Bouncy Castle Crypto Provider Package version 1.55 now available
Jon Eaves <[email protected]> Thu, 25 Aug 2016 15:11:17 +1000
| Newsgroups | gmane.comp.encryption.bouncy-castle.announce,gmane.comp.encryption.bouncy-castle.devel |
|---|---|
| Message-ID | <[email protected]> |
Hello everybody, This release sees further work on the post-quantum provider with the addition of the NewHope (March 2016 version) key exchange algorithm and the SPHINCS signature algorithm. The McEliece implementation has also been revised and now has KeyFactory implementation for it as well. The DANE API has been updated to reflect the latest standard changes. SHA-3 support has been added for HMAC as well as for the DSA, ECDSA, DDSA, and ECDDSA signature algorithms. SHA-3 support has also been added for RSA signatures and OAEP encryption. Support has been added for the GOST R34.11-2012 message digest as well. The TSP API now supports millisecond resolution in time-stamps and TLS supports RFC 7685 and ECDH_anon key exchange. The CMS password recipient generator now supports PRFs other than SHA-1 as well. In terms of bug fixes: issues with cloning of BLAKE digests, an occasional error in the Poly1305 calculator, UserNotice issues with empty sequences, and validation issues with time-stamp requests containing extensions have all been fixed. CRMF now recognises when non-default OAEP parameters are used and issues around the encoding of parameters for ECIES/IES have also been addressed. For more details go to our latest releases page: http://www.bouncycastle.org/latest_releases.html And for those who like living on the bleeding edge, the betas for future releases can be downloaded from: http://www.bouncycastle.org/betas/ and changes to the code base can be tracked via: https://github.com/bcgit As always we are grateful to the people and organisations who have contributed/donated to the project and you can find the updated list at http://www.bouncycastle.org/contributors.html We would also like to thank holders of Crypto Workshop support contracts as once again we were able to contribute additional time back to this release through left over consulting time provided as part of the support agreements. In other news the FIPS API has now passed NIST review and we are now well into the co-ordination period. If you are interested in the project, the draft User Guide for the APIs is now available at https://www.bouncycastle.org/fips/BCUserGuide.pdf and the draft security policy is at https://www.bouncycastle.org/fips/BCSecurityPolicy.pdf Please contact us at [email protected] if you are interested in joining the early access program for the FIPS APIs. If you are interested helping support the Bouncy Castle project through donation, you can find the details on how to donate via PayPal or Bitcoin, at: https://www.bouncycastle.org/donate If you prefer to use direct bank transfer please feel free to discuss it with us by contacting us at [email protected] and we'll be happy help. The Legion of the Bouncy Castle Inc is a registered Australian charity based in the State of Victoria, Australia. If you wish to sponsor specific work on Bouncy Castle or get a commercial support contract for the APIs please contact us at Crypto Workshop ( http://www.cryptoworkshop.com ) Remember, you can also follow this project on Facebook ( https://www.facebook.com/legionofthebouncycastle ), Google+ ( https://plus.google.com/+BouncycastleOrgAPIs/posts ) and/or Twitter ( https://twitter.com/bccrypto ). Finally, for users of the maven repositories, 1.55 should be appearing shortly on maven central. The GitHub repository has been updated as well.