GeezerVison

Branch selector

Commit history

1. Commits on Nov 12, 2026

   • Condensed the 1.87 release note entries and the longer CONTRIBUTORS entries.

     dghgit

     committed
     dd1e61cView commit details

     Copy full SHA for dd1e61c

     Browse repository at this point

   • Set the 1.87 release date and added the 1.87 security advisories.

     dghgit

     committed
     3005d94View commit details

     Copy full SHA for 3005d94

     Browse repository at this point

   • The Ant test targets now keep the bcprov and bcjmail jars of a release.debug build off the test class path, as they do the non-debug ones.

     dghgit

     committed
     23a6119View commit details

     Copy full SHA for 23a6119

     Browse repository at this point
2. Commits on Nov 10, 2026

   • Added to the release checks a check for duplicate classes across the binary jars, and the bnd.sh step and OSGi check for the jdk15to18 jars.

     dghgit

     committed
     d345af9View commit details

     Copy full SHA for d345af9

     Browse repository at this point

   • Merkle Tree Certificate javadoc and release note now follow draft-ietf-plants-merkle-tree-certs-08, which moves id-rdna-trustAnchorID to draft-ietf-tls-trust-anchor-ids-07, and cite that draft's Se…

     Show description for 00dbc69
     dghgit

     committed
     00dbc69View commit details

     Copy full SHA for 00dbc69

     Browse repository at this point

   • Composite ML-KEM decapsulation now requires a ciphertext of exactly the parameter set's length and no longer reads an X25519 or X448 value wrapped in a SubjectPublicKeyInfo, and an RSA component mu…

     Show description for abe1e18
     dghgit

     committed
     abe1e18View commit details

     Copy full SHA for abe1e18

     Browse repository at this point
3. Commits on Nov 9, 2026

   • Updated specifications.md and interoperability.md for 1.87: SM9, SMAUG-T, the BCPQC candidate signatures, hash-to-curve, BLS12-381, RFC 10024 and RFC 10073, and a complete System Properties section.

     dghgit

     committed
     e055368View commit details

     Copy full SHA for e055368

     Browse repository at this point

   • With org.bouncycastle.pkcs12.default set, PKCS12-DEF now follows it to the matching PKCS12-DEF store rather than a misspelt name, and a value naming no store is ignored.

     dghgit

     committed
     f86b99fView commit details

     Copy full SHA for f86b99f

     Browse repository at this point

   • Added the module descriptor checks to the release checks and corrected the module-info guidance in architecture.md (new modules need a descriptor; the two prov descriptors are kept identical).

     dghgit

     committed
     a7cdba5View commit details

     Copy full SHA for a7cdba5

     Browse repository at this point

   • Added a module descriptor for bcpgsc, exported org.bouncycastle.mls.TreeKEM from bcmls and brought the legacy prov ext-jdk1.9 descriptor back in line with the Gradle one (SMAUG-T provider package).

     dghgit

     committed
     c8ab5bdView commit details

     Copy full SHA for c8ab5bd

     Browse repository at this point

   • Added docs/claude/release-checks.md, the pre-release verification of the signed jars: legacy builds, multi-release linkage, OSGi resolution and signatures.

     dghgit

     committed
     3c12bb9View commit details

     Copy full SHA for 3c12bb9

     Browse repository at this point

   • Removed the jdk1.4 SubjectPublicKeyInfoFactory overlay, which only dropped the LMS/XMSS hooks the jdk1.4 LmsKeyUtil/XmssKeyUtil stubs already handle and had drifted, so X-Wing public keys could not…

     Show description for 97fdfec
     dghgit

     committed
     97fdfecView commit details

     Copy full SHA for 97fdfec

     Browse repository at this point

   • Excluded the tests added this cycle that the jdk1.4 build cannot compile (BLS, AEADFailedDecryptionMacTest) and those using post-Java 5 APIs from the jdk15to18 genuine javac 1.5 test compile.

     dghgit

     committed
     3c44ab2View commit details

     Copy full SHA for 3c44ab2

     Browse repository at this point
4. Commits on Nov 8, 2026

   • Merge pull request #2561 from AlexLaroche/aead-getmac-after-failed-decrypt

     dghgit

     committed
     2d46207View commit details

     Copy full SHA for 2d46207

     Browse repository at this point

   • Merge pull request #2563 from AlexLaroche/xdh-no-output-on-failure

     dghgit

     committed
     772ef35View commit details

     Copy full SHA for 772ef35

     Browse repository at this point

   • X25519 and X448 generateSecret now leave the caller's buffer unchanged when the agreement fails, rather than holding the all-zero result of a low-order peer key.

     AlexLaroche

     committed
     6dbe980View commit details

     Copy full SHA for 6dbe980

     Browse repository at this point

   • getMac() on an AEAD cipher no longer returns the tag computed for a ciphertext that failed its tag check, which was a valid tag for that ciphertext and so a forgery for any caller exposing it.

     AlexLaroche

     committed
     41f2bdcView commit details

     Copy full SHA for 41f2bdc

     Browse repository at this point

   • The empty OBJECT IDENTIFIER and RELATIVE-OID read under org.bouncycastle.asn1.allow_wrong_oid_enc now refuse branch() and are on no identifier's path, where branch() gave an identifier whose getId(…

     Show description for a1bb4ad
     dghgit

     committed
     a1bb4adView commit details

     Copy full SHA for a1bb4ad

     Browse repository at this point

   • Merge branch 'oid_fixes' into 'main'

     dghgit

     committed
     e19b684View commit details

     Copy full SHA for e19b684

     Browse repository at this point

   • ECPoint.multiply on a point of small odd order no longer throws NullPointerException from the WNAF precomputation: ECCurve.normalizeAll skips the point at infinity, and WNafUtil rebuilds an odd-mul…

     Show description for f2c8e80
     dghgit

     committed
     f2c8e80View commit details

     Copy full SHA for f2c8e80

     Browse repository at this point

   • BLS12-381 now reduces with Barrett reduction and lazy tower reduction, multiplies on G2 in Jacobian coordinates with the GLS method for signing, clears the cofactor and takes map-to-curve square ro…

     Show description for 6ba809c
     dghgit

     committed
     6ba809cView commit details

     Copy full SHA for 6ba809c

     Browse repository at this point
5. Commits on Nov 7, 2026

   • The NTRU, HQC, NTRU+, NTRU LPRime, SNTRU Prime and SMAUG-T KeyGenerator and Cipher services now apply the KDF named in their spec, as javax.crypto.KEM does, and with no KDF refuse a key larger than…

     Show description for 1010e8c
     dghgit

     committed
     1010e8cView commit details

     Copy full SHA for 1010e8c

     Browse repository at this point
6. Commits on Nov 6, 2026

   • The SP 800-90A DRBG and SP800SecureRandomBuilder javadoc now says a null nonce is compliant when the entropy input carries at least 1.5 times the security strength, per SP 800-90A Rev. 1 sec. 8.6.7…

     Show description for 5d25dab
     dghgit

     committed
     5d25dabView commit details

     Copy full SHA for 5d25dab

     Browse repository at this point

   • Added the X-Wing provider and KBKDF, KMAC and one-step KDF provider packages to the prov module-info, so their services can be created when BC is used as a named module.

     dghgit

     committed
     058ae15View commit details

     Copy full SHA for 058ae15

     Browse repository at this point

   • An OBJECT IDENTIFIER or RELATIVE-OID with an invalid encoding admitted under org.bouncycastle.asn1.allow_wrong_oid_enc is now read as the identifier it corrects to for equals, hashCode, getId, on a…

     Show description for 0ebba58
     peterdettman

     committed
     0ebba58View commit details

     Copy full SHA for 0ebba58

     Browse repository at this point

   • A password-only PBKDF2 key used with a Cipher and a PBEParameterSpec is now derived with its SecretKeyFactory's PRF rather than always HMAC-SHA512, which org.bouncycastle.pbkdf2.legacy_cipher_prf r…

     Show description for af00525
     dghgit

     committed
     af00525View commit details

     Copy full SHA for af00525

     Browse repository at this point

   • The SLHDSAPrivateKeyParameters array constructor now copies the arrays it is given.

     dghgit

     committed
     f39f843View commit details

     Copy full SHA for f39f843

     Browse repository at this point

   • ML-DSA and ML-KEM private key parameters from withPreferredFormat(), and so the BC keys from getPrivateKey(boolean), now hold their own copy of the key material, so destroying one no longer zeroize…

     Show description for bf17a65
     dghgit

     committed
     bf17a65View commit details

     Copy full SHA for bf17a65

     Browse repository at this point

   • Added JCA tests for a DH private value length equal to the bit length of p across KeyFactory encoding, DHIES and ElGamal key pair generation, relates to github #2554.

     dghgit

     committed
     3938823View commit details

     Copy full SHA for 3938823

     Browse repository at this point

   • The DH and ElGamal private value length floor now takes the security strength of p from SP 800-56A Appendix D from 4096-bit p up, so l must be at least 304, 352 and 400 bits for 4096, 6144 and 8192…

     Show description for f5c2194
     dghgit

     committed
     f5c2194View commit details

     Copy full SHA for f5c2194

     Browse repository at this point

   • The ElGamal KeyPairGeneratorSpi now raises InvalidAlgorithmParameterException through SecurityExceptions, as the (String, Throwable) constructor broke the jdk1.4 and jdk1.3 builds.

     dghgit

     committed
     3d6078cView commit details

     Copy full SHA for 3d6078c

     Browse repository at this point
7. Commits on Nov 5, 2026

   • DH and ElGamal key pair generation, including the DHIES ephemeral key, now refuses a private value length below twice the security strength of p, unless org.bouncycastle.dh.allow_short_private_valu…

     Show description for 05bdb4e
     dghgit

     committed
     05bdb4eView commit details

     Copy full SHA for 05bdb4e

     Browse repository at this point

   • The DH, DH basic and ElGamal key pair generators now redraw a private value whose public value would fall outside [2, p - 2].

     dghgit

     committed
     6a445adView commit details

     Copy full SHA for 6a445ad

     Browse repository at this point

   • A DH private value length equal to the bit length of p now gives an l-bit private value, as PKCS#3 sec. 7.1 specifies, rather than one drawn from [2^(l-1), p - 2], relates to github #2554.

     dghgit

     committed
     b8a6769View commit details

     Copy full SHA for b8a6769

     Browse repository at this point

   • The build-jdk13-docker script now removes the bc-test-data mount point docker leaves in the repository.

     dghgit

     committed
     2edb942View commit details

     Copy full SHA for 2edb942

     Browse repository at this point