Legion of the Bouncy Castle Java Cryptography API

Release Notes: This release includes further cleanup, and the PEM API is now usable via operator interfaces (use PEMParser for reading). The SHA3 family of digests and the DSTU-4145-2002 signature algorithm have been added. A new provider (BCPQ) has been added with support for the Rainbow signatures and McEliece-style encryption. Also added is support for auto-generation of ephemeral keys in IES. A number of bugs have been fixed, and the TLS/SSL API has been updated to avoid the issues raised by the "Lucky Thirteen" attack. If you are using the BC TLS/SSL API, the authors strongly recommend updating to this release.

Release Notes: This release includes further cleanup and the OpenPGP API is now usable via operator interfaces similar to what were added for CMS in 1.46. The number of lightweight operator implementations has been expanded and certificate generation, OpenPGP, CMS, CRMF, CMP, PKCS, and OCSP are now supported across all JDK releases including the J2ME (except compression). Support has been added for EAC (Extended Access Control) and a lightweight version of NTRU. Classes involved in CRL manipulation have been rewritten so as to support extremely large CRLs. A number of bugs have also been fixed.

Release Notes: This release adds support for client side SSL to the TLS API, and support for CMP (RFC 4210), CRMF (RFC 4211), and CMS TimeStampedData (RFC 5544). The CMS and TSP APIs have been rewritten and new APIs have been added for certificate generation and OCSP, which allow the use of interface based operators to provide cryptographic services. This means it is now possible to use the lightweight API, or any another small factor API, in addition to the JCE/JCA to provide cryptographic operations required to support all these standards.

Release Notes: This release adds support for EC MQV to the light weight and CMS/SMIME libraries. In addition, OpenPGP now supports UTF-8 in file names for literal data. EC keys may now be serialized. The provider now makes use of a privileged block for constructing the provider table. ASN.1 processing has been reviewed to further reduce the likelihood of OutOfMemory errors for badly corrupted streams. Constant time comparisons have been introduced to remove the possibility of timing attacks in several areas such as with cipher modes like GCM and CCM.

Release Notes: GCM mode is now around ten times faster. PSS signature support has been added to CMS and S/MIME. Support for EC encrypted keys has been added to the openSSL PEM classes. Bugfixes include correction of a date calculation error in GeneralisedTime when the time included microseconds, support for ECDH with the JSSE, and the J2ME SecureRandom now uses common seed material within the VM. A number of other fixes and enhancements have been made.