Bouncy Castle Crypto Provider Package version 1.50 now available
Jon Eaves <[email protected]> Tue, 03 Dec 2013 21:00:56 +1100
| Newsgroups | gmane.comp.encryption.bouncy-castle.announce,gmane.comp.encryption.bouncy-castle.devel,gmane.comp.java.sun.kvm |
|---|---|
| Message-ID | <[email protected]> |
Hello everybody, Welcome to our 50th Java release! This release adds support for client side TLS 1.2 and client side DTLS 1.2, ECDH and ECDSA for the OpenPGP library (RFC 6637), XSalsa20, ChaCha, SM3, Threefish and Skein to the provider and the lightweight library. The GOST PKCS#5 PBKDF2 PBE function and CryptoPro GOST CFB mode key meshing have also been added, together with support for RFC 6979 deterministic ECDSA. A simplified certificate path API has also been added to the PKIX package to provide people with another option for doing path validation and AEAD support has been added to the JDK15on provider where the JVM supports it. In terms of major bug fixes, CTS mode is now in alignment with the errata for it detailed in RFC 3692, GOST keys now correctly encode with the CryptoPro parameter sets where they are available, the TimeStampRequest stream constructor now sets the extensions field correctly, issues with default RC2 parameter encoding in CMS have been addressed and the DSTU4145 signer now truncates long hashes correctly in all cases (occasionally it used to remove 1 bit extra). Further details on these and other additions and bug fixes can be found in the releasenotes.html file accompanying the release. For more details go to our latest releases page: http://www.bouncycastle.org/latest_releases.html And for those who like living on the bleeding edge, the betas for future releases can be downloaded from: http://www.bouncycastle.org/betas/ You can now also follow the project on Facebook ( https://www.facebook.com/legionofthebouncycastle ), Google+ ( https://plus.google.com/+BouncycastleOrgAPIs/posts ) and/or Twitter ( https://twitter.com/bccrypto ). As always we are grateful to the people and organisations who have contributed to the project and you can find the updated list at http://www.bouncycastle.org/contributors.html We would also like to thank holders of Crypto Workshop support contracts as an additional 20 hours of time was contributed back to this release through left over consulting time provided as part of the support agreements. Finally, we also wish to make mention that the Legion of The Bouncy Castle has now been officially recognised as an Australian based charity by the Australian Government and this has enabled us to launch our first fund raiser, initially to make it possible to get the Bouncy Castle APIs FIPS certified. The costs associated with FIPS certification are in excess of 100,000 USD, so while the number of people using the BC libraries tells us that we should be able to raise the money, it also tells us that we need help from all of you. You can find the details on how to donate via PayPal or Bitcoin, at: https://www.bouncycastle.org/donate All donors will be given the option of being included on an honor roll if they wish, as well as the ability to download our 2013 Fund Raiser commemorative t-shirt template (with new artwork!). If you would like to donate a "large amount" and would like something more in terms of acknowledgement, or you prefer to use direct bank transfer please feel free to discuss it with us by contacting us at *[email protected]* we'll be happy to send you the t-shirt template as well! If you wish to sponsor specific work on Bouncy Castle or get commercial support for the APIs please contact us at Crypto Workshop ( http://www.cryptoworkshop.com ) Finally, the 1.50 release has also been published to the Maven repository. If you have not seen it show up on your local mirror yet, you should see it within 24 hours.