Commits

Commit history

1. Commits on Oct 7, 2026

   • Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java

     dghgit

     committed
     c314b9cView commit details

     Copy full SHA for c314b9c

     Browse repository at this point

   • Pack.longToBigEndian now writes the bytes of the long directly, and a JDK 23 multi-release copy of Pack does the same for longToLittleEndian, so newer JITs merge the stores, relates to github #2474.

     dghgit

     committed
     26ffdd0View commit details

     Copy full SHA for 26ffdd0

     Browse repository at this point

   • ML-KEM matrix generation now squeezes one SHAKE128 block per additional block needed, as FIPS 203 SampleNTT does, rather than two of which only the first was sampled.

     dghgit

     committed
     43af599View commit details

     Copy full SHA for 43af599

     Browse repository at this point

   • ASN1Integer: parse small values as SMALL_CONSTANT entries and increase table size.

     peterdettman

     committed
     d105122View commit details

     Copy full SHA for d105122

     Browse repository at this point

   • PKIXCertPathReviewer now applies rfc822Name name constraints to emailAddress values in the subject DN, as CertPathValidator does.

     dghgit

     committed
     55a1976View commit details

     Copy full SHA for 55a1976

     Browse repository at this point

   • Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java

     dghgit

     committed
     db8f0f3View commit details

     Copy full SHA for db8f0f3

     Browse repository at this point

   • The org.bouncycastle.ocsp.max_response_size and max_response_age properties now fall back to their defaults for a value that is not a positive integer, rather than failing the OCSP check.

     dghgit

     committed
     09eff23View commit details

     Copy full SHA for 09eff23

     Browse repository at this point

   • Added release notes for the 1.86.1 and 1.86.2 bctls point releases, relates to github #2448 and github #2493.

     dghgit

     committed
     668c60dView commit details

     Copy full SHA for 668c60d

     Browse repository at this point
2. Commits on Oct 6, 2026

   • Fix MLS parent hash computation at both ends of the filtered direct path, relates to github #2492.

     

     royb

     committed
     5eea549View commit details

     Copy full SHA for 5eea549

     Browse repository at this point

   • CRLValidation now requires a current CRL from each certificate's issuer, judged by thisUpdate and nextUpdate at the time of validation or a date given to a new constructor.

     dghgit

     committed
     bc2aad0View commit details

     Copy full SHA for bc2aad0

     Browse repository at this point

   • CertificatePoliciesValidation no longer reports the policyConstraints and inhibitAnyPolicy extensions as handled, as it does not process certificate policies.

     dghgit

     committed
     744af09View commit details

     Copy full SHA for 744af09

     Browse repository at this point

   • Added tests for the individual rules of the lightweight cert.path API, covering key usage, parent signature and DSA parameter inheritance, CRL checking, basic constraints, Memoable copy and reset, …

     Show description for 78bacaf
     dghgit

     committed
     78bacafView commit details

     Copy full SHA for 78bacaf

     Browse repository at this point

   • BasicConstraintsValidation now checks a pathLenConstraint on the certificate that exceeds it rather than the next one, so a path ending in a self-issued certificate no longer escapes it, relates to…

     Show description for f096a5f
     

     rootvector2

     authored and

     dghgit

     committed
     f096a5fView commit details

     Copy full SHA for f096a5f

     Browse repository at this point
3. Commits on Oct 5, 2026

   • Corrected the build-and-test notes on core test results: the AllTest* filter applies to core too, so a TestCase no suite references never runs.

     dghgit

     committed
     7b621d7View commit details

     Copy full SHA for 7b621d7

     Browse repository at this point

   • Added org.bouncycastle.ocsp.max_response_age, a freshness bound on OCSP responses that state no nextUpdate, defaulting to one hour.

     dghgit

     committed
     0123e7bView commit details

     Copy full SHA for 0123e7b

     Browse repository at this point

   • Added 1seal to CONTRIBUTORS.md.

     dghgit

     committed
     81c5c39View commit details

     Copy full SHA for 81c5c39

     Browse repository at this point

   • The AEADBaseEngine in-place overlap check now counts the bytes buffered by an earlier call, relates to github #2487.

     

     Arpan0995

     authored and

     dghgit

     committed
     e7635b6View commit details

     Copy full SHA for e7635b6

     Browse repository at this point
4. Commits on Oct 4, 2026

   • Blake2bpDigest.update() now measures the room left against the 512 byte buffer it has, and the Blake2bp/Blake2sp tests are now run by the core test suite, relates to github #2488.

     

     Arpan0995

     authored and

     dghgit

     committed
     253e927View commit details

     Copy full SHA for 253e927

     Browse repository at this point

   • getPreferredLibrePgpEncryptionModes() now reads the LibrePGP subpacket (type 34) rather than the AEAD ciphersuites subpacket (type 39), relates to github #2489.

     

     Arpan0995

     authored and

     dghgit

     committed
     44585f9View commit details

     Copy full SHA for 44585f9

     Browse repository at this point

   • Disabled the automatic CodeQL triggers, the workflow now only runs when started by hand.

     dghgit

     committed
     852a374View commit details

     Copy full SHA for 852a374

     Browse repository at this point

   • Documented that the jdk1.4 build needs Ant 1.6.5.

     dghgit

     committed
     386f139View commit details

     Copy full SHA for 386f139

     Browse repository at this point

   • build1-4 now runs Ant 1.6.5 explicitly, as Ant 1.10 cannot run on the 1.4 JDK.

     dghgit

     committed
     a7498d2View commit details

     Copy full SHA for a7498d2

     Browse repository at this point

   • CertPathValidatorException now reports BasicReason.REVOKED for a certificate revoked by CRL or OCSP.

     dghgit

     committed
     e2d198bView commit details

     Copy full SHA for e2d198b

     Browse repository at this point
5. Commits on Oct 3, 2026

   • Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java

     dghgit

     committed
     cd4a467View commit details

     Copy full SHA for cd4a467

     Browse repository at this point

   • CipherOutputStream.close() now has no effect on a stream that is already closed, in crypto.io, jcajce.io and the clean-room javax.crypto, incorporating github PR #2486.

     

     Arpan0995

     authored and

     dghgit

     committed
     02289f3View commit details

     Copy full SHA for 02289f3

     Browse repository at this point

   • SignedMailValidator now compares the certificate and From addresses lower cased in ASCII only, independently of the default locale, incorporating github PR #2485.

     

     rootvector2

     authored and

     dghgit

     committed
     5f7bc5eView commit details

     Copy full SHA for 5f7bc5e

     Browse repository at this point

   • Documented the ObjectInputFilter allow-list needed for serialized SM9 master keys.

     dghgit

     committed
     bbf7cc5View commit details

     Copy full SHA for bbf7cc5

     Browse repository at this point

   • ML-DSA and SLH-DSA KeyFactory.translateKey now convert keys from other providers via their encodings.

     dghgit

     committed
     e1cf818View commit details

     Copy full SHA for e1cf818

     Browse repository at this point
6. Commits on Oct 2, 2026

   • Split a multi-catch in JceExternalPublicKeyDataDecryptorFactoryBuilder so the jdk15to18 build compiles again.

     dghgit

     committed
     463dfa7View commit details

     Copy full SHA for 463dfa7

     Browse repository at this point

   • The CMS algorithm protection attribute is now always generated from the algorithms actually used, relates to github #2480.

     dghgit

     committed
     edbc8f4View commit details

     Copy full SHA for edbc8f4

     Browse repository at this point

   • Stop forcing positive value interpretation of tls features

     peterdettman

     committed
     83e3ac2View commit details

     Copy full SHA for 83e3ac2

     Browse repository at this point

   • Salsa20Engine.processBytes now XORs whole 64-byte keystream blocks in a plain loop, so Salsa20, XSalsa20, ChaCha and XChaCha20 run 1.3x to 1.75x faster, relates to github #2476.

     

     winne42

     authored and

     dghgit

     committed
     350d594View commit details

     Copy full SHA for 350d594

     Browse repository at this point

   • Poly1305 now absorbs whole blocks of an update straight from the input with the accumulator in local variables, 1.3x to 1.5x faster for 1 KB and longer, relates to github #2477.

     

     winne42

     authored and

     dghgit

     committed
     0387de7View commit details

     Copy full SHA for 0387de7

     Browse repository at this point

   • Merge branch 'bcpqc-signature-reinit' into 'main'

     Show description for d4a9bb8
     dghgit

     committed
     d4a9bb8View commit details

     Copy full SHA for d4a9bb8

     Browse repository at this point

   • Discard the message buffered by the AIMer, FAEST, Falcon, HAETAE, MAYO, MQOM,...

     

     ligefeiBouncycastle

     authored and

     dghgit

     committed
     c864a96View commit details

     Copy full SHA for c864a96

     Browse repository at this point