Bouncy Castle Crypto Provider Package version 1.34 now available

Hi all,

This release contains a very, very important security update against RSA.  Please make sure you read
the details on the website, and upgrade if it affects you.

If you are using RSA with a public exponent of three you must upgrade to this release if you want to
avoid recent forgery attacks that have been described against specific implementations of the RSA
signature algorithm.

In addition to the above fix, this release also adds use of the SHA2 family to ECDSA for signatures and
certificate generation. The range of KDF functions has been increased and an endianess issue with KDF2
has been fixed. Uses of toUpperCase in the library are now locale independent and fixes have also been
applied to the OpenPGP and SMIME libraries.

As usual, the latest releases can be found at :

http://www.bouncycastle.org/

And for those who like living on the bleeding edge, the betas can be downloaded from:

http://www.bouncycastle.org/betas/

Please note, make sure that beta feedback is sent to the [email protected]
address, and not the general mailing list (dev-crypto)
-- 
Jon Eaves <[email protected]>
http://www.eaves.org/blog/
Co-Author of "Apache Tomcat Bible", "Professional Tomcat 5", "Beginning JavaServer Pages"