bc-java
bc-java copied to clipboard
Bouncy Castle Java Distribution (Mirror)
See write up below by one of our engineers: Using Yourkit, I can demonstrate an excessive amount of exceptions are created surrounding the normal function of TLS connections between Niagara...
Hello, I need to exchange further data during the TLS handshake to verify the integrity of the Client and Server. In order to do that I want to implement a...
Hi Team, We updated bouncy castle jars to 1.7 after upgrading , few of API calls are failing in our java application. Internal Exception: org.bouncycastle.tls.TlsFatalAlert: insufficient_security(71) at org.eclipse.persistence.exceptions.XMLMarshalException.marshalException(XMLMarshalException.java:104) ~[eclipselink.jar:2.6.7.v20190604-418f1a1c56] at...
We are hitting a performance issue with BCFIPS when downloading files using HTTPS. Profiling reveals high cpu usage in the following call chain. This is some AES code in BCFIPS....
If using bootstrap class loader, the FipsStatus.getMarker() cannot work because it relies on system class loader. Here is the context: 1. bootstrap class loader is used to load bc classes....
I am encountering an issue when attempting to generate ML-DSA and SLH-DSA certificates using the Java keytool. It seems to be related to the ContextParameterSpec. Specifically, I am unsure if...
https://github.com/bcgit/bc-java/blame/bdc97032f09c95c1d78ad71e19b6cc2ae712fa99/pkix/src/main/java/org/bouncycastle/pkix/util/X509CertificateFormatter.java#L261 This line should append `pad` instead of `spaces`. `pad` already has the spaces added to it in line 253
The downloaded https://downloads.bouncycastle.org/fips-java/docs/RELEASE_NOTES.md only has bc-fips up through 1.0.2.5. The "Releases" drop-down list at https://www.bouncycastle.org/download/bouncy-castle-java-fips/#release-notes has notes for the 1.0 series up through .4, but then skips to 2.x. (I...
``` $ jarsigner -verify AmazonCorrettoCryptoProvider-2.5.0.jar jar is unsigned. ``` ``` $ jarsigner -verify bc-fips-2.1.2.jar The jar will be treated as unsigned, because it is signed with a weak algorithm that...
```java String staticVector = "lbsTNi0WXIg="; String password = "HJQScqUp1l3zfy27RA4dvAE251WW2T+rKb7JQOXgvMQB7hCl/VFQE3WXyAL4PYRmIo8gK/kqQu/UykAiThrDYOVynrUED0Cg==KiT2on42Kp"; String inputTextMsg = "Hi"; SecureRandom consistentSecureRandom = new ConsistentByteProvider(Base64.decodeBase64(staticVector)); JcePGPDataEncryptorBuilder builder = new JcePGPDataEncryptorBuilder(PGPEncryptedData.CAST5); builder.setWithIntegrityPacket(false); builder.setSecureRandom(consistentSecureRandom); PGPEncryptedDataGenerator generator = new PGPEncryptedDataGenerator(builder);...