejects every child of their bare TestSuite roots and silently skips the 484 tests they carry, and document the requirement in the test conventions.
David Hook committed
9ac387a
D
Cut the core test run time: split the QR-UOV, SNOVA, MQOM, SQIsign, SLH-DSA and XMSS^MT KAT suites into finer AllTests* suites so each runs as its own parallel fork, sample the ACVP SLH-DSA-sigGen.txt vectors the way the per-parameter-set sigGen files already are, generate the XMSSPrivateKeyTest keys at height 4, compute the OpenBSDBCryptTest root hashes once per salt rather than per candidate, and exclude the nested AllTest*$* TestCase classes from the Gradle test filter so they run only through their suite() rather than twice.
David Hook committed
4c89edd
D
Cut the prov test run time: run the prov test task's per-class forks eight wide as every other test task already does, add a write-side org.bouncycastle.bcfks.store_it_count property (Properties.BCFKS_STORE_IT_COUNT) so the BCFKS keystore's default PBKDF2-HMAC-SHA512 iteration count can be lowered the way the PKCS#12 one can, set it low in the Gradle and Ant test harnesses alongside the PKCS#12 property with a BCFKSStoreTest case covering the honoured, out-of-range and explicit-PBKDFConfig cases, and generate the XMSS and XMSS^MT test keys at small tree heights wherever the test does not depend on the height.
David Hook committed
73b7df4
D
Stop the misc S/MIME example smoke test contacting smtp.gmail.com, where a silently dropped outbound port 25 left Transport.send() blocked without a connect timeout and hung the whole :misc:test run, delivering to an in-process loopback SMTP stub with connect / read / write timeouts instead and asserting the message arrives, relates to github #2407.
David Hook committed
32f10fd
D
Add Merkle tree proof generation to org.bouncycastle.cert.plants.MerkleTreePrimitives alongside the existing verifiers: computeMerkleTreeHash() for the RFC 9162 Merkle Tree Hash over a range of entries, generateSubtreeInclusionProof() for the RFC 9162 PATH inclusion proof of an entry within a subtree and generateSubtreeConsistencyProof() implementing SUBTREE_PROOF from draft-ietf-plants-merkle-tree-certs section 4.4.1, each over either an in-memory list of entry hashes or the new MerkleTreeNodeSource interface through which a storage-backed log supplies the full-subtree node hashes it already keeps, with ListMerkleTreeNodeSource as the in-memory implementation, MerkleTreeCertificatesTest rewritten onto the public API with generate-then-verify round trips and a misc example of the log-side flow.
David Hook committed
513f10a
D
Reduce the public surface of the promoted LMS engine in org.bouncycastle.crypto.signers.lms to the shape of the ML-DSA and SLH-DSA promotions: a single LMSEngine facade carrying the tree, signing, verification, HSS key generation and child-key derivation operations the key parameter classes and generators call, LMSContext moved into the package so its one-time key and signed public key fields can be package-private types, and LMSSignature kept public only as the opaque form of the chaining signatures an HSS private key carries, with LMS and HSS folded into the facade and LM_OTS, the LM-OTS key and signature classes, HSSSignature, LMSSignedPubKey, SeedDerive, Composer, DigestUtil, LmsUtils and LMSException made package-private, the key classes taking back their range test, index increments and consumed-key replacement so those methods return to package-private, LMSSigner and HSSSigner driving the LMSContextBased API instead of the engine and an L=1 HSS key signing through the HSS key with the u32str(0) prefix stripped, the engine-internal tests moved into a crypto.signers.lms test package and the rest rewritten onto the public API.
David Hook committed
a7267aa
D
Honour TlsPeer.getHandshakeTimeoutMillis() in the blocking TlsClientProtocol / TlsServerProtocol stream API as well as the DTLS protocols, checking the deadline at each record boundary in blockForHandshake via the same Timeout helper DTLSReliableHandshake already uses, with the (BC)JSSE provider's HandshakeTimeoutInputStream now distinguishing a handshake settled by completion or failure from one merely interrupted by the caller's own tighter per-read SO_TIMEOUT, restoring SO_TIMEOUT in both cases but only disarming the deadline in the former so a resumed handshake cannot extend the total budget, relates to github #1666.
David Hook committed
dd34565
August 24, 2026
D
Promote the LMS and HSS hash-based signature implementation from org.bouncycastle.pqc.crypto.lms into org.bouncycastle.crypto as ML-KEM, ML-DSA and SLH-DSA were, splitting it the same way with the key parameter classes in crypto.params, the key pair generators in crypto.generators, LMSSigner, HSSSigner, LMSContext and the LMSContextBased interfaces in crypto.signers and the engine classes in crypto.signers.lms, the signers now implementing crypto.Signer and an exhausted key raising the new crypto.ExhaustedPrivateKeyException that the pqc one extends, with the LMS half of the crypto.util key factories held in one LmsKeyUtil hook so the distributions excluding LMS replace a stub rather than fork four factories, the BC provider's LMS services and the pkix HSS/LMS operators moved onto the promoted classes, the JCE parameter specs given constructors and accessors for the new types alongside their deprecated originals, and pqc.crypto.lms deprecated for removal in the next release with its own suites kept and a new LMSPromotionCompatibilityTest asserting the two implementations agree byte for byte.
David Hook committed
0423971