Commits

Commit history

1. Commits on Oct 20, 2026

   • Allow an MLS Commit to replace a member with a Remove and an Add that keeps the signature key and credential, relates to github #2504.

     

     royb

     committed
     85d1fa7View commit details

     Copy full SHA for 85d1fa7

     Browse repository at this point
2. Commits on Oct 19, 2026

   • The BC key stores now make themselves empty on a load with a null stream, replace their contents on a successful load, and are left as they were by a load that fails.

     dghgit

     committed
     85abe32View commit details

     Copy full SHA for 85abe32

     Browse repository at this point

   • Register DVCSTest, CMPUpdates16Test and TestFromVector in their AllTests suites so the Gradle test task runs them.

     dghgit

     committed
     73ab17aView commit details

     Copy full SHA for 73ab17a

     Browse repository at this point

   • The CMC, ESS, BC, X9 and UA SEQUENCE parsers now take each optional field at most once and in definition order, and reject elements after the last field, relates to github #2516.

     dghgit

     committed
     3a870b2View commit details

     Copy full SHA for 3a870b2

     Browse repository at this point

   • The EAC and DVCS SEQUENCE parsers now take each optional field at most once and in definition order, with the CV certificate body and signature in that order, and reject elements after the last fie…

     Show description for 9297f5d
     dghgit

     committed
     9297f5dView commit details

     Copy full SHA for 9297f5d

     Browse repository at this point

   • The OCSP SEQUENCE parsers now take each optional field at most once, in definition order and with its tag checked, and reject elements after the last field, relates to github #2516.

     dghgit

     committed
     4a5bd83View commit details

     Copy full SHA for 4a5bd83

     Browse repository at this point

   • The TSP SEQUENCE parsers now take each optional field at most once and in definition order, and reject elements after the last field; the release notes for the ASN.1 parser changes are now a single…

     Show description for 4dcd2dc
     dghgit

     committed
     4dcd2dcView commit details

     Copy full SHA for 4dcd2dc

     Browse repository at this point

   • The PKCS12 keystore's default write-side PBE iteration count is now 300,000, twice that for the integrity MAC.

     dghgit

     committed
     14e1a7eView commit details

     Copy full SHA for 14e1a7e

     Browse repository at this point

   • The ESF SEQUENCE parsers now take each optional field at most once and in definition order, and reject elements after the last field, relates to github #2516.

     dghgit

     committed
     6095163View commit details

     Copy full SHA for 6095163

     Browse repository at this point

   • The CMP SEQUENCE parsers now take each optional field at most once, in definition order and with its tag checked, and reject elements after the last field, relates to github #2516.

     dghgit

     committed
     b6d5611View commit details

     Copy full SHA for b6d5611

     Browse repository at this point

   • The CRMF SEQUENCE parsers now take each optional field at most once, in definition order and with its tag checked, and reject elements after the last field, relates to github #2516.

     dghgit

     committed
     2c10585View commit details

     Copy full SHA for 2c10585

     Browse repository at this point

   • The CMS SEQUENCE parsers now take each optional field at most once, in definition order and with its tag number checked, and reject elements after the last field; RecipientKeyIdentifier now reads a…

     Show description for 762c72a
     dghgit

     committed
     762c72aView commit details

     Copy full SHA for 762c72a

     Browse repository at this point

   • The PKCS SEQUENCE parsers (RSASSAPSSparams, RSAESOAEPparams, PrivateKeyInfo, and the PKCS#7 SignerInfo and SignedData) now accept each optional field at most once, in definition order and with the …

     Show description for 39b5151
     dghgit

     committed
     39b5151View commit details

     Copy full SHA for 39b5151

     Browse repository at this point

   • CAdESTTest.testVerifierOverloadRejectsWrongCertificate now creates the other certificate before signing, so its notBefore cannot fall after the signing time.

     dghgit

     committed
     c6f4590View commit details

     Copy full SHA for c6f4590

     Browse repository at this point

   • The X.509 SEQUENCE parsers with context-tagged optional fields now accept each field at most once, in definition order and with a context-specific tag, and reject anything left over, relates to git…

     Show description for 5583f7f
     dghgit

     committed
     5583f7fView commit details

     Copy full SHA for 5583f7f

     Browse repository at this point

   • org.bouncycastle.mime.Headers now joins folded header lines in a StringBuilder rather than by String concatenation, so parsing a long folded header is linear in its length.

     dghgit

     committed
     87e913bView commit details

     Copy full SHA for 87e913b

     Browse repository at this point

   • HMacDSAKCalculator now clears the candidate nonce buffer once a value in range has been produced.

     dghgit

     committed
     78e4f20View commit details

     Copy full SHA for 78e4f20

     Browse repository at this point

   • HMacDSAKCalculator now clears its byte array copy of the private scalar once the HMAC state has been initialised.

     dghgit

     committed
     4272b07View commit details

     Copy full SHA for 4272b07

     Browse repository at this point

   • Restore the jdk1.4 bctest build: exclude PGPSignatureMergeTest, CrlReasonCodeTest and the DANE fetcher test and its suite in ant/jdk14.xml, and give JndiDANEFetcherFactoryTest the targeted bctest i…

     Show description for 26e6dfc
     dghgit

     committed
     26e6dfcView commit details

     Copy full SHA for 26e6dfc

     Browse repository at this point

   • PGPPublicKey.join, PGPPublicKeyRing.join and PGPSignature.join now index the signatures, user IDs, keys and unhashed subpackets already held rather than scanning them for each one in the copy being…

     Show description for e681367
     dghgit

     committed
     e681367View commit details

     Copy full SHA for e681367

     Browse repository at this point

   • PKIXCertPathReviewer now fetches CRLs from a certificate's distribution points only when org.bouncycastle.x509.enableCRLDP is set and the certificate chains to a trust anchor, and applies connect a…

     Show description for cd2a8bb
     dghgit

     committed
     cd2a8bbView commit details

     Copy full SHA for cd2a8bb

     Browse repository at this point

   • PGPPublicKey.join now merges two signatures only when they differ in no more than their unhashed subpackets, no longer changes the key it is given, and keeps the value of a version 4 signature carr…

     Show description for 5122510
     dghgit

     committed
     5122510View commit details

     Copy full SHA for 5122510

     Browse repository at this point

   • OpenPGPCertificate now selects the most recent self-signature that verifies, as RFC 9580 sec. 5.2.3.10 requires, rather than the most recent in effect, so a signature that does not verify no longer…

     Show description for bb12965
     dghgit

     committed
     bb12965View commit details

     Copy full SHA for bb12965

     Browse repository at this point
3. Commits on Oct 16, 2026

   • Brought the jdk1.1 and J2ME Strings copies into step with the others (constantTimeAreEqual, ranged toUTF8ByteArray, the strict UTF-8 code), and switched the jdk1.4 OpenBSDBCrypt to Strings.constant…

     Show description for 25a9d22
     peterdettman

     committed
     25a9d22View commit details

     Copy full SHA for 25a9d22

     Browse repository at this point

   • Add CONTRIBUTORS.md entry

     peterdettman

     committed
     4c3b380View commit details

     Copy full SHA for 4c3b380

     Browse repository at this point

   • post #1481: Strings.split in the jdk1.1 and J2ME overlays now also splits at a delimiter in position 0, as the other copies do since 1.84

     

     winne42

     authored and

     peterdettman

     committed
     65e1254View commit details

     Copy full SHA for 65e1254

     Browse repository at this point

   • Updated the test harness comments in build.gradle and ant/bc+-build.xml to the 599,000 PKCS12 default iteration count.

     peterdettman

     committed
     d0da40eView commit details

     Copy full SHA for d0da40e

     Browse repository at this point

   • Brought the jdk1.3 and jdk1.4 PKCS12 keystore overlays into step with the base tree: a loaded file's MAC algorithm and salt length are now kept along with its count, none of them is latched until t…

     Show description for 9d329ac
     peterdettman

     committed
     9d329acView commit details

     Copy full SHA for 9d329ac

     Browse repository at this point

   • Moved the validateMacKeyLength and getMacKdfIterationCount javadoc in PKCS12Util back onto the methods it describes.

     peterdettman

     committed
     6dc01a3View commit details

     Copy full SHA for 6dc01a3

     Browse repository at this point

   • PKCS12: put the MAC defaults back when a file with no MAC is loaded, rather than carrying an earlier file's or caller's MAC parameters into the next write, relates to github #2450.

     peterdettman

     committed
     9d09b33View commit details

     Copy full SHA for 9d09b33

     Browse repository at this point

   • PKCS12: count a SunJCE-style secret key bag as protected content, so a file with no MAC holding one no longer has its password rejected as unneeded, relates to github #1807.

     peterdettman

     committed
     ba98f14View commit details

     Copy full SHA for ba98f14

     Browse repository at this point

   • Only generate the PKCS12 MAC salt when a MAC is written.

     peterdettman

     committed
     5fd6343View commit details

     Copy full SHA for 5fd6343

     Browse repository at this point
4. Commits on Oct 15, 2026

   • Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java

     dghgit

     committed
     824d3c5View commit details

     Copy full SHA for 824d3c5

     Browse repository at this point

   • Lowered the default PKCS12 store iteration count to 599000 as Windows currently rejects files written with 600000 or more.

     dghgit

     committed
     09b96bbView commit details

     Copy full SHA for 09b96bb

     Browse repository at this point
5. Commits on Oct 14, 2026

   • Updated HQC to match specification changes of 2026-10-12

     

     royb

     committed
     0862a0eView commit details

     Copy full SHA for 0862a0e

     Browse repository at this point