You will find you will need to add the bcutil jar to the class path if you are using the other BC APIs.Ĭhange Warning (users of 1.68 or earlier): The BKS-V1 KeyStore format is now disabled by default. Packaging Change (users of 1.68 or earlier): BC 1.69 introduced a new jar, bcutil-*.jar, which is a collection of classes which do not need to be in the JCE provider jar, but are used by the other APIs. For earlier JVMs, or containers/applications that cannot cope with multi-release jars, you should now use the jdk15to18 jars. Packaging Change (users of 1.70 or earlier): BC 1.71 changed the jdk15on jars to jdk18on so the base has now moved to Java 8. If you have issues with multi-release jars see the jdk15to18 release jars below. They are also multi-release jars so do support some features that were introduced in Java 9, Java 11, and Java 15. The jdk18on jars are compiled to work with anything from Java 1.8 up. jdk15 is not quite as unambiguous as it was. Java Version Details With the arrival of Java 15. In bug fixes, JcaPKIXIdentityBuilder file handling has been fixed, byte parameters in the CMP API are now defensively cloned, the fall back mode of the JCE key wrapping operators now ensures the original parameters are preserved, and an error in the creation of TLS 1.3 Export Keying Material which could cause compatibility issues have also been fixed.įurther details on other additions and bug fixes can be found in the release notes file accompanying the release. Support has been addd for additional input in deterministic (EC)DSA. Additional validations have also been added for both RSA and EC keys and upper bounds on parameter sizes for both algorithms have been introduced. Signed message generation and verification, as well as generation of certification requests have been added to the ETSI/ITS packages. The OpenPGP API now supports insertion or replacement of PGP public keys in secret key rings, joing/merging of PGP public keys/signatures and the RegExp and PolicyURI signature sub-packets have been added. The basic SHA-3 Derived Functions: KMAC, TupleHash and ParallelHash have also been added to the BC provider, in addition to Blake3-256. This release adds SPHINCS+, Classic McEliece, FrodoKEM and SABER to the BCPQC provider. This is primarily a feature release, with the feature being the expansion of our post-quantum algorithms to include the NIST finalists and alternate candidates. Latest Java Releases Release 1.71 is now available for download.