Bouncy Castle Crypto Provider Package version 1.60 now available
Release 1.60 is now out.
This release deals with two CVEs: one affecting RSA key pair generation
where the certainty value is being tweaked in the light-weight API, and
the other on properly validating an XMSS/XMSS^MT private key on reload.
In terms of improvements, the BCJSSE now supports SNI, CMS now supports
SHA-3 signatures, the Unified Model is now fully supported for
Diffie-Hellman with ephemeral keys, and PGP EC operations can support a
wider range of curves. Issues have also been fixed in EST, CRMF request
generation, and low-level support has been added for EdDSA.
Further details on other additions and bug fixes can be found in the
release notes at:
In other news, the first nine chapters of the new book, "Java
Cryptography: Tools and Techniques", are now completed as well
as some material for chapter 12 (certification requests) and chapter 15
(post quantum crypto). The book is available at:
The Legion of the Bouncy Castle Inc is a registered Australian
charity based in the State of Victoria, Australia.
If you wish to sponsor specific work on Bouncy Castle, get early access
to the FIPS APIs under development, or get a commercial support contract
for the APIs please contact us at Crypto Workshop