Bouncy Castle Crypto Provider Package version 1.52 now available

Hello there everybody !

This release includes bug fixes, security enhancements, and other
improvements. Enhancements include support classes for DNS-based
Authentication of Named Entities (DANE), support for AES GCM in CMS
Enveloped Data, support for BCrypt and it's OpenBSD variant and support
for both the DRBG and signing algorithms used in X9.31. TLS updates
include the addition of server-sise support for DHE key exchange,
(EC)DSA now supports non-SHA1 digests, and support has been added for
the PSK, SRP, and ECDHE_ECDSA/AES/CCM ciphersuites. On bug fixes: OSGI
issues with the bcmail distribution should now be fixed, PKCS5/PKCS7
padding now supports pad values > 127, a StackOverflowError in the
CertPath validator associated with multiple trust anchors has been
fixed, and corrupted input into a RFC5649WrapEngine no longer has the
potential to cause OutOfMemoryError. Finally, computations associated
with SkippingCiphers have been optimised to improve seek performance and
an issue which could cause some zero bytes to appear in an "odd sized"
requests to the SP 800-90A CTR DRBG has been fixed. Further details on
other additions and bug fixes can be found in the release notes
<http://www.bouncycastle.org/releasenotes.html> file accompanying the
release.

*Security Advisory:* The CTR DRBG is related to making requests to the
DRBG that are not a multiple of the block size of the underlying block
cipher. If this sounds like you, you need to upgrade to this release, or
contact us for a work around.

Note also: this release has seen some further clean out of deprecated
methods with the OpenPGP API being the main candidate.

For more details go to our latest releases page:

http://www.bouncycastle.org/latest_releases.html

And for those who like living on the bleeding edge, the betas for future
releases can be downloaded from:

http://www.bouncycastle.org/betas/

As always we are grateful to the people and organisations who have
contributed/donated to the project and you can find the updated list at
http://www.bouncycastle.org/contributors.html We would also like to
thank holders of Crypto Workshop support contracts as an additional 60
hours of time was contributed back to this release through left over
consulting time provided as part of the support agreements.

This release also features some work that arose out of our on-going FIPS
certification project, most particularly from work supported by Galois
Inc ( http://www.galois.com ) and JScape ( http://www.jscape.com ).
Thanks must go to both sponsors as well. You can find the most recent
document on the FIPS project at 
https://www.bouncycastle.org/fips/BCFipsDescription-20150101.pdf

If you are interested in donating to the project, you can find the
details on how to donate via PayPal or Bitcoin, at:

https://www.bouncycastle.org/donate

If you prefer to use direct bank transfer please feel free to discuss it
with us by contacting us at [email protected] and we'll be happy
help. The Legion of the Bouncy Castle is a registered Australian charity
based in the State of Victoria, Australia.

If you wish to sponsor specific work on Bouncy Castle or get a
commercial support contract for the APIs please contact us at Crypto
Workshop ( http://www.cryptoworkshop.com )

Remember, you can also follow this project on Facebook (
https://www.facebook.com/legionofthebouncycastle ), Google+ (
https://plus.google.com/+BouncycastleOrgAPIs/posts ) and/or Twitter (
https://twitter.com/bccrypto ).

Finally, for users of the maven repositories, 1.52 should start
appearing in the next 24 hours.