From b9a6238172860cf3ae84a0753ab14895c534b0d3e4fef344ae978c0b5e7794a0 Mon Sep 17 00:00:00 2001 From: Pedro Monreal Date: Tue, 16 Dec 2025 11:10:15 +0100 Subject: [PATCH] Update bouncycastle to 1.83 --- ...k18on-1.82.pom => bcjmail-jdk18on-1.83.pom | 4 +-- ...dk18on-1.82.pom => bcmail-jdk18on-1.83.pom | 4 +-- ...-jdk18on-1.82.pom => bcpg-jdk18on-1.83.pom | 6 ++-- ...dk18on-1.82.pom => bcpkix-jdk18on-1.83.pom | 4 +-- ...dk18on-1.82.pom => bcprov-jdk18on-1.83.pom | 4 +-- ...jdk18on-1.82.pom => bctls-jdk18on-1.83.pom | 4 +-- ...dk18on-1.82.pom => bcutil-jdk18on-1.83.pom | 4 +-- bouncycastle.changes | 33 +++++++++++++++++++ bouncycastle.spec | 2 +- r1rv82.tar.gz | 3 -- r1rv83.tar.gz | 3 ++ 11 files changed, 52 insertions(+), 19 deletions(-) rename bcjmail-jdk18on-1.82.pom => bcjmail-jdk18on-1.83.pom (95%) rename bcmail-jdk18on-1.82.pom => bcmail-jdk18on-1.83.pom (95%) rename bcpg-jdk18on-1.82.pom => bcpg-jdk18on-1.83.pom (95%) rename bcpkix-jdk18on-1.82.pom => bcpkix-jdk18on-1.83.pom (96%) rename bcprov-jdk18on-1.82.pom => bcprov-jdk18on-1.83.pom (92%) rename bctls-jdk18on-1.82.pom => bctls-jdk18on-1.83.pom (96%) rename bcutil-jdk18on-1.82.pom => bcutil-jdk18on-1.83.pom (95%) delete mode 100644 r1rv82.tar.gz create mode 100644 r1rv83.tar.gz diff --git a/bcjmail-jdk18on-1.82.pom b/bcjmail-jdk18on-1.83.pom similarity index 95% rename from bcjmail-jdk18on-1.82.pom rename to bcjmail-jdk18on-1.83.pom index 038ad8e..91909f8 100644 --- a/bcjmail-jdk18on-1.82.pom +++ b/bcjmail-jdk18on-1.83.pom @@ -5,7 +5,7 @@ bcjmail-jdk18on jar Bouncy Castle JavaMail Jakarta S/MIME APIs - 1.82 + 1.83 The Bouncy Castle Java APIs for doing S/MIME with the Jakarta Mail APIs. The APIs are designed primarily to be used in conjunction with the BC Java provider for Java 1.8 and later. https://www.bouncycastle.org/download/bouncy-castle-java/ @@ -33,7 +33,7 @@ org.bouncycastle bcpkix-jdk18on - 1.82 + 1.83 jar diff --git a/bcmail-jdk18on-1.82.pom b/bcmail-jdk18on-1.83.pom similarity index 95% rename from bcmail-jdk18on-1.82.pom rename to bcmail-jdk18on-1.83.pom index 37166ea..3fc3723 100644 --- a/bcmail-jdk18on-1.82.pom +++ b/bcmail-jdk18on-1.83.pom @@ -5,7 +5,7 @@ bcmail-jdk18on jar Bouncy Castle JavaMail S/MIME APIs - 1.82 + 1.83 The Bouncy Castle Java APIs for doing S/MIME with JavaMail. The APIs are designed primarily to be used in conjunction with the BC Java provider for Java 1.8 and later. https://www.bouncycastle.org/download/bouncy-castle-java/ @@ -33,7 +33,7 @@ org.bouncycastle bcpkix-jdk18on - 1.82 + 1.83 jar diff --git a/bcpg-jdk18on-1.82.pom b/bcpg-jdk18on-1.83.pom similarity index 95% rename from bcpg-jdk18on-1.82.pom rename to bcpg-jdk18on-1.83.pom index daca719..70a7bc1 100644 --- a/bcpg-jdk18on-1.82.pom +++ b/bcpg-jdk18on-1.83.pom @@ -5,7 +5,7 @@ bcpg-jdk18on jar Bouncy Castle OpenPGP APIs - 1.82 + 1.83 The Bouncy Castle Java APIs for the OpenPGP Protocol. The APIs are designed primarily to be used in conjunction with the BC Java provider but may also be used with other providers providing cryptographic services. This jar is designed to work best with Java 1.8 and later. https://www.bouncycastle.org/download/bouncy-castle-java/ @@ -38,13 +38,13 @@ org.bouncycastle bcprov-jdk18on - 1.82 + 1.83 jar org.bouncycastle bcutil-jdk18on - 1.82 + 1.83 jar diff --git a/bcpkix-jdk18on-1.82.pom b/bcpkix-jdk18on-1.83.pom similarity index 96% rename from bcpkix-jdk18on-1.82.pom rename to bcpkix-jdk18on-1.83.pom index 094b625..291e077 100644 --- a/bcpkix-jdk18on-1.82.pom +++ b/bcpkix-jdk18on-1.83.pom @@ -5,7 +5,7 @@ bcpkix-jdk18on jar Bouncy Castle PKIX, CMS, EAC, TSP, PKCS, OCSP, CMP, and CRMF APIs - 1.82 + 1.83 The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for Java 1.8 and later. The APIs are designed primarily to be used in conjunction with the BC Java provider but may also be used with other providers providing cryptographic services. https://www.bouncycastle.org/download/bouncy-castle-java/ @@ -33,7 +33,7 @@ org.bouncycastle bcutil-jdk18on - 1.82 + 1.83 jar diff --git a/bcprov-jdk18on-1.82.pom b/bcprov-jdk18on-1.83.pom similarity index 92% rename from bcprov-jdk18on-1.82.pom rename to bcprov-jdk18on-1.83.pom index 6182110..175e49b 100644 --- a/bcprov-jdk18on-1.82.pom +++ b/bcprov-jdk18on-1.83.pom @@ -5,8 +5,8 @@ bcprov-jdk18on jar Bouncy Castle Provider - 1.82 - The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains the JCA/JCE provider and low-level API for the BC Java version 1.82 for Java 1.8 and later. + 1.83 + The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains the JCA/JCE provider and low-level API for the BC Java version 1.83 for Java 1.8 and later. https://www.bouncycastle.org/download/bouncy-castle-java/ diff --git a/bctls-jdk18on-1.82.pom b/bctls-jdk18on-1.83.pom similarity index 96% rename from bctls-jdk18on-1.82.pom rename to bctls-jdk18on-1.83.pom index bcf7bdd..de1d597 100644 --- a/bctls-jdk18on-1.82.pom +++ b/bctls-jdk18on-1.83.pom @@ -5,7 +5,7 @@ bctls-jdk18on jar Bouncy Castle TLS/JSSE APIs - 1.82 + 1.83 The Bouncy Castle Java APIs for the TLS, including a JSSE provider (except in Java 4). The APIs are designed primarily to be used in conjunction with the BC Java provider but may also be used with other providers providing cryptographic services. This jar is designed to best work with Java 1.8 and later. https://www.bouncycastle.org/download/bouncy-castle-java/ @@ -33,7 +33,7 @@ org.bouncycastle bcutil-jdk18on - 1.82 + 1.83 jar diff --git a/bcutil-jdk18on-1.82.pom b/bcutil-jdk18on-1.83.pom similarity index 95% rename from bcutil-jdk18on-1.82.pom rename to bcutil-jdk18on-1.83.pom index dd6d8e6..2ae795c 100644 --- a/bcutil-jdk18on-1.82.pom +++ b/bcutil-jdk18on-1.83.pom @@ -5,7 +5,7 @@ bcutil-jdk18on jar Bouncy Castle ASN.1 Extension and Utility APIs - 1.82 + 1.83 The Bouncy Castle Java APIs for ASN.1 extension and utility APIs used to support bcpkix and bctls. This jar contains APIs for Java 1.8 and later. https://www.bouncycastle.org/download/bouncy-castle-java/ @@ -33,7 +33,7 @@ org.bouncycastle bcprov-jdk18on - 1.82 + 1.83 jar diff --git a/bouncycastle.changes b/bouncycastle.changes index 55a28e4..9b25bc3 100644 --- a/bouncycastle.changes +++ b/bouncycastle.changes @@ -1,3 +1,36 @@ +------------------------------------------------------------------- +Tue Dec 16 09:58:09 UTC 2025 - Pedro Monreal + +- Update to 1.83: + * Defects Fixed: + - Attempting to check a password on a stripped PGP would throw an + exception. Checking the password on such a key will now always + return false. + - Fixed an issue in KangarooTwelve where premature absorption caused + erroneous 168-byte padding; absorption is now delayed so correct + final-byte padding is applied. + - BCJSSE: Fix supported_versions creation for renegotiation handshake. + - (D)TLS: Reneg info now oly offered with pre-1.3. + * Additional Features and Functionality: + - A generic "COMPOSITE" algorithm name has been added as a JCA + Signature algorithm. The algorithm will identify the composite + signature to use from the composite key passed in. + - The composite signatures implementation has been updated to the + final draft and now follows the submitted standard. + - Support for the generation and use as trust anchors has been added + for certificate signatures with id-alg-unsigned as the signature type. + - Support for CMP direct POP for encryption keys using + challenge/response has been added to the CMP/CRMF APIs. + - Support for SupportedCurves attribute to the BC provider + - BCJSSE: Added support for SLH-DSA signature schemes in TLS 1.3 per + draft-reddy-tls-slhdsa-01. + - Support has been added for the Java 25 KDF API (current algorithms, + PBKDF2, SCRYPT, and HKDF). + - Support for composite signatures is now included in CMS and timestamping. + - It is now possible to disable the Lenstra check in RSA where the public + key is not available via the system/security property + "org.bouncycastle.rsa.no_lenstra_check". + ------------------------------------------------------------------- Mon Sep 22 09:29:17 UTC 2025 - Pedro Monreal diff --git a/bouncycastle.spec b/bouncycastle.spec index 21a89a0..e5ee55d 100644 --- a/bouncycastle.spec +++ b/bouncycastle.spec @@ -17,7 +17,7 @@ %global ver_major 1 -%global ver_minor 82 +%global ver_minor 83 #%%global ver_micro 1 %global gittag r%{ver_major}rv%{ver_minor}%{?ver_micro:v%{ver_micro}} %global archivever jdk18on-%{ver_major}.%{ver_minor}%{?ver_micro:0%{ver_micro}} diff --git a/r1rv82.tar.gz b/r1rv82.tar.gz deleted file mode 100644 index 2ecf9c8..0000000 --- a/r1rv82.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:5a6561a2ae3f8a74cc53edf0578c4bf62a0ba33cfeeb49b77753686fc952b41f -size 47632447 diff --git a/r1rv83.tar.gz b/r1rv83.tar.gz new file mode 100644 index 0000000..68d7f27 --- /dev/null +++ b/r1rv83.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:b69c7cd86f8ae6e8343f586805430af95508ea925369632f9f7c35236d365b6c +size 47658743 -- 2.51.1