Commit history

1. Commits on Sep 22, 2026

   • SM9: Cipher.SM9 decrypts in the mode it was configured with rather than the one the ciphertext's enType names, and neither data-encapsulation mode now produces or accepts a 16-byte C2.

     dghgit

     committed
     94270ffView commit details

     Copy full SHA for 94270ff

     View code at this pointBrowse repository at this point
2. Commits on Sep 18, 2026

   • LMS: Add LMSParameters.create with null guards and equals/hashCode, deprecate the public constructor and switch callers to create

     peterdettman

     committed
     9faa77bView commit details

     Copy full SHA for 9faa77b

     View code at this pointBrowse repository at this point
3. Commits on Sep 9, 2026

   • MTCContentSigner and MTCSignatureVerifierProvider now follow draft-ietf-plants-merkle-tree-certs sec. 7.2 for any subtree, taking the entry index from the serial, evaluating the full inclusion proo…

     Show description for 5f42980
     dghgit

     committed
     5f42980View commit details

     Copy full SHA for 5f42980

     View code at this pointBrowse repository at this point
4. Commits on Aug 25, 2026

   • Stop the misc S/MIME example smoke test contacting smtp.gmail.com, where a silently dropped outbound port 25 left Transport.send() blocked without a connect timeout and hung the whole :misc:test ru…

     Show description for 32f10fd
     dghgit

     committed
     32f10fdView commit details

     Copy full SHA for 32f10fd

     View code at this pointBrowse repository at this point

   • Add Merkle tree proof generation to org.bouncycastle.cert.plants.MerkleTreePrimitives alongside the existing verifiers: computeMerkleTreeHash() for the RFC 9162 Merkle Tree Hash over a range of ent…

     Show description for 513f10a
     dghgit

     committed
     513f10aView commit details

     Copy full SHA for 513f10a

     View code at this pointBrowse repository at this point
5. Commits on Aug 24, 2026

   • Promote the LMS and HSS hash-based signature implementation from org.bouncycastle.pqc.crypto.lms into org.bouncycastle.crypto as ML-KEM, ML-DSA and SLH-DSA were, splitting it the same way with the …

     Show description for 0423971
     dghgit

     committed
     0423971View commit details

     Copy full SHA for 0423971

     View code at this pointBrowse repository at this point
6. Commits on Aug 22, 2026

   • Move the MLS gRPC interop test harness out of the published mls module into the non-publishing misc one as org.bouncycastle.mls.examples.client, taking mls_client.proto and the protobuf codegen wit…

     Show description for f3a7cf1
     dghgit

     committed
     f3a7cf1View commit details

     Copy full SHA for f3a7cf1

     View code at this pointBrowse repository at this point
7. Commits on Aug 21, 2026

   • Add server-side OCSP stapling to the BCJSSE provider and the low-level TLS API, answering status_request and status_request_v2 with a certificate_status message for TLSv1.2 and, from the same TlsSe…

     Show description for ec2f3f0
     dghgit

     committed
     ec2f3f0View commit details

     Copy full SHA for ec2f3f0

     View code at this pointBrowse repository at this point
8. Commits on Aug 18, 2026

   • Fix the Error Prone issues in the misc examples: unescape the HTML entities inside two {@code} javadoc tags so the angle brackets render literally rather than as </>, and make SamplingEntropy…

     Show description for f2699c4
     dghgit

     committed
     f2699c4View commit details

     Copy full SHA for f2699c4

     View code at this pointBrowse repository at this point
9. Commits on Aug 13, 2026

   • Add JCA regeneration of SM9 user private keys through KeyFactory.SM9 via the new SM9SigUserPrivateKeySpec / SM9EncUserPrivateKeySpec (a user key's PKCS#8 encoding alone cannot rebuild a usable key,…

     Show description for a614cac
     dghgit

     committed
     a614cacView commit details

     Copy full SHA for a614cac

     View code at this pointBrowse repository at this point
10. Commits on Aug 10, 2026

    • Documented the server-side OCSP stapling contract on TlsServer.getCertificateStatus and the AbstractTlsServer allowCertificateStatus/allowMultiCertStatus predicates, and added a misc example exerci…

      Show description for 44364b0
      dghgit

      committed
      44364b0View commit details

      Copy full SHA for 44364b0

      View code at this pointBrowse repository at this point
11. Commits on Jul 31, 2026

    • SM9: expose the key exchange as KeyAgreement.SM9, on the KeyAgreement.SM2 model

      

      ligefeiBouncycastle

      authored and

      dghgit

      committed
      8bc2083View commit details

      Copy full SHA for 8bc2083

      View code at this pointBrowse repository at this point
12. Commits on Jul 30, 2026

    • SM9: add lightweight-API examples for the signature, KEM and public key encryption algorithms

      ligefeiBouncycastle

      committed
      21ec3d6View commit details

      Copy full SHA for 21ec3d6

      View code at this pointBrowse repository at this point
13. Commits on Jul 29, 2026

    • C509 certificates — CBOR encoding of X.509 (draft-ietf-cose-cbor-encoded-cert-20)

      

      ligefeiBouncycastle

      authored and

      dghgit

      committed
      92f8ea3View commit details

      Copy full SHA for 92f8ea3

      View code at this pointBrowse repository at this point

    • SM9: keep key-exchange and KEM/decryption user keys apart, split KGC extraction into sig/enc interfaces with hid validation, rename the Sign family to Sig, spell identity out in full, and move SM9S…

      Show description for 94fc295
      dghgit

      committed
      94fc295View commit details

      Copy full SHA for 94fc295

      View code at this pointBrowse repository at this point
14. Commits on Jul 27, 2026

    • SM9: follow the generatePrivateKey -> generateUserKey rename in the key exchange test and example - the master-key user-derivation method was renamed on main, leaving the two hid = 0x02 call sites …

      Show description for c1a7a8c
      

      gefeili

      committed
      c1a7a8cView commit details

      Copy full SHA for c1a7a8c

      View code at this pointBrowse repository at this point
15. Commits on Jul 24, 2026

    • Merge remote-tracking branch 'origin/main' into sm9-keyexchange

      Show description for cb42e49
      

      gefeili

      committed
      cb42e49View commit details

      Copy full SHA for cb42e49

      View code at this pointBrowse repository at this point

    • SM9: add the identity-based digital signature algorithm (Signature.SM3withSM9, GM/T 0044.2)

      ligefeiBouncycastle

      committed
      b9a3a3cView commit details

      Copy full SHA for b9a3a3c

      View code at this pointBrowse repository at this point

    • SM9: add the identity-based key exchange protocol (GM/T 0044.3), completing the GM/T 0044 family

      Show description for 02e7b84
      

      gefeili

      committed
      02e7b84View commit details

      Copy full SHA for 02e7b84

      View code at this pointBrowse repository at this point

    • SM9: encrypt to the recipient's public key rather than master public key + SM9ParameterSpec - Cipher.SM9 in ENCRYPT_MODE now takes the key from SM9EncMasterPublicKey.getUserPublicKey(id), the same …

      Show description for fa5c04c
      

      gefeili

      committed
      fa5c04cView commit details

      Copy full SHA for fa5c04c

      View code at this pointBrowse repository at this point

    • SM9: add identity-based public-key encryption (Cipher.SM9, GM/T 0044.4)

      Show description for 54e1892
      

      gefeili

      committed
      54e1892View commit details

      Copy full SHA for 54e1892

      View code at this pointBrowse repository at this point
16. Commits on Jul 23, 2026

    • Added SM9EncMasterPrivateKey and SM9EncMasterPublicKey interfaces for SM9 user key derivation, replacing the SM9UserKeyParameterSpec KeyPairGenerator path, and minimised visibility in the sm9 provi…

      Show description for 6e07163
      dghgit

      committed
      6e07163View commit details

      Copy full SHA for 6e07163

      View code at this pointBrowse repository at this point

    • SM9-KEM: add the SM9 identity-based key encapsulation mechanism (GM/T 0044.4)

      

      ligefeiBouncycastle

      authored and

      dghgit

      committed
      28c2e89View commit details

      Copy full SHA for 28c2e89

      View code at this pointBrowse repository at this point
17. Commits on Jul 15, 2026

    • Add the misc examples tree to the Gradle build as a non-publishing module so examples compile and smoke-test under CI without shipping in the bc jars

      dghgit

      committed
      bfe38c2View commit details

      Copy full SHA for bfe38c2

      View code at this pointBrowse repository at this point

    • Add an X500NameStyle example showing how to parse a Distinguished Name with a commonName longer than the RFC 5280 64-character bound

      dghgit

      committed
      e587d0aView commit details

      Copy full SHA for e587d0a

      View code at this pointBrowse repository at this point
18. Commits on Jun 15, 2026

    • example of ElGamal Homomorphic Encryption, relates to github #706

      dghgit

      committed
      09a608fView commit details

      Copy full SHA for 09a608f

      View code at this pointBrowse repository at this point
19. Commits on Jun 12, 2026

    • added missing package-info files

      dghgit

      committed
      dd7d008View commit details

      Copy full SHA for dd7d008

      View code at this pointBrowse repository at this point

    • Added ASN.1 structure and OID for legacy Microsoft Authenticode time stamp requests, with a worked example in misc, relates to github #2005.

      dghgit

      committed
      0e318ecView commit details

      Copy full SHA for 0e318ec

      View code at this pointBrowse repository at this point
20. Commits on Jun 11, 2026

    • further updates for draft-04, added Landmark Certificate example

      dghgit

      committed
      8b80134View commit details

      Copy full SHA for 8b80134

      View code at this pointBrowse repository at this point

    • refactoring of builder, API coherence

      dghgit

      committed
      c4b7889View commit details

      Copy full SHA for c4b7889

      View code at this pointBrowse repository at this point
21. Commits on Jun 10, 2026

    • Add RFC 9474 RSA Blind Signatures (RSABSSA)

      

      ligefeiBouncycastle

      authored and

      dghgit

      committed
      7827ae0View commit details

      Copy full SHA for 7827ae0

      View code at this pointBrowse repository at this point
22. Commits on Jun 9, 2026

    • added KeyPairGenerator for composite KEM, example for composite KEM

      dghgit

      committed
      ceabc43View commit details

      Copy full SHA for ceabc43

      View code at this pointBrowse repository at this point

    • fixes for ErrorProne issues, moved SMIME example to misc directory

      dghgit

      committed
      25105b4View commit details

      Copy full SHA for 25105b4

      View code at this pointBrowse repository at this point
23. Commits on Jun 5, 2026

    • Add Owl augmented PAKE (org.bouncycastle.crypto.agreement.owl)

      

      ligefeiBouncycastle

      authored and

      dghgit

      committed
      20eeedbView commit details

      Copy full SHA for 20eeedb

      View code at this pointBrowse repository at this point
24. Commits on May 28, 2026

    • QCSyntaxExample, relates to #1416

      dghgit

      committed
      5ca9879View commit details

      Copy full SHA for 5ca9879

      View code at this pointBrowse repository at this point