Morph MORPH
SIGN IN SIGN UP
dhruvhead / bc-java UNCLAIMED
0 0 225 Java

COMMITS

main
August 20, 2026
D
Report the algorithm when a KEM has no registered encapsulation length rather than dereferencing a null table entry, and enable Classic McEliece as a CMS RFC 9629 KEMRecipientInfo recipient by registering the encapsulation lengths for its sixteen ISO/IEC 18033-2 parameter sets, relates to github #2398.
David Hook committed
ae14c98
August 19, 2026
P
Add .vscode/ to .gitignore
Peter Dettman committed
b4e2c10
P
PKIX: Fix reuse in CertPath builders
Peter Dettman committed
44ba623
D
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
David Hook committed
ca2a967
D
Rename the jdk17 HQC KEM test from HQC17Test to HQCKEM17Test so it follows the same *KEM17Test convention as the other nine KEM families, updating its AllTests17 registration.
David Hook committed
00f415c
P
BCJSSE: Don't restrict signature schemes by supported groups in TLS 1.3
Peter Dettman committed
05ac45c
D
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
David Hook committed
fddab66
G
Refactor kem prov17
gefeili committed
b1925a6
G
Eliminate five javac deprecation/unchecked warnings in test suites.
gefeili committed
e9eb1f6
D
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
David Hook committed
dc0b671
G
Remove warning
gefeili committed
285eb80
G
Remove ML-DSA, ML-KEM and SLH-DSA from pqc.crypto.util's ASN.1 codec dispatch (Utils, PublicKeyFactory, PrivateKeyFactory, PrivateKeyInfoFactory, SubjectPublicKeyInfoFactory - base tree and the jdk1.1/jdk1.4 legacy-build overlays), since org.bouncycastle.crypto.util already covers all three OID sets identically and is the path the modern JCE key classes actually use. Also drops the dead kyber512/768/1024_aes-to-MLKEMConverter registration in PublicKeyFactory (its backing OID lookup was never populated, so it could never have resolved) and the now-unreachable SLHDSAParameters-keyed entries in Utils' sphincsPlusOids map (a stale leftover from before SPHINCS+ and SLH-DSA had separate parameter classes - the live sphincsPlusOidLookup only ever takes an SPHINCSPlusParameters key). Removes the two pqc.crypto.util round-trip tests added earlier this session for ML-DSA and SLH-DSA, since that dispatch path no longer recognises either algorithm's OIDs.
gefeili committed
6dd785d
G
Remove the ML-KEM branch from pqc.crypto.util.PQCOtherInfoGenerator.PartyU/PartyV, as ML-KEM's OtherInfo generation is already covered by org.bouncycastle.crypto.util.OtherInfoGenerator; only NTRU remains here now, so the constructor parameter reverts from CipherParameters back to org.bouncycastle.pqc.crypto.KEMParameters (which NTRUParameters, unlike the canonical MLKEMParameters, still implements).
gefeili committed
d40c854
G
Complete the SLH-DSA removal from the previous commit: repoint pqc.crypto.util's key-factory classes (base + jdk1.1 + jdk1.4 overlays) to the canonical org.bouncycastle.crypto classes, trim SLHDSATest's now-redundant deprecated-side checkInitGuards calls and add its pqc.crypto.util factory round trip, fix the two package-info cross-references, remove the module-info exports, and add the release note. A scripted git add aborted on an already-staged path before reaching these files, so the prior commit shipped only the file deletions.
gefeili committed
15145b3
G
As announced in the 1.85 release notes, remove the deprecated SLH-DSA implementation under org.bouncycastle.pqc.crypto.slhdsa (public API and its internal engine, plus the jdk1.1-overlay Fors/HT pair that existed only to override files in that package), repointing the pqc.crypto.util key-factory classes - its only remaining production callers - to the canonical org.bouncycastle.crypto.params / generators / signers classes, trimming the now-redundant deprecated-vs-canonical checkInitGuards calls in SLHDSATest, and adding the SLH-DSA round trip through pqc.crypto.util.{PublicKeyFactory,PrivateKeyFactory,PrivateKeyInfoFactory,SubjectPublicKeyInfoFactory}, which had no test coverage of any kind - deprecated or canonical - before this.
gefeili committed
c739b39
G
As announced in the 1.85 release notes, remove the deprecated ML-KEM implementation under org.bouncycastle.pqc.crypto.mlkem (public API and its internal engine), repointing the pqc.crypto.util key-factory classes and pqc.crypto.util.PQCOtherInfoGenerator - its only remaining production callers - to the canonical org.bouncycastle.crypto.params / generators / kems classes. PQCOtherInfoGenerator.PartyU/PartyV widen their constructor parameter from the pqc-side KEMParameters marker interface to CipherParameters, since the canonical MLKEMParameters does not implement that marker interface (only NTRUParameters, which stays under pqc.crypto, still does) - the two markers were never used for anything but instanceof dispatch to the already-narrowed concrete type. Also adds the ML-KEM round trip through PQCOtherInfoGenerator, which had no test coverage of any kind before this.
gefeili committed
1a67e71
G
As announced in the 1.85 release notes, remove the deprecated ML-DSA implementation under org.bouncycastle.pqc.crypto.mldsa (public API and its internal engine), repointing the pqc.crypto.util key-factory classes and cert.plants.bc.BcMTCSigners - its only remaining production callers - to the canonical org.bouncycastle.crypto.params / generators / signers classes, and adding the ML-DSA round trip through pqc.crypto.util.{PublicKeyFactory,PrivateKeyFactory,PrivateKeyInfoFactory,SubjectPublicKeyInfoFactory} that had, until now, only ever been exercised through the deprecated classes.
gefeili committed
089fe42
D
Raise InvalidKeyException, rather than let a foreign provider's unchecked exception escape, when a signature, cipher or key-agreement service is initialised with a private key whose parameters are not accessible - a hardware-backed key whose getModulus/getX/getS/getParams throws - across the RSA, DSA, EC, DH and ElGamal key-parameter helpers, relates to github #1440.
David Hook committed
170d9f0
G
Fix javadoc doclint issues across core, pg, pkix and prov: broken and cross-module @link references, an invalid wildcard member link, unescaped '<' text, a malformed <a href> tag, stale @param names, an @implNote tag doclint doesn't recognise, a nested-class link naming the wrong enclosing type, an @deprecated tag in package documentation, and a self-closing <p/>
gefeili committed
498ee2a
G
Add the missing @Deprecated annotation to nine members already carrying a javadoc @deprecated tag, clearing javac's [dep-ann] warning for each
gefeili committed
77a2f72
August 18, 2026
D
Add an AnimalSniffer Android API level 26 compatibility gate to the Gradle build, checking each published module's base classes against the Android 8.0 platform signature and failing on a java/javax platform API absent there - the class of regression behind github #2369 - with a per-module allow-list for the intentionally platform-absent references (the optional JNDI fetchers and the legacy bcmail java.awt DataFlavor), based on the initial implementation in github #336.
David Hook committed
46f8389
P
Fix test error messages
Peter Dettman committed
1df82f9
D
Fix the Error Prone issues in the misc examples: unescape the HTML entities inside two {@code} javadoc tags so the angle brackets render literally rather than as &lt;/&gt;, and make SamplingEntropySourceProvider's DevRandomChainedSource a static nested class since it never references its enclosing instance.
David Hook committed
f2699c4
D
Rename the QRUOV PRG helper from yield to yieldBytes so its name no longer collides with the switch-expression contextual keyword, clearing the Error Prone NamedLikeContextualKeyword warning.
David Hook committed
54ca798
D
Turn off the Error Prone StringCharset and AssignmentExpression checks: StringCharset's fix needs the Charset/StandardCharsets overloads barred by the Java 4 source floor (and asn1.eac's CertificateHolderReference has no overlay to shield the legacy builds), and AssignmentExpression's hits are deliberate switch-on-read and constraint-driven super-argument idioms.
David Hook committed
f646e61
D
Correct the MTCCertAuth class javadoc link to authorityInfo, which takes two BigInteger bounds rather than one, so the reference resolves and clears the Error Prone InvalidLink warning.
David Hook committed
0ddb7a5
D
Suppress Error Prone DuplicateBranches on the three methods whose identical branches are deliberate - the DSTU4145 and des-EDE3 TODO placeholders and the raVerified ProofOfPossession default - keeping the check on to catch genuine copy-paste branches elsewhere.
David Hook committed
90b9460
D
Turn off the Error Prone RedundantControlFlow check: its hits are deliberate skip markers - documented continue-on-skip branches, instanceof-chain marker guards and try-next catch blocks - plus third-party Apache bzip2 code kept aligned with upstream, none of which read as misleading and whose removal would leave empty blocks or drop intent.
David Hook committed
bda2d18
D
Turn off the Error Prone BooleanLiteral and IgnoredPureGetter checks: BooleanLiteral's only hits are deliberate boxed Boolean constants whose literal form would need autoboxing the Java 4 source floor rejects, and IgnoredPureGetter fires solely on generated protobuf writeTo memoization that cannot be annotated.
David Hook committed
0833796
D
Make the SLHDSA private-key seed holders and the enveloped-data stream generators' output streams static nested classes, since none reference their enclosing instance, clearing the Error Prone ClassCanBeStatic warnings.
David Hook committed
cb97093