Follow us on:  Google+   


Welcome to the home of the Legion of the Bouncy Castle. A fun place to stay, if you've got some time to kill.

The Legion of the Bouncy Castle

Here at the Bouncy Castle, we believe in encryption. That's something that's near and dear to our hearts. We believe so strongly in encryption, that we've gone to the effort to provide some for everybody, and we've now been doing it for over 14 years!

The Bouncy Castle Crypto APIs are looked after by an Australian Charity, the Legion of the Bouncy Castle Inc., which looks after the care and feeding of the Bouncy Castle APIs. If you would like to help support this effort please see our donations page or purchase a support contract through Crypto Workshop. Requests to sponsor specific work on the APIs are also most welcome.

The Bouncy Castle APIs currently consist of the following:

  • A lightweight cryptography API for Java and C#.

  • A provider for the Java Cryptography Extension and the Java Cryptography Architecture.

  • A clean room implementation of the JCE 1.2.1.

  • A library for reading and writing encoded ASN.1 objects.

  • Lightweight APIs for TLS (RFC 2246, RFC 4346) and DTLS (RFC 4347).

  • Generators for Version 1 and Version 3 X.509 certificates, Version 2 CRLs, and PKCS12 files.

  • Generators for Version 2 X.509 attribute certificates.

  • Generators/Processors for S/MIME and CMS (PKCS7/RFC 3852).

  • Generators/Processors for OCSP (RFC 2560).

  • Generators/Processors for TSP (RFC 3161 & RFC 5544).

  • Generators/Processors for CMP and CRMF (RFC 4210 & RFC 4211).

  • Generators/Processors for OpenPGP (RFC 4880).

  • Generators/Processors for Extended Access Control (EAC).

  • Generators/Processors for Data Validation and Certification Server (DVCS) - RFC 3029.

  • A signed jar version suitable for JDK 1.4-1.7 and the Sun JCE.

The lightweight API works with everything from the J2ME to the JDK 1.7 and there is also an API in C# providing equivalent functionality for most of the above.

For further details have a look in either our Java project pages or our C# project pages where you can find downloads, mailing lists, and other resources.

If you want to provide feedback directly to the members of The Legion then please use

If you need a support agreement or have issues with the Bouncy Castle APIs that may require consulting, mentoring, or education, please contact us at Crypto Workshop



C# Release 1.8.0 is now available for download.

Sunday 22nd November 2015

This release adds support for a range of new algorithms and protocols, including SHA-3, deterministic DSA/ECDSA, client and server side TLS/DTLS 1.2 support, SipHash, and X9.31 and NIST SP 800-90A DRGBs. RFC 6637 ECDSA and ECDH has been added to the OpenPGP API and the TSP API now supports generation of certIDs with digests other than SHA-1. Performance improvements have been made in a number of areas including BigInteger.ModPow, prime generation, and EC computations over many of the NIST and SEC elliptic curves. Other enhancements and bug fixes have also been made. Finally the Serpent implementation now conforms to the NESSIE test vectors as published, and the previous version of Serpent has been made available as Tnepres.

For more details go to our C# pages for downloads and releasenotes.

Java Release 1.53 is now available for download.

Saturday 10th October 2015

This release introduces the FIPS PUB 202 SHA3 digests and SHAKE extendible output functions. Also added is SM4, Blake2b and EC Key Agreement now supports a range of SEC and NIST variations. X9.31, ISO9796-2, and PSS signatures now support SHA512-224 and SHA512-256. Changes in JDK 1.8 which broke X509Certificate.hashCode() and X509Certificate.verify(PublicKey, Provider) have been worked around, and an issue related to occasional cipher failure with NIO and the JCE/JSSE have also been fixed. A number of other improvements have been made and a number of other bugs have been fixed.

For more details go to our latest releases page to download the new version and see the release notes

You can also find the latest versions on one of our mirrors:

BC Java FIPS API stable.

Friday 31st July 2015

The BC Java FIPS project has finally been stabilized and will be going in for testing soon thanks to our major sponsor - Tripwire. Details on the FIPS project are available in the BC FIPS description document. Early access is also available. For further information please contact us at

It's official, we really are a charity!

Friday 29th November 2013

As of 7th of November 2013, the organisation looking after Bouncy Castle, Legion of the Bouncy Castle Inc. is now acknowledged as a Charity for the benefit of the public and education by the Australian Government and registered accordingly. To mark this occasion and the upcoming 50th release of our Java APIs, we have started a fund raising campaign to support the APIs. You can find the details on our donations page. We can accept donations via PayPal, Bitcoin, or direct transfer. Further to this all donors for the fundraiser will receive a PDF template for our official fund raising t-shirt featuring new artwork. You can not only make a difference, but dress different as well!

The Bouncy Castle Wiki is now up.

Wednesday 1st November

We now have a wiki for providing additional documentation. You can find it at

Sponsored Links