Commit history

1. Commits on Sep 22, 2026

   • CRMF: reject the publication information RFC 4211 sec. 6.3 forbids - pubInfos present with the dontPublish action, or present and empty - on parsing and on construction.

     dghgit

     committed
     dc6822aView commit details

     Copy full SHA for dc6822a

     View code at this pointBrowse repository at this point
2. Commits on Sep 4, 2026

   • TimeStampToken now reports a malformed TSTInfo, and a token signed by other than one signer, as the TSPException its constructor declares rather than letting an unchecked exception out through the …

     Show description for 9b1812c
     dghgit

     committed
     9b1812cView commit details

     Copy full SHA for 9b1812c

     View code at this pointBrowse repository at this point

   • CMS: the RFC 9629 KEMRecipientInfo recipient path no longer lets an oversized kekLength, a sequence size disagreeing with the optional ukm, or a wrap algorithm with no known KEK size escape as an u…

     Show description for e397172
     dghgit

     committed
     e397172View commit details

     Copy full SHA for e397172

     View code at this pointBrowse repository at this point
3. Commits on Aug 22, 2026

   • Bound the C509 validity fields to the X.509 time domain when parsing and route every seconds-to-milliseconds conversion through one checked helper, so that a validityNotAfter displaced by 2^61 seco…

     Show description for 1a7b6d7
     dghgit

     committed
     1a7b6d7View commit details

     Copy full SHA for 1a7b6d7

     View code at this pointBrowse repository at this point
4. Commits on Aug 19, 2026

   • Eliminate five javac deprecation/unchecked warnings in test suites.

     Show description for e9eb1f6
     

     gefeili

     committed
     e9eb1f6View commit details

     Copy full SHA for e9eb1f6

     View code at this pointBrowse repository at this point
5. Commits on Aug 9, 2026

   • Test the returned type in the OER getInstance identity guards: UINT32.getInstance and etsi102941 Version.getInstance guarded on UINT8, EtsiTs103097DataEncryptedUnicast.getInstance on its sibling Et…

     Show description for a161740
     dghgit

     committed
     a161740View commit details

     Copy full SHA for a161740

     View code at this pointBrowse repository at this point
6. Commits on Aug 7, 2026

   • Reject a CMS AuthenticatedData whose digestAlgorithm and authAttrs presence disagree, per RFC 5652 sec. 9.1.

     dghgit

     committed
     dcb683bView commit details

     Copy full SHA for dcb683b

     View code at this pointBrowse repository at this point
7. Commits on Aug 5, 2026

   • Reject malformed RFC 4998 evidence records with ERSException rather than...

     ligefeiBouncycastle

     committed
     3c985ccView commit details

     Copy full SHA for 3c985cc

     View code at this pointBrowse repository at this point
8. Commits on Jul 30, 2026

   • Report an out-of-range or overflowing CHOICE tag, an unimplemented CHOICE tag class, an oversized length determinant and a malformed extension presence bitmap as IOException, and guard the ENUM lab…

     Show description for 49aa20d
     dghgit

     committed
     49aa20dView commit details

     Copy full SHA for 49aa20d

     View code at this pointBrowse repository at this point
9. Commits on Jul 29, 2026

   • C509 certificates — CBOR encoding of X.509 (draft-ietf-cose-cbor-encoded-cert-20)

     

     ligefeiBouncycastle

     authored and

     dghgit

     committed
     92f8ea3View commit details

     Copy full SHA for 92f8ea3

     View code at this pointBrowse repository at this point

   • Consume an unknown OER extension in bounded chunks and fail at the genuine end of input, rather than reading its attacker-declared length one byte at a time while ignoring end of stream - which bur…

     Show description for 64cd08c
     dghgit

     committed
     64cd08cView commit details

     Copy full SHA for 64cd08c

     View code at this pointBrowse repository at this point
10. Commits on Jul 27, 2026

    • Guard four fixed-arity CMS/CRMF/CMP SEQUENCE decode constructors (KEKRecipientInfo, PasswordRecipientInfo, CertRequest, RevAnnContent) with a lower-bound size check, throwing IllegalArgumentExcepti…

      Show description for 8a9e832
      

      royb

      committed
      8a9e832View commit details

      Copy full SHA for 8a9e832

      View code at this pointBrowse repository at this point
11. Commits on Jul 17, 2026

    • Guard empty/missing-content and out-of-range parse paths against leaked NPE/AIOOBE

      Show description for c577c79
      

      gefeili

      committed
      c577c79View commit details

      Copy full SHA for c577c79

      View code at this pointBrowse repository at this point
12. Commits on Jul 11, 2026

    • Enforce the RFC 9629 kekLength INTEGER (1..65535) lower bound and the version=0 rule in the CMS KEMRecipientInfo / CMSORIforKEMOtherInfo ASN.1 types, which previously only checked the 65535 upper b…

      Show description for 60e7882
      dghgit

      committed
      60e7882View commit details

      Copy full SHA for 60e7882

      View code at this pointBrowse repository at this point
13. Commits on Jul 9, 2026

    • Brought the JPMS module descriptors and OSGi Export-Package headers back in step with the shipped packages: bcprov's module-info gains the missing ecjpake, hash2curve, ldap and keystore.util export…

      Show description for 9545b46
      dghgit

      committed
      9545b46View commit details

      Copy full SHA for 9545b46

      View code at this pointBrowse repository at this point
14. Commits on Jul 8, 2026

    • deleted unnecessary file

      dghgit

      committed
      722c182View commit details

      Copy full SHA for 722c182

      View code at this pointBrowse repository at this point
15. Commits on Jul 7, 2026

    • Replaced the CMS SignedData version-preservation property with a CMSSignedData.asVersion(int) method that returns a copy with the version field forced, so a producer (e.g. Authenticode needing vers…

      Show description for c8a3390
      dghgit

      committed
      c8a3390View commit details

      Copy full SHA for c8a3390

      View code at this pointBrowse repository at this point

    • Harden asn1.cms.SignerInfo decode to reject a non-INTEGER version or non-tagged unsignedAttrs with IllegalArgumentException instead of leaking a ClassCastException, decoding via getInstance to matc…

      Show description for 7ffef51
      dghgit

      committed
      7ffef51View commit details

      Copy full SHA for 7ffef51

      View code at this pointBrowse repository at this point

    • CMSSignedData.replaceSigners/addDigestAlgorithm recompute the SignedData version by default; add opt-in org.bouncycastle.cms.signeddata.preserve_version to carry the original version over verbatim …

      Show description for ec1283f
      dghgit

      committed
      ec1283fView commit details

      Copy full SHA for ec1283f

      View code at this pointBrowse repository at this point
16. Commits on Jul 4, 2026

    • CMS: type-check asn1.cms.Attribute decode (no ClassCastException past the verify contract)

      

      ligefeiBouncycastle

      authored and

      dghgit

      committed
      792a847View commit details

      Copy full SHA for 792a847

      View code at this pointBrowse repository at this point
17. Commits on Jul 3, 2026

    • Complete XMSS/XMSS^MT SP 800-208 support and move asn1.iana into core, relates to github #2176.

      Show description for 910c086
      dghgit

      committed
      910c086View commit details

      Copy full SHA for 910c086

      View code at this pointBrowse repository at this point

    • Sync the jdk1.4 overlays with base, porting missed security and behavioural fixes: name-constraint bypasses, RSA/ElGamal decrypt hardening, policy-tree and keystore iteration DoS guards, CRL signer…

      Show description for 69293a0
      dghgit

      committed
      69293a0View commit details

      Copy full SHA for 69293a0

      View code at this pointBrowse repository at this point
18. Commits on Jul 1, 2026

    • Guard TimeStampResp / TimeStampReq against a too-short SEQUENCE (parser robustness)

      

      ligefeiBouncycastle

      authored and

      Administrator

      committed
      ab0a2a1View commit details

      Copy full SHA for ab0a2a1

      View code at this pointBrowse repository at this point
19. Commits on Jun 29, 2026

    • Guard four fixed-arity ASN.1 SEQUENCE decode constructors (cms.Attribute, cmp.CertStatus, cms.RecipientEncryptedKey, cms.OtherRecipientInfo) with a lower-bound size check, throwing IllegalArgumentE…

      Show description for 4104682
      

      royb

      committed
      4104682View commit details

      Copy full SHA for 4104682

      View code at this pointBrowse repository at this point

    • DVCS: carry `requester` and `extensions` forward in the `DVCSRequestInformationBuilder` seed constructor (RFC 3029 data-loss fix)

      

      ligefeiBouncycastle

      authored and

      Administrator

      committed
      20d2818View commit details

      Copy full SHA for 20d2818

      View code at this pointBrowse repository at this point
20. Commits on Jun 27, 2026

    • Add AttributeTable.hasAny method

      peterdettman

      committed
      7cf9407View commit details

      Copy full SHA for 7cf9407

      View code at this pointBrowse repository at this point

    • CMS: It's just "algorithm protection" attribute

      peterdettman

      committed
      750f13fView commit details

      Copy full SHA for 750f13f

      View code at this pointBrowse repository at this point
21. Commits on Jun 26, 2026

    • Guard for CMS SEQUENCE

      

      royb

      committed
      db00ed2View commit details

      Copy full SHA for db00ed2

      View code at this pointBrowse repository at this point

    • Guard four fixed-arity CMS SEQUENCE decode constructors (CompressedData, DigestedData, KeyTransRecipientInfo, OtherRevocationInfoFormat) with a lower-bound size check

      

      royb

      committed
      67f67a3View commit details

      Copy full SHA for 67f67a3

      View code at this pointBrowse repository at this point
22. Commits on Jun 25, 2026

    • Guard five fixed-arity CMP/CRMF/CMS SEQUENCE decode constructors (ProtectedPart, AttributeTypeAndValue, POPOSigningKeyInput, IssuerAndSerialNumber, OriginatorPublicKey) with a lower-bound size check

      

      royb

      committed
      99e3cc3View commit details

      Copy full SHA for 99e3cc3

      View code at this pointBrowse repository at this point
23. Commits on Jun 23, 2026

    • Standardised Classic McEliece (ISO/IEC 18033-2:2006/Amd 2:2026)

      

      ligefeiBouncycastle

      authored and

      Administrator

      committed
      373a08eView commit details

      Copy full SHA for 373a08e

      View code at this pointBrowse repository at this point
24. Commits on Jun 22, 2026

    • Bound nesting depth and allocations in the OER decoder

      dghgit

      committed
      103a735View commit details

      Copy full SHA for 103a735

      View code at this pointBrowse repository at this point
25. Commits on Jun 20, 2026

    • added short tag handling to cover SP 800-38D

      dghgit

      committed
      2f5e982View commit details

      Copy full SHA for 2f5e982

      View code at this pointBrowse repository at this point

    • Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java

      dghgit

      committed
      3ce0ff6View commit details

      Copy full SHA for 3ce0ff6

      View code at this pointBrowse repository at this point

    • completed FrodoKEM support with AES based algorithms

      dghgit

      committed
      d120bf7View commit details

      Copy full SHA for d120bf7

      View code at this pointBrowse repository at this point