github.com/bcgit/bc-java issues | Ecosyste.ms: OpenCollective

Bug during CV Certificate request signature validation.

Burtsev-Alexey opened this issue 11 months ago

Sanitize boolean conversions in signature subpackets.

vanitasvitae opened this pull request 11 months ago

Streaming support for CMSAuthEnvelopedData (CMSAuthEnvelopedDataStreamGenerator)?

priderider opened this issue 11 months ago

BouncyCastle 1.77: org.bouncycastle.cms.CMSException caused by java.io.EOFException when parsing CipherInputStream

priderider opened this issue 11 months ago

Since TLSUserGuide 1.0.13 the code example in section 3 in chapter 3.5.1 Endpoint Identification is incomplete

MyLogins opened this issue 11 months ago

CCM Block Mode includes MAC bytes when validating Payload Length

CipherGato opened this issue 11 months ago

BC-FIPS 1.0.2.3 Vulnerability and compatible with JAVA 17

vijimg opened this issue 11 months ago

Out of memory when using CipherInputStream

freedom1b2830 opened this issue 11 months ago

Update EccP256CurvePoint.java

chchen-scholar opened this pull request 11 months ago

PGP verification of signature with SHA3 algorithm

Patrick-Harms opened this issue 11 months ago

Messaging Layer Security Implementation for Bouncy Castle

roy-basmacier opened this pull request 11 months ago

Implement Memoable Interface

seungyeonpark opened this pull request 12 months ago

Vulnerability in Bouncy Castle version 1.70 [CVE-2023-33201 ] [ BDSA-2023-3254 ( CVE-2023-33202 )]

sankar-gp opened this issue 12 months ago

Apache mina 2.7.0+ bouncycastle 2.73.3 + java8 + linux brings javax.crypto.ShortBufferException

IrinaSvirkina opened this issue 12 months ago

Question: Are bouncycastle versions backward compatible?

adnsimona opened this issue 12 months ago

Add Post-Quantum Cryptography (PQC) Algorithms for TLS 1.3 Key Exchange

yuhh0328 opened this pull request 12 months ago

Jakarta 10 compatible Bouncy castle jar

khusi1251 opened this issue 12 months ago

BC-FIPS certification for JRE 21

IvanLaktyunkin opened this issue 12 months ago

X500NameTokenizer does not parse certificates containing DN with escaped quotes

erdbeerschnitzel opened this issue 12 months ago

Release notes for bctls-fips 1.0.18

mayank-aggarwal28 opened this issue about 1 year ago

sntrup761 prime sharedKeyBytes value not correct?

norrisjeremy opened this issue about 1 year ago

Exception on valid (in openssl) CMS message : no such algorithm: SHA256WITHRSA

izderadicka opened this issue about 1 year ago

Managing DTLS using a non-blocking architecture in Netty

nanguantong opened this issue about 1 year ago

DLApplicationSpecific removed issue (ASN.1)

WalterYongtaoWang opened this issue about 1 year ago

How does jdk17 need to introduce bc-fips 1.0.2.4

BoWu3 opened this issue about 1 year ago

DRBG default implementation ist not the default anymore since BC 1.74

problemzebra2 opened this issue about 1 year ago

IllegalArgumentException in OcspCache when optional parent revocation checker OcspExtensions is empty

felixdo opened this issue about 1 year ago

Composite post-quantum signatures experimental implementation

Honzaik opened this pull request about 1 year ago

Request new method: X509v2CRLBuilder.setThisUpdate()

stevemit opened this issue about 1 year ago

Is there a version of bc-fips certified for FIPS 140-3 available on Maven?

praneethsf opened this issue about 1 year ago

Impact of CVE-2023-33202

zhanghui1094 opened this issue about 1 year ago

BouncyCastle Java 1.70 Vulnerabilities, No Fix Available

JimLynchCodes opened this issue about 1 year ago

use of cleared weak reference in provider OcspCache

dghgit opened this issue about 1 year ago

Please clarify fixing commit for CVE-2023-33202

apoleon opened this issue about 1 year ago

Ocspresponder Cache possible nullpointer

ecki opened this issue about 1 year ago

bc-fips and SpringBoot 3.2 compatibility issue

x41dev opened this issue about 1 year ago

Different behavior of bc-fips 1.0.2.3 and 1.0.2.4 under Java 17

pavelnemirovsky opened this issue about 1 year ago

Memory Leak caused by bouncycastle

ikechar opened this issue about 1 year ago

Geting TLS Channel Binding data for later use in SCRAM

bmalkow opened this issue about 1 year ago

Migration from non-FIPS to FIPS BC jar

SushmaReddyLoka opened this issue about 1 year ago

trailing white space in "-----BEGIN CERTIFICATE----- " causes readPemObject returning null

WalkerWalker opened this issue about 1 year ago

org.bouncycastle.crypto.fips.FipsSelfTestFailedError: Exception on self test: Array index out of range: 32: EC

nmanda23 opened this issue about 1 year ago

junit.framework.ComparisonFailure: expected:<... Sep 1, 2006 9:08:35[ AM GMT. But the certificate expired at Sep 1, 2006 8:39:20 ]AM GMT.> but was:<... Sep 1, 2006 9:08:35[ AM GMT. But the certificate expired at Sep 1, 2006 8:39:20 ]AM GMT.>

vaukai opened this issue about 1 year ago

junit.framework.ComparisonFailure: expected:<It's 1:12:00[ ]PM GMT at Aug 17, 20...> but was:<It's 1:12:00[ ]PM GMT at Aug 17, 20...>

vaukai opened this issue about 1 year ago

BouncyCastle FIPS 1.0.2.4 giving error FipsUnapprovedOperationError: RSA PKCS1.5 encryption disallowed

KaviaJosekutty17 opened this issue about 1 year ago

BouncyCastle vulnerable to a timing variant of Bleichenbacher called Marvin Attack

tomato42 opened this issue about 1 year ago

OperatorCreationException: cannot create signer: HSS/LMS signing is not supported (in Java 21)

vaukai opened this issue about 1 year ago

bctls-fips 1.0.16 -> 1.0.17 breaks TLS handshake

MatteoVH opened this issue about 1 year ago

bcjmail-fips has not been uploaded to maven

bjsteffes opened this issue about 1 year ago

External PSK support with TLS 1.3

sunnysingh85 opened this issue about 1 year ago

How to create CMSSignedData instance that accepts webcrypto ECDSA signatures

CipherTrustee opened this issue about 1 year ago

ECFieldfp

ruiyan-yu opened this issue about 1 year ago

Why does engineGeneratePublic need to use SecureRandom?

artoonie opened this issue about 1 year ago

bctls-fips is not reporting CertPathBuilderException on self-signed certificate validation failure

tpapoyan2 opened this issue about 1 year ago

Restricting ciphers in CustomSSLSocketFactory

gsaviane opened this issue about 1 year ago

Tls injection mechanism

sergejskozlovics opened this pull request about 1 year ago

TLS certificate expired

jedsalazar opened this issue about 1 year ago

How to decrypt the private key encrypted using aes_cfb_256 encryption mode in java

MaheshMarathe opened this issue about 1 year ago

jar signature of bctls-fips.jar is expired

dmgping opened this issue about 1 year ago

Different signature hashes depending on BC version

philippecade opened this issue about 1 year ago

CSHAKEDigest clone constructor not marked public

chungy opened this issue about 1 year ago

[WIP] Fixes Issue #1508 providing more information about certificate parsing issues

pjsg opened this pull request about 1 year ago

JceInputDecryptorProviderBuilder support GCM parameters

stevemit opened this issue about 1 year ago

JceCMSContentEncryptorBuilder with provided key

stevemit opened this issue about 1 year ago

bc-java 1.75 fails to parse (admittedly invalid) certificates that used to be parseable

pjsg opened this issue about 1 year ago

bcprov-jdk15to18-1.69.jar library vulnerability

PriyatamaB opened this issue about 1 year ago

bcprov-jdk15on-1.69.jar library vulnerability

PriyatamaB opened this issue about 1 year ago

org.bouncycastle.operator.OperatorCreationException is undocumented

minfrin opened this issue about 1 year ago

CVCertificate incorrectly returns issue date instead of expire date

Burtsev-Alexey opened this issue about 1 year ago

Exception in thread "main" java.lang.NoClassDefFoundError: org/bouncycastle/asn1/cms/CMSObjectIdentifiers

sumanbanerjee1981 opened this issue about 1 year ago

CMSSignedDataParser unable to verify GOST3411-2012-256WITHECGOST3410-2012-256 attached signature which has no `signedAttributeSet`

beerbis opened this issue about 1 year ago

CMS: Add support for sha-1WithRSAEncryption *digest* algorithm + aliases.

kevinhwang opened this pull request about 1 year ago

BCRSAPublicKey creation is slow, causing io.netty.handler.ssl.SslHandshakeTimeoutException

niklas-sparfeld-gcx opened this issue about 1 year ago

ByteUtils.xor method not migrated to org.bouncycastle.util.Arrays.

3mmasun opened this issue about 1 year ago

Turn on header parsing by default in ArmoredInputStream.Builder

vanitasvitae opened this pull request about 1 year ago

Bcrypt Implementation in Bouncy Castle 1.76 Produces Identical Hashes for Different Passwords

cmedianu opened this issue about 1 year ago

The wildcard in `Bouncy Castle` might lead to name confusion

x509-name-testing opened this issue about 1 year ago

Parsing PKCS#12 with KeyBag (OID: 1.2.840.113549.1.12.10.1.1) ignores KeyBag

kumaakh opened this issue over 1 year ago

Configurable provider during signing process for TLS

KORe4 opened this issue over 1 year ago

SignedMailValidatorException: cannot access org.bouncycastle.pkix.util.LocalizedException

shred opened this issue over 1 year ago

Fix retransmission of DTLS server flight after a retransmitted aggregated packet

JonathanLennox opened this pull request over 1 year ago

Bouncycastle does not check BAD/EMPTY OBJECT in PKCS7

zhaozg opened this issue over 1 year ago

Bouncycastle does not retransmit the last server handshake flight on receipt of the retransmitted last client flight

JonathanLennox opened this issue over 1 year ago

Why is Selector's implementation class implemented as Raw type Selector?

yu-young-hoon opened this issue over 1 year ago

DTLS should aggregate records

JonathanLennox opened this issue over 1 year ago

BC FIPS version does not include ProvRevocationChecker

stolyarchukav opened this issue over 1 year ago

Client-side OCSP does not work with TLS 1.3

stolyarchukav opened this issue over 1 year ago

CMS verification fails in Bouncy Castle when signed attributes in the message are not sorted

satur9nine opened this issue over 1 year ago

bc-fips compatible with bouncycastle 1.75 and above for ANS.1 core packages ?

whymaomao opened this issue over 1 year ago

DER-encoded CMS SignedData object using CMSSignedDataStreamGenerator

SkyCrawl opened this issue over 1 year ago

NameConstraints intersectPermittedSubtree is not working when name constraints extensions are set in multiple place in the CA hierarchy.

kushshrestha01 opened this issue over 1 year ago

IETFUtils.rDNsFromString: throw exception if unescaped equal sign is used in value

ff-wl opened this pull request over 1 year ago

Empty Extensions Sequence

mtgag opened this issue over 1 year ago

The oid of the wapip192v1 curve in GMObjectIdentifiers.java is wrong

zzhouxq opened this issue over 1 year ago

Is salting being applied in this file?

0neand0nly opened this issue over 1 year ago

Some potential may exist whitin this project

0neand0nly opened this issue over 1 year ago

Is X509LDAPCertStoreSpi.java okay to use?

jy8457 opened this issue over 1 year ago

RSASSA-PSS KeyFactory with all KeySpecs should generate RSASSA-PSS keys with correct AlgorithmId

lhazlewood opened this issue over 1 year ago

org.bouncycastle.jcajce.provider.asymmetric.edec.SignatureSpi should throw InvalidKeyException

pvandenbroucke opened this issue over 1 year ago

Is there any reason why you guys are keeping SHA1?

0neand0nly opened this issue over 1 year ago