Release Notes: This release adds support for client side TLS 1.2 and client side DTLS 1.2, and the OpenPGP API now supports ECDH and ECDSA (RFC 6637). New algorithms include XSalsa20, ChaCha, SM3, Threefish, and Skein. GOST PKCS#12 keyfiles now parse correctly, and Crypto Pro CFB mode key meshing and RFC 6979 deterministic ECDSA are supported. A simplified cert path API has been added to provide another option for certificate path validation. A number of other features have been added, and a number of bugs have been fixed.
Release Notes: This release adds support for server/client side TLS 1.1 and server/client side DTLS 1.0, the SipHash MAC algorithm, the 4 DRBGs specified in NIST SP 800-90A, OCB mode, and the GMAC algorithm (NIST SP 800-38D). In addition, it is now possible to store OCSP objects in CMS SignedData, parameter and key generation is now fully supported for the keys sizes specified in DSA 2, and support has been added for the SHA-512/t digest varients. A number of bugs and an encoding regression with T61 Strings have also been fixed.
Release Notes: This release includes further cleanup, and the PEM API is now usable via operator interfaces (use PEMParser for reading). The SHA3 family of digests and the DSTU-4145-2002 signature algorithm have been added. A new provider (BCPQ) has been added with support for the Rainbow signatures and McEliece-style encryption. Also added is support for auto-generation of ephemeral keys in IES. A number of bugs have been fixed, and the TLS/SSL API has been updated to avoid the issues raised by the "Lucky Thirteen" attack. If you are using the BC TLS/SSL API, the authors strongly recommend updating to this release.
Release Notes: This release includes further cleanup and the OpenPGP API is now usable via operator interfaces similar to what were added for CMS in 1.46. The number of lightweight operator implementations has been expanded and certificate generation, OpenPGP, CMS, CRMF, CMP, PKCS, and OCSP are now supported across all JDK releases including the J2ME (except compression). Support has been added for EAC (Extended Access Control) and a lightweight version of NTRU. Classes involved in CRL manipulation have been rewritten so as to support extremely large CRLs. A number of bugs have also been fixed.
Release Notes: This release adds support for client side SSL to the TLS API, and support for CMP (RFC 4210), CRMF (RFC 4211), and CMS TimeStampedData (RFC 5544). The CMS and TSP APIs have been rewritten and new APIs have been added for certificate generation and OCSP, which allow the use of interface based operators to provide cryptographic services. This means it is now possible to use the lightweight API, or any another small factor API, in addition to the JCE/JCA to provide cryptographic operations required to support all these standards.
Release Notes: This release adds support for EC MQV to the light weight and CMS/SMIME libraries. In addition, OpenPGP now supports UTF-8 in file names for literal data. EC keys may now be serialized. The provider now makes use of a privileged block for constructing the provider table. ASN.1 processing has been reviewed to further reduce the likelihood of OutOfMemory errors for badly corrupted streams. Constant time comparisons have been introduced to remove the possibility of timing attacks in several areas such as with cipher modes like GCM and CCM.
Release Notes: GCM mode is now around ten times faster. PSS signature support has been added to CMS and S/MIME. Support for EC encrypted keys has been added to the openSSL PEM classes. Bugfixes include correction of a date calculation error in GeneralisedTime when the time included microseconds, support for ECDH with the JSSE, and the J2ME SecureRandom now uses common seed material within the VM. A number of other fixes and enhancements have been made.
Release Notes: This is a bugfix release. Multiple countersignatures in CMS/SMIME messages are now correctly collected, hashCode() for X509Name is now fully consistent with its equals() method, and the HC-128, HC-256 implementations have had a sign expansion and byte swap bug fixed and are now fully compliant with the latest Ecrypt test vectors. Note: if you are looking at using HC-128 or HC-256, you need to update to this release.
Release Notes: This release adds Grain v1 and Grain128, as well as basic support for AuthenticatedData to the CMS API. Further work has been done to improve the BC APIs working with Provider objects rather than provider names, and JDK 1.5 and 1.6 jars are now pre-packaged with pack200. A number of other bugfixes and enhancements have also been made.
Release Notes: This release adds a faster and smaller version of Camellia. The ECDSA implementation is now compliant with X9.62-2005, OpenPGP, S/MIME, and CMS now support passing of providers as well as provider names, S/MIME handles a wider range of special cases for signature verification, and a range of other improvements have been made to the J2ME, CMS, S/MIME, and OpenPGP APIs. A regression from 1.38 for handling PKIXCertPathCheckers on intermediate certificates is fixed.