The Legion of the Bouncy Castle Java Cryptography API provides a lightweight cryptography API in Java, a provider for the JCE and JCA, a clean-room implementation of the JCE 1.2.1, generators for Version 1 and Version 3 X.509 certificates, generators for Version 2 X.509 attribute certificates, PKCS12 support, and APIs for dealing with S/MIME, CMS, OCSP, TSP, OpenPGP, and TLS. Versions are provided for the J2ME, and JDK 1.0-1.6.


This release adds the VMPC stream cipher. Performance improvements were made to both the ASN.1 and CMS libraries. The BCPGInputStream class can now handle packets in the 2**31->2**32 - 1 range. In addition, a bug that could cause TlsInputStream to return an early end of file has been fixed, and a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes has been removed.

URL: The Legion of the Bouncy Castle Java Cryptography APIs