Skip to content

Commit a8645f2

Browse files
dghgitdghgit
committed
1.4/1.3 update
1 parent 894a880 commit a8645f2

8 files changed

Lines changed: 95 additions & 5 deletions

File tree

‎CONTRIBUTORS.html‎

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,11 @@
66
<p>
77
Donors
88
<p>
9+
The following people donated financially to help with the release of 1.61:
10+
<br />
11+
Bihari Babu
12+
</p>
13+
<p>
914
The following people donated financially to help with the release of 1.60:
1015
<br />
1116
Jens Neuhalfen and perillamint.
@@ -457,7 +462,7 @@
457462
<li>Anders Schack-Mulligen &lt;https://github.com/aschackmull&gt; code cleanups for CMSSignedDataParser, BrokenKDF2BytesGenerator.</li>
458463
<li>Sebastian Wolfgang Roland &lt;sebastianwolfgang.roland&#064stud.tu-darmstadt.de&gt; Initial XMSS/XMSS-MT implementation.</li>
459464
<li>didisoft &lt;https://github.com/didisoft&gt; test code for PGP signature removal involving user ids.</li>
460-
<li>Mike Safonov&lt;https://github.com/MikeSafonov&gt; initial implementation of GOST3410-2012 for light weight provider and JCA, parameters patches for ECGOST keys, initial implementation of GOST3412-2015.</li>
465+
<li>Mike Safonov&lt;https://github.com/MikeSafonov&gt; initial implementation of GOST3410-2012 for light weight provider and JCA, parameters patches for ECGOST keys, initial implementation of GOST3412-2015, addition of fromExtensions() for CRLDistPoint.</li>
461466
<li>Artem Storozhuk &lt;storojs72&#064gmail.com&gt; initial implementation of DSTU7564 (digest) and DSTU7624 (cipher) and their associated modes.</li>
462467
<li>Andreas Glaser &lt;andreas.glaser&#064gi-de.com&gt; patch to recognise ANSSI curves for PKCS#10 requests.</li>
463468
<li>codeborne &lt;https://github.com/cbxp&gt; patch to correct OIDs used in public key digest parameters for ECGOST-2012.</li>
@@ -484,6 +489,9 @@
484489
<li>MTG &lt;https://github.com/mtgag&gt; patch for decoding issues in PKIPublicationInfo and CertifiedKeyPair.</li>
485490
<li>Andreas Gadermaier &lt;up.gadermaier&#064gmail.com&gt; initial version of Argon2 PBKDF algorithm.</li>
486491
<li>Tony Washer &lt;tony.washer@yahoo.co.uk&gt; review of qTesla, Java 1.9 module code.</li>
492+
<li>Vincent Bouckaert &lt;https://github.com/veebee&gt; initial version of RFC 4998 ASN.1 classes.</li>
493+
<li>Tony Washer &lt;https://github.com/tonywasher&gt; ECIESKeyEncapsulation fix for use of OldCofactor mode.</li>
494+
<li>Aurimas Liutikas &lt;https://github.com/liutikas&gt; JavaDoc patches to ReasonsMask.</li>
487495
</ul>
488496
</object>
489497
</html>

‎ant/bc+-build.xml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -513,7 +513,7 @@
513513
</packJar>
514514
</target>
515515

516-
<target name="build-libraries" depends="initMacros, build-pkix, build-tls, build-pg, build-mail" />
516+
<target name="build-libraries" depends="initMacros, build-pkix, build-pg, build-mail" />
517517

518518
<!--
519519
SMIME

‎ant/jdk13.xml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -93,6 +93,7 @@
9393
<exclude name="**/pkix/jcajce/X509Revoc*.java" />
9494
<exclude name="**/pkix/jcajce/Revoc*.java" />
9595
<exclude name="**/pkix/jcajce/RFC3280Cert*.java" />
96+
<exclude name="**/mime/**/*.java" />
9697
<exclude name="**/est/**/*.java" />
9798
</fileset>
9899
<fileset dir="pg/src/main/java">

‎ant/jdk14.xml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -197,6 +197,7 @@
197197
</target>
198198

199199
<target name="build" depends="init">
200+
<ant antfile="ant/bc+-build.xml" dir="." target="build-tls" />
200201
<ant antfile="ant/bc+-build.xml" dir="."/>
201202
<ant antfile="ant/bc+-build.xml" dir="." target="javadoc-lw"/>
202203
<ant antfile="ant/bc+-build.xml" dir="." target="javadoc-libraries"/>

‎ant/jdk15+.xml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -92,6 +92,7 @@
9292
</target>
9393

9494
<target name="build" depends="init">
95+
<ant antfile="ant/bc+-build.xml" dir="." target="build-tls" />
9596
<ant antfile="ant/bc+-build.xml" dir="." />
9697
<ant antfile="ant/bc+-build.xml" dir="." target="javadoc-lw" />
9798
<ant antfile="ant/bc+-build.xml" dir="." target="javadoc-libraries" />

‎core/src/main/jdk1.4/org/bouncycastle/crypto/util/SSHBuilder.java‎

Lines changed: 55 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,55 @@
1+
package org.bouncycastle.crypto.util;
2+
3+
import java.io.ByteArrayOutputStream;
4+
import java.io.IOException;
5+
6+
import org.bouncycastle.util.Strings;
7+
8+
class SSHBuilder
9+
{
10+
private final ByteArrayOutputStream bos = new ByteArrayOutputStream();
11+
12+
public void u32(long value)
13+
{
14+
bos.write((int)((value >>> 24) & 0xFF));
15+
bos.write((int)((value >>> 16) & 0xFF));
16+
bos.write((int)((value >>> 8) & 0xFF));
17+
bos.write((int)(value & 0xFF));
18+
}
19+
20+
public void rawArray(byte[] value)
21+
{
22+
u32(value.length);
23+
try
24+
{
25+
bos.write(value);
26+
}
27+
catch (IOException e)
28+
{
29+
throw new IllegalStateException(e.getMessage());
30+
}
31+
}
32+
33+
public void write(byte[] value)
34+
{
35+
try
36+
{
37+
bos.write(value);
38+
}
39+
catch (IOException e)
40+
{
41+
throw new IllegalStateException(e.getMessage());
42+
}
43+
}
44+
45+
public void writeString(String str)
46+
{
47+
rawArray(Strings.toByteArray(str));
48+
}
49+
50+
public byte[] getBytes()
51+
{
52+
return bos.toByteArray();
53+
}
54+
55+
}

‎docs/releasenotes.html‎

Lines changed: 20 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -25,18 +25,30 @@ <h2>2.0 Release History</h2>
2525

2626
<h3>2.1.1 Version</h3>
2727
Release: 1.61<br/>
28-
Date:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2018,
28+
Date:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2019, February 4th.
2929
<h3>2.1.2 Defects Fixed</h3>
3030
<ul>
3131
<li>Use of EC named curves could be lost if keys were constructed via a key factory and algorithm parameters. This has been fixed.</li>
3232
<li>RFC3211WrapEngine would not properly handle messages longer than 127 bytes. This has been fixed.</li>
33-
<li>The JCE implementations for RFC3211 would not returned null AlgorithmParameters. This has been fixed.</li>
33+
<li>The JCE implementations for RFC3211 would not return null AlgorithmParameters. This has been fixed.</li>
3434
<li>TLS: Don't check CCS status for hello_request.</li>
3535
<li>TLS: Tolerate unrecognized hash algorithms.</li>
3636
<li>TLS: Tolerate unrecognized SNI types.</li>
37+
<li>An incompatibility issue in ECIES-KEM encryption in cofactor mode has been fixed.</li>
38+
<li>An issue with XMSS/XMSSMT private key loading which could result in invalid signatures has been fixed.</li>
39+
<li>StateAwareSignature.isSigningCapable() now returns false when the key has reached it's maximum number of signatures.</li>
40+
<li>The McEliece KeyPairGenerator was failing to initialize the underlying class if a SecureRandom was explicitly passed.</li>
41+
<li>The McEliece cipher would sometimes report the wrong value on a call to Cipher.getOutputSize(int). This has been fixed.</li>
42+
<li>CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values. This has been fixed.</li>
43+
<li>Some ciphers, such as CAST6, were missing AlgorithmParameters implementations. This has been fixed.</li>
44+
<li>An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which could result in an exception on key pair generation has been fixed.</li>
45+
<li>The SPHINCS256 implementation is now more tolerant of parameters wrapped with a SecureRandom and will not throw an exception if it receives one.</li>
46+
<li>A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted literal data has been fixed.</li>
47+
<li>Several parsing issues related to the processing of CMP PKIPublicationInfo have been fixed.</li>
3748
</ul>
3849
<h3>2.1.3 Additional Features and Functionality</h3>
3950
<ul>
51+
<li>The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.</li>
4052
<li>The password hashing function, Argon2 has been added to the lightweight API.</li>
4153
<li>BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).</li>
4254
<li>BCJSSE: Added support for 'useCipherSuitesOrder' parameter.</li>
@@ -49,6 +61,12 @@ <h3>2.1.3 Additional Features and Functionality</h3>
4961
<li>TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.</li>
5062
<li>TLS: Improved certificate sig. alg. checks.</li>
5163
<li>TLS: Finalised support for RFC 8442 cipher suites.</li>
64+
<li>Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.</li>
65+
<li>Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.</li>
66+
<li>Utility classes have been added for handling OpenSSH keys.</li>
67+
<li>Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.</li>
68+
<li>The provider now recognises the standard SM3 OID.</li>
69+
<li>An new API for directly parsing and creating S/MIME documents has been added to the PKIX API.</li>
5270
</ul>
5371

5472
<h3>2.2.1 Version</h3>

‎docs/specifications.html‎

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -327,7 +327,7 @@ <h4>Digest</h4>
327327
<tr><td><b>SHA384Digest</b></td><td>384</td><td>FIPS 180-2</td></tr>
328328
<tr><td><b>SHA512Digest</b></td><td>512</td><td>FIPS 180-2</td></tr>
329329
<tr><td><b>SHA3Digest</b></td><td>224, 256, 384, 512</td><td></td></tr>
330-
<tr><td><b>SHAKEDigest</b></td><td>128, 256</td><td></td></tr>
330+
<tr><td><b>SHAKEDigest</b></td><td>128, 256</td><td>cSHAKE primitive also supported.</td></tr>
331331
<tr><td><b>SkeinDigest</b></td><td>any byte length</td><td>256 bit, 512 bit and 1024 state sizes. Additional parameterisation using SkeinParameters.</td></tr>
332332
<tr><td><b>SM3Digest</b></td><td>256</td><td>The SM3 Digest.</td></tr>
333333
<tr><td><b>TigerDigest</b></td><td>192</td><td>The Tiger Digest.</td></tr>
@@ -378,6 +378,7 @@ <h4>PBE and Password Hashing</h4>
378378
</p>
379379
<table cellpadding=5 cellspacing=0 border=1 width=80%>
380380
<tr><th>Name</th><th>Constructor</th><th>Notes</th></tr>
381+
<tr><td><b>Argon2</b></td><td>&nbsp;</td><td>&nbsp;</td></tr>
381382
<tr><td><b>BCrypt</b></td><td>&nbsp;</td><td>&nbsp;</td></tr>
382383
<tr><td><b>OpenBSDBcyrpt</b></td><td>&nbsp;</td><td>&nbsp;</td></tr>
383384
<tr><td><b>SCrypt</b></td><td>&nbsp;</td><td>&nbsp;</td></tr>
@@ -929,6 +930,11 @@ <h4>Signature Algorithms</h4>
929930
<li>SHA512withXMSSMT-SHA512</li>
930931
<li>SHAKE128withXMSSMT-SHAKE128</li>
931932
<li>SHAKE256withXMSSMT-SHAKE256</li>
933+
<li>qTESLA-I</li>
934+
<li>qTESLA-III-SIZE</li>
935+
<li>qTESLA-III-SPEED</li>
936+
<li>qTESLA-P-I</li>
937+
<li>qTESLA-P-III</li>
932938
</ul>
933939

934940
<h4>Password Hashing and PBE</h4>

0 commit comments

Comments
 (0)