Download Bouncy Castle for Java

Defects Fixed

• SNOVA and MAYO are now correctly added to the JCA provider module-info file.
• TLS: Avoid nonce reuse error in JCE AEAD workaround for pre-Java7.
• BCJSSE: Session binding map is now shared across all stages of the session lifecycle (SunJSSE compatibility).
• The CMCEPrivateKeyParameters#reconstructPublicKey method was returning an empty byte array. It now returns an encoding of the public key.
• CBZip2InputStream no longer auto-closes at end-of-contents.
• The BC CertPath implementation was eliminating certificates on the bases of the Key-ID. This is not in accordance with RFC 4158 and has been fixed.
• Support for the previous set of libOQS Falcon OIDs has been restored.
• The BC CipherInputStream could throw an exception if asked to handle an AEAD stream consisting of the MAC only. This has been fixed.
• Some KeyAgreement classes were missing in the Java 11 class hierarchy. This has been fixed.
• A typo in a constant name in the HPKE class has been fixed and the old constant deprecated.
• Fuzzing analysis has been done on the OpenPGP API and additional code has been added to prevent escaping exceptions.

Additional Features and Functionality

• SHA3Digest, CSHAKE, TupleHash, KMAC now provide support for Memoable and EncodableService.
• BCJSSE: Added support for integrity-only cipher suites in TLS 1.3 per RFC 9150.
• BCJSSE: Added support for system properties "jdk.tls.client.maxInboundCertificateChainLength" and "jdk.tls.server.maxInboundCertificateChainLength".
• BCJSSE: Added support for ML-DSA signature schemes in TLS 1.3 per draft-ietf-tls-mldsa-00.
• The Composite post-quantum signatures implementation has been updated to the latest draft (07) draft-ietf-lamps-pq-composite-sigs.
• "_PREHASH" implementations are now provided for all composite signatures to allow the hash of the date to be used instead of the actual data in signature calculation.
• The gradle build can now be used to generate an Bill of Materials (BOM) file.
• It is now possible to configure the SignerInfoVerifierBuilder used by the SignedMailValidator class.
• The Ascon family of algorithms has been updated with the latest published changes.
• Composite signature keys can now be constructed from the individual keys of the algorithms composing the composite.
• PGPSecretKey, PGPSignatureGenerator now support version 6.
• Further optimisation work has been done on ML-KEM public key validation.
• Zeroization of passwords in the JCA PKCS12 key store has been improved.
• The "org.bouncycastle.drbg.effective_256bits_entropy" property has been added for platforms where the entropy source is not producing 1 full bit of entropy per bit and additional bits are required (default value 282).
• OpenPGPKeyGenerator now allows for the use of empty UserIDs (version 4 compatibility).
• The HQC KEM has been updated with the latest draft updates.

Additional Notes

• The legacy post-quantum package has now been removed.