Morph MORPH
SIGN IN SIGN UP
dhruvhead / bc-java UNCLAIMED
0 0 164 Java

COMMITS

main
September 7, 2026
P
Re-attach method's javadoc in HSSTests
Peter Dettman committed
7301038
P
TSP: distinct exception messages for sign cert v2
Peter Dettman committed
6eb4a11
P
Use TSPTestUtil instead of CMSTestUtil
Peter Dettman committed
f0ea4c0
D
The seven OpenPGP signature subpackets whose body RFC 9580 defines as a fixed length now all enforce that length where the subpacket is parsed rather than deferring it to an accessor, only Signature Expiration Time having done so, since SignatureSubpacketInputStream.readPacket validated a declared body length for range and for the case where it overran the subpacket area but handed a body whose declared length matched the octets it carried to the constructor whatever that length was, so Signature Creation Time and Key Expiration Time reported a body that was not the four octets of a time field, Exportable Certification, Revocable and Primary User ID a body that was not the single zero or one octet of a flag, and Issuer Key ID one shorter than a key ID, as an unchecked IllegalStateException out of org.bouncycastle.bcpg.sig.Utils or an IllegalArgumentException out of FingerprintUtil.readKeyID when the value was read, which matters because such a body inside a self-signature is content the signer signed over, so a certificate carrying one verified as valid and failed only later in ordinary reader code - PGPPublicKey.getValidSeconds(), PGPSignatureSubpacketVector.getKeyExpirationTime() and isExportable(), OpenPGPCertificate.getExpirationTime(), and the keyserver re-export path PGPPublicKeyRing.encode(out, true), which declares IOException - and the length and flag-value checks now sit as shared statics beside the accessors they protect, with Signature Expiration Time's own check folded into them, a malformed subpacket refused at parse time as a MalformedPacketException the way Features, Trust Signature and Notation Data already were, and the parser's tolerance of a fixed-length field whose declared length overruns the subpacket area preserved, BytesBooleansTest being wired into the openpgp suite it had never been registered in, relates to github #2426.
David Hook committed
9eadfc9
D
The three java.security.cert.X509CRL accessors no longer let an unchecked exception escape when an indirect CRL carries an entry whose certificateIssuer does not decode to a directoryName, getRevokedCertificates(), getRevokedCertificate(BigInteger) and isRevoked(Certificate) having re-parsed it as GeneralNames.getInstance(...).getNames()[0] in both X509CRLImpl and the deprecated jce.provider.X509CRLObject the registered X509StreamParser.CRL service returns, which also refused the well-formed encoding that names the directoryName after another GeneralName although X509CRLEntryObject read the same CRL correctly, so all six sites now share that sibling's logic, promoted to a package-private static in each of the two packages, and an entry naming no directoryName is treated as having no certificate issuer of its own, which java.security.cert.X509CRLEntry defines as the CRL issuer's, relates to github #2425.
David Hook committed
a5e172b
September 6, 2026
D
org.bouncycastle.openpgp.api.DoubleBufferedInputStream, which no class in the library referenced and whose read() returned the buffered byte unmasked so that every byte from 0x80 upwards came back negative and 0xFF came back as the -1 a caller reads as end of stream, has been removed along with its test rather than repaired, its withholding also being one read of the underlying stream rather than the configured buffer size, and OpenPGPMessageInputStream now documents that what is read from it is not covered by an integrity check until close() has returned, relates to github #2424.
David Hook committed
76020c6
D
The XDH KeyFactory now accepts and returns the JDK's own java.security.spec.XECPublicKeySpec and XECPrivateKeySpec on JDK 11 and later, through the jdk1.11 XDHKeys twin that already produces the XEC-implementing key classes, so an X25519 or X448 key round-trips through the standard spec as an Edwards key has done since the JDK 15 EdEC specs, with the u-coordinate reduced modulo the field prime and encoded little-endian by the conversion an incoming XECPublicKey already went through, RFC 7748 sec. 5 requiring a value at or past the prime to be taken as though it had been reduced.
David Hook committed
b2f6375
D
Every classical signer now assembles the signature component s through the constant-time BigIntegers.modMult, modAdd and the new modSubtract rather than BigInteger.multiply and mod, whose cost follows the quotient and which were being handed the signing key, covering ECDSA, SM2, DSA, GOST 3410, ECGOST 3410, DSTU 4145, EC-NR and BIP 340, with the public hash-derived value reduced on the way in wherever it could sit at or past the order, DSAPrivateKeyParameters and GOST3410PrivateKeyParameters now holding x to the [1, q-1] their own parameters imply, and the two GOST signers redrawing a nonce that is zero or at or past the order rather than leaving it to be folded by the reduction that followed.
David Hook committed
a219442
September 4, 2026
D
An HSS private key repositioned within a tree it already holds now keeps that tree rather than regenerating one identical to it, an LMS Merkle tree being a function of the key identifier, the master secret and the parameter sets and not of the one-time index, so both the root of any hierarchy and any lower level whose parent has not moved share the node cache and public key of the key they replace while still encoding byte for byte as regeneration did, relates to github #2414.
David Hook committed
acd2178
D
KeyPairGenerator.initialize(AlgorithmParameterSpec, SecureRandom) now reports a spec it will not take as the InvalidAlgorithmParameterException it declares across all the services the two providers register rather than only 44 of them, the twenty-three PQC generators that resolve a parameter set by name no longer case-folding the null a spec with no getName() yields and so reaching their own name check, the two composite generators refusing a non-null spec with the declared exception rather than an IllegalArgumentException, and the RSA generator translating the values its lightweight parameters refuse the way the int overload's are.
David Hook committed
14ae178
D
Every key pair generator that will not take the key size handed to KeyPairGenerator.initialize(int, SecureRandom) now reports it as the InvalidParameterException the JCA specifies rather than a bare IllegalArgumentException, so a caller catching the documented type reads a refusal rather than an escaping exception, covering the thirty PQC generators whose parameter set cannot be named by a key size at all and RSA, whose refusal comes from the lightweight RSAKeyGenerationParameters and is now translated through a new SecurityExceptions.invalidParameterException keeping the message and chaining the original as the cause, with InvalidParameterException extending IllegalArgumentException so existing catches still match.
David Hook committed
b122590
D
TimeStampToken now reports a malformed TSTInfo, and a token signed by other than one signer, as the TSPException its constructor declares rather than letting an unchecked exception out through the TimeStampResponse byte[] and InputStream paths, and asn1.tsp.TSTInfo requires the five to ten elements RFC 3161 sec. 2.4.2 gives the type so a short sequence is refused rather than running its enumeration out, relates to github #2415.
David Hook committed
9b1812c
D
The high-level OpenPGP message reader now updates and verifies only those prefixed (non-one-pass) signatures whose PGPSignature was successfully initialised, so a message whose signer certificate was not supplied returns its plaintext with the signature unreported rather than throwing a NullPointerException out of read(), and the one-pass path no longer dereferences a null issuer key, relates to github #2417.
David Hook committed
d68195b
D
The PKCS#12 key stores now report a certificate whose public key cannot be resolved, and a zero-length certificate chain, as the KeyStoreException engineSetKeyEntry and engineSetCertificateEntry declare, and check both ahead of the assignments so a refused entry is not left behind in the store, relates to github #2419.
David Hook committed
d7b2ab2
D
BIP340Signer can now be initialised from an AsymmetricCipherKeyPair, taking the public key from the caller rather than deriving it with a d'*G multiplication, which roughly halves the cost of producing a signature, and derives that point once per init() rather than on every generateSignature() call, relates to github #2420.
David Hook committed
d9cfcb0
D
The RSA-PSS services now reject a PSSParameterSpec whose trailerField is not 1 with the InvalidAlgorithmParameterException Signature.setParameter declares, and check it ahead of the assignments so a refused spec leaves the engine as it was rather than being half-applied, relates to github #2421.
David Hook committed
34a536e
D
CMS: the RFC 9629 KEMRecipientInfo recipient path no longer lets an oversized kekLength, a sequence size disagreeing with the optional ukm, or a wrap algorithm with no known KEK size escape as an unchecked exception, and now confirms the kekLength against the wrap algorithm as RFC 9629 sec. 3 requires; CMSAuthEnvelopedData and both streaming parsers also gained the malformed-RecipientInfo translation new CMSEnvelopedData(byte[]) has always had, relates to github #2422.
David Hook committed
e397172
D
Corrected the examples section of docs/claude/architecture.md: the pg OpenPGP examples package moved to misc in 06152ac3e2, so no published module carries an examples package under src/main/java, and the remaining javadoc / j2me / jdk1.1 examples trees are noted as deliberate.
David Hook committed
caf1022
D
OpenPGP: a truncated message is now reported rather than read as a clean end of message - the AEAD decryption streams no longer let an EOFException escape to BCPGInputStream.nextPacketTag(), and OpenPGPMessageInputStream.close() now closes its layer's integrity-protected stream so the SEIPDv1 MDC is always verified.
David Hook committed
ab7a235
September 3, 2026
P
PKIX: Fix CertPathValidator parsing of the ISIS-MTT dateOfCertGen extension (in the chain validity model), which was missing the unwrap of the extnValue OCTET STRING. A new ValidityModelTest covers the shell and chain validity models through the provider API.
Peter Dettman committed
832eece
P
BCJSSE: Add boolean system property org.bouncycastle.jsse.useNamedGroupsOrder
Peter Dettman committed
c6ae478
P
BCJSSE: Provider default for useCipherSuitesOrder is now 'true'
Peter Dettman committed
cc19397
September 2, 2026
D
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
David Hook committed
402aed6
D
A version 6 OpenPGP certificate is now used only when its primary key carries a valid Direct Key signature, as RFC 9580 sec. 5.2.3.10 requires, rather than falling back to the primary user ID binding the way a version 4 certificate legitimately does, since it is the Direct Key signature that carries a version 6 key's expiration and preferences.
David Hook committed
400d275
D
An HSS private key now claims its top-level index and its bottom component key's one-time index under the one monitor rather than two, the LMS tree cache is accepted only at the node counts its consistency check actually covers, a single-level HSS wrap keeps the key it was given instead of regenerating the whole Merkle tree, the LMS and HSS signers and the BcHssLmsContentSignerBuilder accept a key wrapped in ParametersWithRandom, LMS verification applies the typecode and leaf-number checks of RFC 8554 sec. 5.4.2 steps 2g and 2i, the key parameter constructors and decoders apply the checks the encoding requires, and the LMS JCE layer gains the twelve missing LM-OTS parameter-set names.
David Hook committed
658e247
P
Add note about de facto ordering of parameters wrapper types
Peter Dettman committed
4b68479
P
LMS: equals/hashCode/concurrency hardening
Peter Dettman committed
dcaa1ae
September 1, 2026
D
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
David Hook committed
3eb62a0
D
LMSSigner and HSSSigner clear any buffered message on init() and refuse a one-shot generateSignature(byte[]) / verifySignature(byte[], byte[]) call made with a message already absorbed through update(), the refusal preceding the key read so a rejected call spends no one-time key.
David Hook committed
fb70a4a
August 31, 2026
R
Support SM2 client/server credentials in the JSSE provider, relates to github #2416.
royb committed
610587a