All releases of Legion of the Bouncy Castle Java Cryptography API
Release Notes: This release includes further cleanup and the OpenPGP API is now usable via operator interfaces similar to what were added for CMS in 1.46. The number of lightweight operator implementations has been expanded and certificate generation, OpenPGP, CMS, CRMF, CMP, PKCS, and OCSP are now supported across all JDK releases including the J2ME (except compression). Support has been added for EAC (Extended Access Control) and a lightweight version of NTRU. Classes involved in CRL manipulation have been rewritten so as to support extremely large CRLs. A number of bugs have also been fixed.
Release Notes: This release adds support for client side SSL to the TLS API, and support for CMP (RFC 4210), CRMF (RFC 4211), and CMS TimeStampedData (RFC 5544). The CMS and TSP APIs have been rewritten and new APIs have been added for certificate generation and OCSP, which allow the use of interface based operators to provide cryptographic services. This means it is now possible to use the lightweight API, or any another small factor API, in addition to the JCE/JCA to provide cryptographic operations required to support all these standards.
Release Notes: This release adds support for EC MQV to the light weight and CMS/SMIME libraries. In addition, OpenPGP now supports UTF-8 in file names for literal data. EC keys may now be serialized. The provider now makes use of a privileged block for constructing the provider table. ASN.1 processing has been reviewed to further reduce the likelihood of OutOfMemory errors for badly corrupted streams. Constant time comparisons have been introduced to remove the possibility of timing attacks in several areas such as with cipher modes like GCM and CCM.
Release Notes: GCM mode is now around ten times faster. PSS signature support has been added to CMS and S/MIME. Support for EC encrypted keys has been added to the openSSL PEM classes. Bugfixes include correction of a date calculation error in GeneralisedTime when the time included microseconds, support for ECDH with the JSSE, and the J2ME SecureRandom now uses common seed material within the VM. A number of other fixes and enhancements have been made.
Release Notes: This is a bugfix release. Multiple countersignatures in CMS/SMIME messages are now correctly collected, hashCode() for X509Name is now fully consistent with its equals() method, and the HC-128, HC-256 implementations have had a sign expansion and byte swap bug fixed and are now fully compliant with the latest Ecrypt test vectors. Note: if you are looking at using HC-128 or HC-256, you need to update to this release.
Release Notes: This release adds Grain v1 and Grain128, as well as basic support for AuthenticatedData to the CMS API. Further work has been done to improve the BC APIs working with Provider objects rather than provider names, and JDK 1.5 and 1.6 jars are now pre-packaged with pack200. A number of other bugfixes and enhancements have also been made.
Release Notes: This release adds a faster and smaller version of Camellia. The ECDSA implementation is now compliant with X9.62-2005, OpenPGP, S/MIME, and CMS now support passing of providers as well as provider names, S/MIME handles a wider range of special cases for signature verification, and a range of other improvements have been made to the J2ME, CMS, S/MIME, and OpenPGP APIs. A regression from 1.38 for handling PKIXCertPathCheckers on intermediate certificates is fixed.
Release Notes: This release adds GCM mode and a DES-EDE only PKCS12 file type. The TSP package now supports validation of responses with v2signingCertificate entries. X509Name now handles escaped "+" symbols correctly, and some minor bugs have been fixed affecting SMIME, EAX mode, and the OpenPGP APIs. In addition, a regression from 1.38 to 1.39 with the populating of PKIXCertPathValidatorResult.getPublicKey() has been dealt with. At the request of a number of users, this release also splits the provider jars so that the default jar no longer contains the IDEA encryption algorithm.
Release Notes: This release adds certifications with user attributes for OpenPGP, CMS countersignature support, and VMPC-MAC. Speed improvements have been made to the ASN.1 package. The CertPath validator now covers a wider range of NIST validation tests. An error in IV handling for SEED and Camellia in CMS has been fixed. Other bug fixes and enhancements were made. The signing certificate for the provider has been updated to one expiring in 2013.
Release Notes: This release adds the VMPC stream cipher. Performance improvements were made to both the ASN.1 and CMS libraries. The BCPGInputStream class can now handle packets in the 2**31->2**32 - 1 range. In addition, a bug that could cause TlsInputStream to return an early end of file has been fixed, and a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes has been removed.
