Commit history

1. Commits on Sep 25, 2026

   • Use raw agreement directly and cleanup

     peterdettman

     committed
     6d7d611View commit details

     Copy full SHA for 6d7d611

     View code at this pointBrowse repository at this point
2. Commits on Sep 22, 2026

   • OpenPGP: add PGPEncryptedDataList.extractSessionKeyEncryptedData(boolean) so a session key the caller recovered from a password is quick checked again, and use it on the high-level API's passphrase…

     Show description for c576fe9
     dghgit

     committed
     c576fe9View commit details

     Copy full SHA for c576fe9

     View code at this pointBrowse repository at this point

   • pgsc: OpenPGP smart card signature support, with the raw sign and decrypt operations moved onto OpenPGPSmartCard so a backend can be emulated in software, incorporating github PR #2430.

     

     vanitasvitae

     authored and

     dghgit

     committed
     85481b1View commit details

     Copy full SHA for 85481b1

     View code at this pointBrowse repository at this point

   • pg: say in the javadoc of OpenPGPKeyGenerator.build(char[]) that it zeroizes the array it is passed, the one place in the API that clears a caller's.

     dghgit

     committed
     b70137eView commit details

     Copy full SHA for b70137e

     View code at this pointBrowse repository at this point

   • pgsc: the YubiKey decryptor factories clear a clone of the card user PIN rather than the array the KeyPassphraseProvider still owns, incorporating github PR #2444.

     

     Arpan0995

     authored and

     dghgit

     committed
     2a003faView commit details

     Copy full SHA for 2a003fa

     View code at this pointBrowse repository at this point
3. Commits on Sep 13, 2026

   • Moved to 1.87-SNAPSHOT: build properties, the four provider version strings and doubles, the three ArmoredOutputStream BCPG version stamps and the pg tests asserting on the armor Version header.

     dghgit

     committed
     42a1040View commit details

     Copy full SHA for 42a1040

     View code at this pointBrowse repository at this point
4. Commits on Sep 10, 2026

   • OpenPGPDocumentSignature.isValidAt now folds in the signature's own effectiveness, so a data signature past its Signature Expiration Time (RFC 9580 sec. 5.2.3.18) is no longer reported valid at tha…

     Show description for d8dca60
     dghgit

     committed
     d8dca60View commit details

     Copy full SHA for d8dca60

     View code at this pointBrowse repository at this point

   • An expired primary key now takes its subkeys with it: the binding check applies the primary key's Key Expiration Time to the whole certificate, and a subkey no longer inherits that validity period,…

     Show description for 70ca927
     dghgit

     committed
     70ca927View commit details

     Copy full SHA for 70ca927

     View code at this pointBrowse repository at this point

   • The high-level OpenPGP message reader now sanitizes document signatures against the policy its processor was configured with rather than the implementation's own default, so a policy passed to the …

     Show description for fe55ea3
     dghgit

     committed
     fe55ea3View commit details

     Copy full SHA for fe55ea3

     View code at this pointBrowse repository at this point
5. Commits on Sep 8, 2026

   • Move to the 1.86 release: gradle/bc-build version properties to 1.86, the BC and BCPQC provider info strings and version doubles across the base, jdk1.1 and jdk1.4 copies, the BCPG armor version st…

     Show description for 35e8ebf
     dghgit

     committed
     35e8ebfView commit details

     Copy full SHA for 35e8ebf

     View code at this pointBrowse repository at this point
6. Commits on Sep 7, 2026

   • The seven OpenPGP signature subpackets whose body RFC 9580 defines as a fixed length now all enforce that length where the subpacket is parsed rather than deferring it to an accessor, only Signatur…

     Show description for 9eadfc9
     dghgit

     committed
     9eadfc9View commit details

     Copy full SHA for 9eadfc9

     View code at this pointBrowse repository at this point
7. Commits on Sep 6, 2026

   • org.bouncycastle.openpgp.api.DoubleBufferedInputStream, which no class in the library referenced and whose read() returned the buffered byte unmasked so that every byte from 0x80 upwards came back …

     Show description for 76020c6
     dghgit

     committed
     76020c6View commit details

     Copy full SHA for 76020c6

     View code at this pointBrowse repository at this point
8. Commits on Sep 4, 2026

   • The high-level OpenPGP message reader now updates and verifies only those prefixed (non-one-pass) signatures whose PGPSignature was successfully initialised, so a message whose signer certificate w…

     Show description for d68195b
     dghgit

     committed
     d68195bView commit details

     Copy full SHA for d68195b

     View code at this pointBrowse repository at this point

   • OpenPGP: a truncated message is now reported rather than read as a clean end of message - the AEAD decryption streams no longer let an EOFException escape to BCPGInputStream.nextPacketTag(), and Op…

     Show description for ab7a235
     dghgit

     committed
     ab7a235View commit details

     Copy full SHA for ab7a235

     View code at this pointBrowse repository at this point
9. Commits on Sep 2, 2026

   • A version 6 OpenPGP certificate is now used only when its primary key carries a valid Direct Key signature, as RFC 9580 sec. 5.2.3.10 requires, rather than falling back to the primary user ID bindi…

     Show description for 400d275
     dghgit

     committed
     400d275View commit details

     Copy full SHA for 400d275

     View code at this pointBrowse repository at this point
10. Commits on Aug 30, 2026

    • Key Flags are a statement about the key the carrying signature refers to, so a subkey no longer inherits them from the primary key's certificate-wide signatures - a Subkey Binding signature that om…

      Show description for b51452f
      dghgit

      committed
      b51452fView commit details

      Copy full SHA for b51452f

      View code at this pointBrowse repository at this point
11. Commits on Aug 22, 2026

    • Require the component key that issued a third-party certification or trust delegation to hold the certification key flag when the signature was made, so that a SIGN_DATA-only subkey is no longer at…

      Show description for f0d5c85
      dghgit

      committed
      f0d5c85View commit details

      Copy full SHA for f0d5c85

      View code at this pointBrowse repository at this point
12. Commits on Aug 19, 2026

    • Eliminate five javac deprecation/unchecked warnings in test suites.

      Show description for e9eb1f6
      

      gefeili

      committed
      e9eb1f6View commit details

      Copy full SHA for e9eb1f6

      View code at this pointBrowse repository at this point

    • Fix javadoc doclint issues across core, pg, pkix and prov: broken and cross-module @link references, an invalid wildcard member link, unescaped '<' text, a malformed <a href> tag, stale @param name…

      Show description for 498ee2a
      

      gefeili

      committed
      498ee2aView commit details

      Copy full SHA for 498ee2a

      View code at this pointBrowse repository at this point
13. Commits on Aug 14, 2026

    • Bound the length and the number of OpenPGP ASCII armor header lines ArmoredInputStream will accumulate while parsing them at construction, with both limits set by org.bouncycastle.openpgp.max_armor…

      Show description for e597b7a
      dghgit

      committed
      e597b7aView commit details

      Copy full SHA for e597b7a

      View code at this pointBrowse repository at this point

    • Guard the null mode in MessageEncryptionMechanism hashCode and toString, so the unencrypted mechanism can be hashed and printed like any other.

      dghgit

      committed
      9be6e4cView commit details

      Copy full SHA for 9be6e4c

      View code at this pointBrowse repository at this point

    • Merge branch 'fixMessageEncryptionMechanism' of https://github.com/pgpainless/bc-java into pgpainless-fixMessageEncryptionMechanism

      dghgit

      committed
      73578e9View commit details

      Copy full SHA for 73578e9

      View code at this pointBrowse repository at this point
14. Commits on Aug 13, 2026

    • Fix encryption mode of MessageEncryptionMechanism.unencrypted() to 'null'

      vanitasvitae

      committed
      943ee9cView commit details

      Copy full SHA for 943ee9c

      View code at this pointBrowse repository at this point
15. Commits on Aug 12, 2026

    • Rework the JCE smart-card support merged from github #2374: restore the release.debug compile switch, single-source the PKESK parsing checks in AbstractPublicKeyDataDecryptorFactory for all the pub…

      Show description for 24af703
      dghgit

      committed
      24af703View commit details

      Copy full SHA for 24af703

      View code at this pointBrowse repository at this point

    • Merge branch 'smartcard_2' of https://github.com/pgpainless/bc-java into pgpainless-smartcard_2

      dghgit

      committed
      6d69560View commit details

      Copy full SHA for 6d69560

      View code at this pointBrowse repository at this point
16. Commits on Aug 11, 2026

    • PGSC: JCE implementation

      vanitasvitae

      committed
      44d1110View commit details

      Copy full SHA for 44d1110

      View code at this pointBrowse repository at this point

    • Restore the jdk1.4 build: narrow the ShamirSplitSecret getSecretShares results explicitly since the overlay cannot use a covariant return, replace StandardCharsets and an enhanced-for in the OpenPG…

      Show description for 0e354e5
      dghgit

      committed
      0e354e5View commit details

      Copy full SHA for 0e354e5

      View code at this pointBrowse repository at this point
17. Commits on Aug 9, 2026

    • Merge branch 'openpgp-smartcard-decryption' into 'main'

      Show description for 033b499
      

      Administrator

      committed
      033b499View commit details

      Copy full SHA for 033b499

      View code at this pointBrowse repository at this point

    • Implement support for OpenPGP External Secret Keys

      

      ligefeiBouncycastle

      authored and

      Administrator

      committed
      f9a2bf1View commit details

      Copy full SHA for f9a2bf1

      View code at this pointBrowse repository at this point
18. Commits on Aug 7, 2026

    • Add an OpenPGPPolicy decompressed-size limit for the high-level OpenPGP message API, unbounded by default.

      dghgit

      committed
      f56a14dView commit details

      Copy full SHA for f56a14d

      View code at this pointBrowse repository at this point
19. Commits on Aug 4, 2026

    • Centralize GnuPG keybox blob parsing

      

      gefeili

      committed
      6fe9905View commit details

      Copy full SHA for 6fe9905

      View code at this pointBrowse repository at this point

    • Centralize JCE PBE key data decryption

      

      gefeili

      committed
      bce5865View commit details

      Copy full SHA for bce5865

      View code at this pointBrowse repository at this point
20. Commits on Aug 3, 2026

    • Keep OpenPGP dedup cleanup in legacy mirrors

      

      gefeili

      committed
      94e3096View commit details

      Copy full SHA for 94e3096

      View code at this pointBrowse repository at this point

    • Route the OpenPGP PGPUtil key-size lookups through SymmetricKeyUtils.getKeyLengthInBits

      

      gefeili

      committed
      78b0ab1View commit details

      Copy full SHA for 78b0ab1

      View code at this pointBrowse repository at this point

    • Route UserAttributeSubpacket length encoding through StreamUtil.writeNewPacketLength

      

      gefeili

      committed
      b18cb80View commit details

      Copy full SHA for b18cb80

      View code at this pointBrowse repository at this point