Morph MORPH
SIGN IN SIGN UP
dhruvhead / bc-java UNCLAIMED
0 0 204 Java

COMMITS

main
August 24, 2026
D
Resolve a composite key's algorithm name through the composite KEM index as well as the composite signature one, so that getAlgorithm() no longer returns null for the twelve Composite ML-KEM parameter sets and the SubjectPublicKeyInfo / PrivateKeyInfo constructors accept them, normalise an EC component to an uncompressed point wherever a composite key or the KEM combiner input is serialised as section 4 of the drafts requires, while still decoding a compressed one, default the SecureRandom the RSA-OAEP composites draw their traditional secret from and clear the ML-KEM component's secret as section 3.5 requires, and register the brainpool sets under the draft's spelling with the abbreviated names and OID constants kept as deprecated aliases, relates to github #2404.
David Hook committed
818292a
D
Store an empty array for a null otherInfo in the KEMKDFSpec constructor, so that getOtherInfo() never returns null and the KMAC-128, KMAC-256 and SHAKE-256 branches of KdfUtil.makeKeyBytes no longer throw NullPointerException out of a KEM operation for a spec built through the protected constructor rather than a Builder, as the deprecated KEMParameterSpec is.
David Hook committed
7decad0
D
State in createBlindedExponent's javadoc what its seven bits of exponent blinding do and do not cover - that it removes the exponent bit-length and bit-pattern leak from the variable-time modPow but leaves 128 enumerable multipliers for an adversary averaging many operations under one long-term exponent, and randomises only the exponent so base-dependent leakage is untouched - mirrored into the jdk1.1 overlay, and replace the two non-ASCII em dashes left in areSecretValuesEqual's javadoc.
David Hook committed
ef33f9d
D
Correct the 1.86 ML-DSA, ML-KEM and SLH-DSA removal notes, which still described the pqc.crypto.util key-factory entries as repointed at the canonical classes and PQCOtherInfoGenerator as widened to a CipherParameters constructor, both of which later commits removed and reverted, so the notes now name the org.bouncycastle.crypto.util classes a caller of those factories should move to and scope the decode-as-before claim to the paths that still recognise the OIDs.
David Hook committed
7b510fd
D
Move the shared javax.crypto.KEM SPI prologue off jcajce.util.SpiUtil, whose jdk25 twin cannot carry it, onto the never-overlaid KemSpiUtil, so that encapsulate and decapsulate no longer fail with NoSuchMethodError on a JDK 25 runtime, where the jdk17-only SPIs resolve against the versions/25 copy of the hook, with a src/test/jdk25 regression test because test25 is the only task that puts a JDK 25 in front of the multi-release jar and the eleven jdk17 KEM tests cannot see the mismatch, and the rule recorded in the architecture guide.
David Hook committed
21153e3
D
Reject the non-canonical QR-UOV and SNOVA signature encodings that verification still ignored inside the signature after the trailing-byte fix, validate the SNOVA private key length and bound its signing retry loop, clear the MAYO key material the reference clears, and record SQIsign's own encoding non-uniqueness in its javadoc, relates to github #2403.
David Hook committed
8f331ed
August 23, 2026
D
Record the MessageSigner bare-signature contract in the bcpqc-add-signature-algorithm skill and the architecture guide, so that a new PQC signature port does not carry the reference harness's crypto_sign signed-message envelope forward as MAYO, SNOVA, QR-UOV, SQIsign and AIMer each did, with the encoding assertions a sign-then-verify round-trip test cannot catch, relates to github #2403.
David Hook committed
3e30c18
D
Add the missing SQIsign and AIMer cases to PqcMalformedInputTest so that an empty or one-byte signature is covered for all five of the fixed-length PQC signature schemes rather than only MAYO, SNOVA and QR-UOV, and correct the CONTRIBUTORS.html entry that still described the AIMer length guard as bounding the signed-message envelope since removed, relates to github #2401.
David Hook committed
85e34e2
D
Return the bare signature from the MAYO, SNOVA, QR-UOV, SQIsign and AIMer signers rather than the NIST crypto_sign signed-message envelope, and require verification to be given exactly the parameter set's signature length, so that a signature no longer carries a copy of the signed data into every certificate and CMS structure built on it and trailing bytes are no longer ignored, with the KAT tests rebuilding the envelope as FalconTest already does, relates to github #2403.
David Hook committed
d670265
August 22, 2026
D
Add org.bouncycastle.pkcs12.store_it_count so the PBE iteration count the PKCS12 keystore writes with is settable, the write-side counterpart of the existing max_it_count that only bounds what is accepted on load, and bring the jdk1.3 and jdk1.4 keystore overlays into step with it so all three distributions share the 600,000 default rather than the 1,024 and 51,200 they had kept, take their MAC count from a file they loaded, and honour the property, with the Gradle and Ant test harnesses setting it low so the suites do not spend their time on the KDF.
David Hook committed
90d1f8a
D
Require the component key that issued a third-party certification or trust delegation to hold the certification key flag when the signature was made, so that a SIGN_DATA-only subkey is no longer attributed the issuing certificate's authority to bind identities and delegate introducer trust.
David Hook committed
f0d5c85
D
Drop the duplicated C509 entry from the 1.86 additional-features list, keeping the copy that names org.bouncycastle.cbor.c509 as the package the new value types live in rather than the org.bouncycastle.c509 of the stale one.
David Hook committed
8a3265b
D
Bound the C509 validity fields to the X.509 time domain when parsing and route every seconds-to-milliseconds conversion through one checked helper, so that a validityNotAfter displaced by 2^61 seconds - which reconstructs the same DER TBSCertificate and so leaves the issuer signature intact - is refused rather than read back as an expiry the holder's isValidOn and its own getters disagree about.
David Hook committed
1a7b6d7
D
Record in the jdk1.4 build notes that no bctest include glob reaches a test living in the org.bouncycastle.tls package itself, that bctls does not take the matching contamination because its own copy excludes tests at any depth, and that a targeted include therefore buys a compile-floor check rather than a run, the package's AllTests being excluded from the staged sources.
David Hook committed
97ae51f
D
Include SpreadCertificateStatusTest in the legacy Ant bctest copy, the shallow include globs reaching no test that lives directly in the org.bouncycastle.tls package, so that the real 1.4 javac compiles it rather than the class being dropped from the distribution unseen, relates to github #1485.
David Hook committed
aa46a75
D
Surface a TLS 1.3 server's OCSP staples to a low-level client through the new TlsServerCertificate.getCertificateStatusAt, reading the per-CertificateEntry status_request extensions of RFC 8446 sec. 4.4.2.1 as the inverse of what a BC server writes, and answering the same way from the certificate_status message up to TLS 1.2, so that getCertificateStatus no longer returns null for every TLS 1.3 handshake and the BCJSSE provider shares the one implementation rather than carrying its own, relates to github #1485.
David Hook committed
aec07e9
D
Reference github #1485 in the BCJSSE OCSP stapling release note, the client-side TLS 1.3 staple read it asked for having arrived with the server-side stapling work, relates to github #1485.
David Hook committed
777bcb2
D
Require the signed-message envelope handed to AIMerSigner.verifySignature to be exactly the message plus the parameter set's signature size, so that a short signature is reported as a failed verification rather than indexed past its end, and a valid one with data appended to it no longer verifies, relates to github #2401.
David Hook committed
1a269ca
D
Bump actions/checkout to v7 and github/codeql-action to v4 in the CodeQL workflow, taking the Node 24 runtime majors ahead of the CodeQL Action v3 deprecation due in December 2026, relates to github #2399.
David Hook committed
1eca2e8
D
Take the MLS interop harness gRPC and protobuf dependencies by Maven coordinate at gRPC 1.83.1 and protobuf-java 3.25.9 rather than as jars hand-placed under test/libs, clearing CVE-2024-7246, CVE-2025-55163 and CVE-2024-7254, and dropping the twelve superseded jars a dependency scanner could not see.
David Hook committed
cf054e1
D
Move the MLS gRPC interop test harness out of the published mls module into the non-publishing misc one as org.bouncycastle.mls.examples.client, taking mls_client.proto and the protobuf codegen with it, so that bcmls no longer ships classes needing io.grpc and com.google.protobuf from a jar whose POM and OSGi manifest declare neither.
David Hook committed
f3a7cf1
August 21, 2026
D
Cast the generic list reads in TlsStatusRequestResumptionTest so that it still compiles once the legacy Ant source preprocessor has stripped the generics from the fields.
David Hook committed
c4ff979
D
Strip a bare wildcard type argument in the legacy Ant source preprocessor, so that a Class<?> parameter no longer fails the real 1.4 javac, the existing alternation having required at least one character before the closing angle bracket.
David Hook committed
e5badfa
D
Remove the unreachable RFC 3281 attribute certificate cert-path services - the RFC3281 CertPathBuilder and CertPathValidator registrations, PKIXAttrCertPathBuilderSpi, PKIXAttrCertPathValidatorSpi, RFC3281CertPathUtilities and the attribute certificate signature check left with no caller - which have been uncallable since 1.52 because the X509AttributeCertStoreSelector they require cannot be carried by the PKIXExtendedParameters they read it back from.
David Hook committed
113a0b7
D
Add a CertPathBuilder reuse test, covering that the failure recorded by one build is no longer reported by the next and that a successful build leaves nothing behind, exercising both the SPI the provider registers and the plain PKIXCertPathBuilderSpi it only hands out where PKIXRevocationChecker is absent.
David Hook committed
84e53bc
D
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
David Hook committed
989cdcc
August 20, 2026
D
Add server-side OCSP stapling to the BCJSSE provider and the low-level TLS API, answering status_request and status_request_v2 with a certificate_status message for TLSv1.2 and, from the same TlsServer.getCertificateStatus callback, a per-CertificateEntry extension for TLSv1.3, behind jdk.tls.server.enableStatusRequestExtension and a per-SSLContext response cache, dropping the echoes a resumed handshake would otherwise replay, reading the TLSv1.3 form on the client, dropping a response too large for its CertificateEntry to carry rather than failing the handshake over it, and clearing the status_request_v2 and trusted_ca_keys a reused TlsServer would otherwise carry into a following handshake, relates to github #1157.
David Hook committed
ec2f3f0
P
Update DTLSReassembler following bc-csharp
Peter Dettman committed
976c3a0
D
Add a weekly grouped Dependabot configuration covering the Gradle sub-project build files and GitHub Actions, with major-version bumps left to be raised by hand, relates to github #883.
David Hook committed
2feaf10
D
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
David Hook committed
e8b5cf1