Jon Eaves | 25 Feb 2011 08:38

bouncy Castle Crypto Provider Package version 1.46 now available

Hi all,

Good things come to those who wait, and in this particular instance marks the longest
gap between releases that the BC project has seen.

This release adds support EC MQV to the light weight and CMS/SMIME
libraries. In addition to that OpenPGP now supports UTF-8 in file names
for literal data, EC keys are now serialisable, and the provider now
makes use of a privileged block for constructing the provider table.

In addition, to additionally improve the security and reliability of the
libraries, ASN.1 processing has been reviewed to further reduce the
likelihood of OutOfMemory errors for badly corrupted streams, and use of
constant time comparisons have been introduced to remove the possibility
of timing attacks in several areas such as with cipher modes like GCM
and CCM.

As usual, the latest releases can be found at :

http://www.bouncycastle.org/ or http://repo2.maven.org/maven2/org/bouncycastle if you use Maven

And for those who like living on the bleeding edge, the betas can be downloaded from:

http://www.bouncycastle.org/betas/

Please note, make sure that beta feedback is sent to the feedback-crypto@...
address, and not the general mailing list (dev-crypto)


Gmane