This is an automated email from the git hooks/post-receive script. apo pushed a change to branch master in repository bouncycastle.
from 43ed5ba Upload to unstable new 0f34b9e Start new changelog entry adds 9376862 New upstream version 1.58 new 85d832b Update upstream source from tag 'upstream/1.58' new ee746b9 Declare compliance with Debian Policy 4.1.2. new e21813f Apply CVE-2017-13098.patch and fix CVE-2017-13098. new ec7bcf5 Update changelog new d47c885 Remove trailing whitespace. new 46698ba Update debian/pom files for new release. The 7 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "adds" were already present in the repository and have only been added to this reference. Summary of changes: CONTRIBUTORS.html | 9 +- LICENSE.html | 2 +- ant/jdk13.xml | 2 + ant/jdk14.xml | 2 + bc-build.properties | 6 +- build.gradle | 2 +- build1-1 | 27 +- build1-2 | 8 +- buildj2me | 2 + .../main/j2me/org/bouncycastle/util/Arrays.java | 20 + core/src/main/java/org/bouncycastle/LICENSE.java | 4 +- .../bouncycastle/asn1/ASN1ApplicationSpecific.java | 2 +- .../asn1/ASN1ApplicationSpecificParser.java | 2 +- .../java/org/bouncycastle/asn1/ASN1Boolean.java | 8 +- .../java/org/bouncycastle/asn1/ASN1Choice.java | 1 - .../org/bouncycastle/asn1/ASN1EncodableVector.java | 2 +- .../java/org/bouncycastle/asn1/ASN1Enumerated.java | 9 +- .../org/bouncycastle/asn1/ASN1GeneralizedTime.java | 24 + .../org/bouncycastle/asn1/ASN1InputStream.java | 2 +- .../java/org/bouncycastle/asn1/ASN1Integer.java | 68 +- .../bouncycastle/asn1/ASN1ObjectIdentifier.java | 6 +- .../org/bouncycastle/asn1/ASN1OctetString.java | 1 - .../java/org/bouncycastle/asn1/ASN1Primitive.java | 12 + .../java/org/bouncycastle/asn1/ASN1Sequence.java | 17 +- .../main/java/org/bouncycastle/asn1/ASN1Set.java | 26 +- .../java/org/bouncycastle/asn1/ASN1String.java | 2 +- .../org/bouncycastle/asn1/ASN1TaggedObject.java | 2 +- .../bouncycastle/asn1/ASN1TaggedObjectParser.java | 21 +- .../java/org/bouncycastle/asn1/ASN1UTCTime.java | 16 +- .../bouncycastle/asn1/BERApplicationSpecific.java | 2 +- .../asn1/BERApplicationSpecificParser.java | 2 +- .../java/org/bouncycastle/asn1/BEROctetString.java | 31 +- .../org/bouncycastle/asn1/BEROutputStream.java | 3 +- .../java/org/bouncycastle/asn1/BERSequence.java | 7 +- .../main/java/org/bouncycastle/asn1/BERSet.java | 13 +- .../main/java/org/bouncycastle/asn1/BERTags.java | 38 +- .../bouncycastle/asn1/DERApplicationSpecific.java | 27 + .../java/org/bouncycastle/asn1/DERBMPString.java | 15 +- .../java/org/bouncycastle/asn1/DERBitString.java | 2 +- .../java/org/bouncycastle/asn1/DERExternal.java | 15 +- .../org/bouncycastle/asn1/DERGeneralString.java | 10 +- .../java/org/bouncycastle/asn1/DERIA5String.java | 13 +- .../main/java/org/bouncycastle/asn1/DERNull.java | 4 +- .../org/bouncycastle/asn1/DERNumericString.java | 15 +- .../bouncycastle/asn1/DEROctetStringParser.java | 2 +- .../org/bouncycastle/asn1/DERPrintableString.java | 31 +- .../java/org/bouncycastle/asn1/DERSequence.java | 14 +- .../main/java/org/bouncycastle/asn1/DERSet.java | 7 + .../java/org/bouncycastle/asn1/DERT61String.java | 8 +- .../org/bouncycastle/asn1/DERUniversalString.java | 9 +- .../asn1/DefiniteLengthInputStream.java | 3 + .../org/bouncycastle/asn1/LimitedInputStream.java | 3 + .../bouncycastle/asn1/bc/BCObjectIdentifiers.java | 18 + .../asn1/cryptopro/CryptoProObjectIdentifiers.java | 7 + .../asn1/cryptopro/ECGOST3410NamedCurves.java | 84 +- .../asn1/cryptopro/GOST28147Parameters.java | 9 + .../asn1/cryptopro/Gost2814789EncryptedKey.java | 107 + .../cryptopro/Gost2814789KeyWrapParameters.java | 86 + .../asn1/cryptopro/GostR3410KeyTransport.java | 70 + .../cryptopro/GostR3410TransportParameters.java | 113 + .../org/bouncycastle/asn1/esf/SignerLocation.java | 108 +- .../asn1/pkcs/PKCSObjectIdentifiers.java | 4 +- .../rosstandart/RosstandartObjectIdentifiers.java | 14 + .../bouncycastle/asn1/ua/UAObjectIdentifiers.java | 85 + .../org/bouncycastle/asn1/x500/style/BCStyle.java | 8 + .../org/bouncycastle/asn1/x509/Extensions.java | 5 + .../org/bouncycastle/asn1/x509/TBSCertificate.java | 31 +- .../asn1/x509/TBSCertificateStructure.java | 1 + .../asn1/x509/X509ObjectIdentifiers.java | 2 + .../bouncycastle/asn1/x9/ECNamedCurveTable.java | 22 + .../org/bouncycastle/crypto/StreamBlockCipher.java | 9 +- .../bouncycastle/crypto/agreement/DHAgreement.java | 10 +- .../crypto/agreement/DHBasicAgreement.java | 12 +- .../crypto/agreement/DHStandardGroups.java | 88 + .../crypto/agreement/ECVKOAgreement.java | 113 + .../agreement/kdf/ConcatenationKDFGenerator.java | 3 +- .../crypto/agreement/kdf/DHKEKGenerator.java | 3 +- .../crypto/digests/DSTU7564Digest.java | 647 + .../bouncycastle/crypto/digests/KeccakDigest.java | 442 +- .../bouncycastle/crypto/digests/SHA3Digest.java | 5 +- .../bouncycastle/crypto/digests/SHAKEDigest.java | 8 +- .../bouncycastle/crypto/digests/SkeinEngine.java | 4 +- .../bouncycastle/crypto/ec/CustomNamedCurves.java | 21 +- .../crypto/engines/CryptoProWrapEngine.java | 112 + .../crypto/engines/DSTU7624Engine.java | 923 + .../crypto/engines/DSTU7624WrapEngine.java | 239 + .../crypto/engines/GOST28147Engine.java | 16 + .../crypto/engines/GOST28147WrapEngine.java | 95 + .../org/bouncycastle/crypto/engines/IESEngine.java | 10 +- .../crypto/engines/ThreefishEngine.java | 12 +- .../crypto/generators/BaseKDFBytesGenerator.java | 3 +- .../crypto/generators/MGF1BytesGenerator.java | 3 +- .../crypto/generators/OpenBSDBCrypt.java | 63 +- .../crypto/macs/CFBBlockCipherMac.java | 3 +- .../org/bouncycastle/crypto/macs/DSTU7564Mac.java | 164 + .../org/bouncycastle/crypto/macs/DSTU7624Mac.java | 163 + .../org/bouncycastle/crypto/macs/GOST28147Mac.java | 19 + .../java/org/bouncycastle/crypto/macs/KGMac.java | 116 + .../org/bouncycastle/crypto/macs/Poly1305.java | 3 +- .../bouncycastle/crypto/modes/CTSBlockCipher.java | 5 +- .../bouncycastle/crypto/modes/GCMBlockCipher.java | 5 +- .../bouncycastle/crypto/modes/KCCMBlockCipher.java | 514 + .../bouncycastle/crypto/modes/KCTRBlockCipher.java | 151 + .../bouncycastle/crypto/modes/KGCMBlockCipher.java | 457 + .../bouncycastle/crypto/modes/KXTSBlockCipher.java | 200 + .../crypto/modes/NISTCTSBlockCipher.java | 8 +- .../crypto/modes/OldCTSBlockCipher.java | 5 +- .../crypto/modes/OpenPGPCFBBlockCipher.java | 7 +- .../crypto/modes/PGPCFBBlockCipher.java | 14 +- .../crypto/modes/PaddedBlockCipher.java | 5 +- .../crypto/params/ParametersWithUKM.java | 39 + .../crypto/prng/SP800SecureRandom.java | 10 +- .../crypto/signers/ECGOST3410_2012Signer.java | 154 + .../org/bouncycastle/crypto/signers/SM2Signer.java | 4 +- .../crypto/tls/ByteQueueOutputStream.java | 2 - .../org/bouncycastle/crypto/tls/Certificate.java | 4 +- .../bouncycastle/crypto/tls/CertificateStatus.java | 2 +- .../crypto/tls/CertificateStatusRequest.java | 2 +- .../bouncycastle/crypto/tls/DTLSRecordLayer.java | 5 + .../crypto/tls/DTLSReliableHandshake.java | 305 +- .../bouncycastle/crypto/tls/DefaultTlsServer.java | 2 +- .../crypto/tls/EncryptionAlgorithm.java | 5 +- .../org/bouncycastle/crypto/tls/ExtensionType.java | 10 + .../org/bouncycastle/crypto/tls/PSKTlsServer.java | 2 +- .../org/bouncycastle/crypto/tls/RecordStream.java | 36 +- .../org/bouncycastle/crypto/tls/ServerName.java | 2 +- .../bouncycastle/crypto/tls/TlsBlockCipher.java | 23 +- .../bouncycastle/crypto/tls/TlsDHKeyExchange.java | 5 + .../crypto/tls/TlsECDHKeyExchange.java | 5 + .../org/bouncycastle/crypto/tls/TlsException.java | 22 + .../org/bouncycastle/crypto/tls/TlsFatalAlert.java | 17 +- .../crypto/tls/TlsFatalAlertReceived.java | 19 + .../crypto/tls/TlsNoCloseNotifyException.java | 4 + .../org/bouncycastle/crypto/tls/TlsProtocol.java | 308 +- .../bouncycastle/crypto/tls/TlsServerProtocol.java | 30 +- .../math/ec/custom/gm/SM2P256V1Curve.java | 80 + .../SecP256R1Field.java => gm/SM2P256V1Field.java} | 111 +- .../math/ec/custom/gm/SM2P256V1FieldElement.java | 210 + .../math/ec/custom/gm/SM2P256V1Point.java | 308 + .../math/ec/custom/sec/SecP128R1Field.java | 16 +- .../math/ec/custom/sec/SecP256R1Field.java | 6 +- .../pqc/asn1/PQCObjectIdentifiers.java | 18 + .../org/bouncycastle/pqc/asn1/XMSSKeyParams.java | 76 + .../org/bouncycastle/pqc/asn1/XMSSMTKeyParams.java | 86 + .../bouncycastle/pqc/asn1/XMSSMTPrivateKey.java | 147 + .../org/bouncycastle/pqc/asn1/XMSSMTPublicKey.java | 82 + .../org/bouncycastle/pqc/asn1/XMSSPrivateKey.java | 147 + .../org/bouncycastle/pqc/asn1/XMSSPublicKey.java | 82 + .../crypto/DigestingStateAwareMessageSigner.java | 39 + .../pqc/crypto/StateAwareMessageSigner.java | 21 + .../pqc/crypto/gmss/GMSSStateAwareSigner.java | 86 + .../pqc/crypto/mceliece/McElieceCipher.java | 4 +- .../crypto/mceliece/McElieceFujisakiCipher.java | 2 +- .../crypto/mceliece/McElieceKobaraImaiCipher.java | 2 +- .../crypto/mceliece/McEliecePointchevalCipher.java | 4 +- .../crypto/rainbow/RainbowKeyPairGenerator.java | 2 +- .../pqc/crypto/rainbow/RainbowSigner.java | 21 +- .../pqc/crypto/rainbow/util/ComputeInField.java | 25 +- .../java/org/bouncycastle/pqc/crypto/xmss/BDS.java | 754 +- .../bouncycastle/pqc/crypto/xmss/BDSStateMap.java | 120 + .../bouncycastle/pqc/crypto/xmss/BDSTreeHash.java | 162 + .../pqc/crypto/xmss/HashTreeAddress.java | 151 +- .../pqc/crypto/xmss/KeyedHashFunctions.java | 144 +- .../bouncycastle/pqc/crypto/xmss/LTreeAddress.java | 10 +- .../org/bouncycastle/pqc/crypto/xmss/NullPRNG.java | 24 - .../pqc/crypto/xmss/OTSHashAddress.java | 162 +- .../org/bouncycastle/pqc/crypto/xmss/WOTSPlus.java | 734 +- .../bouncycastle/pqc/crypto/xmss/WOTSPlusOid.java | 155 +- .../pqc/crypto/xmss/WOTSPlusParameters.java | 228 +- .../crypto/xmss/WOTSPlusPrivateKeyParameters.java | 62 +- .../crypto/xmss/WOTSPlusPublicKeyParameters.java | 62 +- .../pqc/crypto/xmss/WOTSPlusSignature.java | 62 +- .../org/bouncycastle/pqc/crypto/xmss/XMSS.java | 952 +- .../bouncycastle/pqc/crypto/xmss/XMSSAddress.java | 158 +- .../crypto/xmss/XMSSKeyGenerationParameters.java | 31 + .../pqc/crypto/xmss/XMSSKeyPairGenerator.java | 73 + .../org/bouncycastle/pqc/crypto/xmss/XMSSMT.java | 625 +- .../crypto/xmss/XMSSMTKeyGenerationParameters.java | 31 + .../pqc/crypto/xmss/XMSSMTKeyPairGenerator.java | 88 + .../pqc/crypto/xmss/XMSSMTParameters.java | 177 +- .../crypto/xmss/XMSSMTPrivateKeyParameters.java | 518 +- .../pqc/crypto/xmss/XMSSMTPublicKeyParameters.java | 224 +- .../pqc/crypto/xmss/XMSSMTSignature.java | 305 +- .../bouncycastle/pqc/crypto/xmss/XMSSMTSigner.java | 252 + .../bouncycastle/pqc/crypto/xmss/XMSSNodeUtil.java | 150 + .../pqc/crypto/xmss/XMSSParameters.java | 165 +- .../pqc/crypto/xmss/XMSSPrivateKeyParameters.java | 519 +- .../pqc/crypto/xmss/XMSSPublicKeyParameters.java | 242 +- .../pqc/crypto/xmss/XMSSReducedSignature.java | 275 +- .../pqc/crypto/xmss/XMSSSignature.java | 6 +- .../bouncycastle/pqc/crypto/xmss/XMSSSigner.java | 160 + .../org/bouncycastle/pqc/crypto/xmss/XMSSUtil.java | 695 +- .../pqc/crypto/xmss/XMSSVerifierUtil.java | 76 + .../main/java/org/bouncycastle/util/Arrays.java | 23 +- .../java/org/bouncycastle/util/Fingerprint.java | 72 + core/src/main/java/org/bouncycastle/util/Pack.java | 18 + .../java/org/bouncycastle/util/Properties.java | 126 +- .../org/bouncycastle/util/test/SimpleTest.java | 10 + .../org/bouncycastle/asn1/anssi/package.html | 5 + .../javadoc/org/bouncycastle/asn1/cmc/package.html | 5 + .../javadoc/org/bouncycastle/asn1/est/package.html | 5 + .../javadoc/org/bouncycastle/asn1/gm/package.html | 5 + .../javadoc/org/bouncycastle/asn1/iso/package.html | 5 + .../org/bouncycastle/asn1/nsri/package.html | 5 + .../org/bouncycastle/asn1/rosstandart/package.html | 5 + .../bouncycastle/math/ec/custom/gm/package.html | 5 + .../javadoc/org/bouncycastle/math/package.html | 5 + .../javadoc/org/bouncycastle/pqc/asn1/package.html | 5 + .../bouncycastle/pqc/crypto/newhope/package.html | 5 + .../bouncycastle/pqc/crypto/sphincs/package.html | 5 + .../org/bouncycastle/pqc/crypto/xmss/package.html | 5 + core/src/main/jdk1.1/java/util/AbstractList.java | 7 +- .../bouncycastle/crypto/digests/SkeinEngine.java | 3 +- .../jdk1.4/org/bouncycastle/util/Properties.java | 144 + .../bouncycastle/asn1/test/ASN1IntegerTest.java | 356 + .../org/bouncycastle/asn1/test/GenerationTest.java | 30 +- .../java/org/bouncycastle/asn1/test/MiscTest.java | 22 +- .../org/bouncycastle/asn1/test/RegressionTest.java | 1 + .../asn1/test/SignerLocationUnitTest.java | 19 +- .../org/bouncycastle/asn1/test/X500NameTest.java | 3 +- .../org/bouncycastle/crypto/test/ARIATest.java | 9 +- .../org/bouncycastle/crypto/test/DSTU7564Test.java | 624 + .../org/bouncycastle/crypto/test/DSTU7624Test.java | 1439 ++ .../bouncycastle/crypto/test/KeccakDigestTest.java | 3 +- .../crypto/test/OpenBSDBCryptTest.java | 47 +- .../bouncycastle/crypto/test/RegressionTest.java | 4 +- .../bouncycastle/crypto/test/SM2SignerTest.java | 33 + .../crypto/test/speedy/Poly1305Reference.java | 3 +- .../test/speedy/ThreefishReferenceEngine.java | 3 +- .../pqc/crypto/test/GMSSSignerTest.java | 54 +- .../org/bouncycastle/pqc/crypto/test/NullPRNG.java | 27 + .../pqc/crypto/test/RainbowSignerTest.java | 13 +- .../pqc/crypto/test/XMSSMTPrivateKeyTest.java | 37 +- .../pqc/crypto/test/XMSSMTPublicKeyTest.java | 30 +- .../pqc/crypto/test/XMSSMTSignatureTest.java | 23 +- .../bouncycastle/pqc/crypto/test/XMSSMTTest.java | 18168 ++++++++++++++++++- .../pqc/crypto/test/XMSSPrivateKeyTest.java | 36 +- .../pqc/crypto/test/XMSSPublicKeyTest.java | 67 +- .../pqc/crypto/test/XMSSReducedSignatureTest.java | 108 +- .../pqc/crypto/test/XMSSSignatureTest.java | 92 +- .../org/bouncycastle/pqc/crypto/test/XMSSTest.java | 869 +- .../bouncycastle/pqc/crypto/test/XMSSUtilTest.java | 48 +- .../bouncycastle/crypto/test/RegressionTest.java | 14 +- debian/changelog | 12 +- debian/control | 2 +- debian/patches/CVE-2017-13098.patch | 26 + debian/patches/series | 1 + debian/poms/bcmail.pom | 10 +- debian/poms/bcpg.pom | 8 +- debian/poms/bcpkix.pom | 8 +- debian/poms/bcprov.pom | 6 +- docs/releasenotes.html | 424 +- docs/specifications.html | 35 +- .../mail/smime/SMIMESignedGenerator.java | 21 +- .../org/bouncycastle/mail/smime/SMIMEUtil.java | 13 +- .../mail/smime/examples/CreateLargeSignedMail.java | 6 +- .../mail/smime/validator/SignedMailValidator.java | 33 +- .../mail/smime/test/SignedMailValidatorTest.java | 68 +- .../org/bouncycastle/bcpg/ArmoredOutputStream.java | 2 +- .../org/bouncycastle/openpgp/PGPPublicKey.java | 31 +- .../org/bouncycastle/openpgp/PGPSecretKey.java | 128 +- .../openpgp/PGPSecretKeyRingCollection.java | 2 +- .../org/bouncycastle/openpgp/test/PGPDSATest.java | 5 +- .../org/bouncycastle/cert/X509CRLHolder.java | 16 +- .../cert/X509AttributeCertificateHolder.java | 34 +- .../java/org/bouncycastle/cert/X509CRLHolder.java | 38 +- .../bouncycastle/cert/X509CertificateHolder.java | 34 +- .../java/org/bouncycastle/cms/CMSAlgorithm.java | 11 + .../org/bouncycastle/cms/CMSSignedGenerator.java | 3 + .../java/org/bouncycastle/cms/CMSSignedHelper.java | 7 + .../main/java/org/bouncycastle/cms/CMSUtils.java | 75 +- .../DefaultCMSSignatureAlgorithmNameGenerator.java | 10 + .../cms/KeyAgreeRecipientInfoGenerator.java | 11 +- .../java/org/bouncycastle/cms/jcajce/CMSUtils.java | 15 + .../cms/jcajce/EnvelopedDataHelper.java | 2 + .../cms/jcajce/JceKeyAgreeRecipient.java | 25 + .../jcajce/JceKeyAgreeRecipientInfoGenerator.java | 51 +- .../cms/jcajce/JceKeyTransRecipient.java | 90 +- .../org/bouncycastle/openssl/PKCS8Generator.java | 15 + .../JceOpenSSLPKCS8DecryptorProviderBuilder.java | 11 +- .../jcajce/JceOpenSSLPKCS8EncryptorBuilder.java | 42 +- .../bouncycastle/openssl/jcajce/PEMUtilities.java | 57 + .../operator/DefaultAlgorithmNameFinder.java | 9 + .../DefaultDigestAlgorithmIdentifierFinder.java | 18 + .../operator/DefaultSecretKeySizeProvider.java | 3 + .../DefaultSignatureAlgorithmIdentifierFinder.java | 39 + .../operator/bc/BcDefaultDigestProvider.java | 29 +- .../operator/jcajce/OperatorHelper.java | 5 + .../pkcs/PKCS8EncryptedPrivateKeyInfoBuilder.java | 5 + .../JcePKCSPBEInputDecryptorProviderBuilder.java | 18 + .../jcajce/JcePKCSPBEOutputEncryptorBuilder.java | 30 +- .../org/bouncycastle/pkcs/jcajce/JceUtils.java | 61 + .../java/org/bouncycastle/tsp/TSPAlgorithms.java | 12 +- .../main/java/org/bouncycastle/tsp/TSPUtil.java | 5 + .../org/bouncycastle/tsp/TimeStampResponse.java | 34 + .../tsp/TimeStampResponseGenerator.java | 6 +- .../java/org/bouncycastle/cert/test/AllTests.java | 2 +- .../java/org/bouncycastle/cert/test/CertTest.java | 401 +- .../cert/test/GOST3410_2012CMSTest.java | 241 + .../cms/test/NewEnvelopedDataTest.java | 777 +- .../bouncycastle/cms/test/NewSignedDataTest.java | 24 + .../org/bouncycastle/openssl/test/AllTests.java | 40 + .../java/org/bouncycastle/pkcs/test/AllTests.java | 1 + .../org/bouncycastle/pkcs/test/PKCS10Test.java | 24 + .../java/org/bouncycastle/pkcs/test/PKCS8Test.java | 162 + .../org/bouncycastle/pkcs/test/PfxPduTest.java | 82 +- .../java/org/bouncycastle/tsp/test/NewTSPTest.java | 158 +- .../org/bouncycastle/cms/test/rawsha256nonull.p7m | Bin 0 -> 1415 bytes .../jcajce/provider/asymmetric/ECGOST.java | 92 +- .../provider/asymmetric/dsa/BCDSAPrivateKey.java | 14 + .../provider/asymmetric/dsa/BCDSAPublicKey.java | 2 +- .../jcajce/provider/asymmetric/dsa/DSAUtil.java | 10 +- .../asymmetric/dstu/BCDSTU4145PrivateKey.java | 10 +- .../asymmetric/dstu/BCDSTU4145PublicKey.java | 12 +- .../provider/asymmetric/ec/BCECPrivateKey.java | 13 +- .../provider/asymmetric/ec/BCECPublicKey.java | 12 +- .../provider/asymmetric/ec/GMSignatureSpi.java | 63 - .../jcajce/provider/asymmetric/ec/IESCipher.java | 5 +- .../provider/asymmetric/ec/KeyFactorySpi.java | 4 + .../asymmetric/ecgost/BCECGOST3410PrivateKey.java | 20 +- .../asymmetric/ecgost/BCECGOST3410PublicKey.java | 35 +- .../asymmetric/ecgost/KeyAgreementSpi.java | 160 + .../provider/asymmetric/ecgost/KeyFactorySpi.java | 18 +- .../BCECGOST3410_2012PrivateKey.java} | 74 +- .../BCECGOST3410_2012PublicKey.java} | 124 +- .../ecgost12/ECGOST2012SignatureSpi256.java | 218 + .../ecgost12/ECGOST2012SignatureSpi512.java | 220 + .../asymmetric/ecgost12/KeyAgreementSpi.java | 169 + .../{ecgost => ecgost12}/KeyFactorySpi.java | 44 +- .../asymmetric/ecgost12/KeyPairGeneratorSpi.java | 189 + .../asymmetric/rsa/BCRSAPrivateCrtKey.java | 9 +- .../provider/asymmetric/rsa/BCRSAPublicKey.java | 4 +- .../asymmetric/rsa/DigestSignatureSpi.java | 7 +- .../jcajce/provider/asymmetric/rsa/RSAUtil.java | 8 + .../provider/asymmetric/util/BaseAgreementSpi.java | 4 + .../jcajce/provider/asymmetric/util/ECUtil.java | 67 + .../asymmetric/x509/CertificateFactory.java | 2 +- .../jcajce/provider/digest/DSTU7564.java | 146 + .../bouncycastle/jcajce/provider/drbg/DRBG.java | 21 +- .../jcajce/provider/keystore/bc/BcKeyStoreSpi.java | 3 +- .../keystore/pkcs12/PKCS12KeyStoreSpi.java | 57 +- .../jcajce/provider/symmetric/AES.java | 16 - .../jcajce/provider/symmetric/DES.java | 12 +- .../jcajce/provider/symmetric/DSTU7624.java | 563 + .../jcajce/provider/symmetric/GOST28147.java | 290 +- .../jcajce/provider/symmetric/GcmSpecUtil.java | 15 +- .../jcajce/provider/symmetric/PBEPBKDF1.java | 125 + .../jcajce/provider/symmetric/PBEPBKDF2.java | 109 +- .../provider/symmetric/util/BaseBlockCipher.java | 58 +- .../jcajce/provider/symmetric/util/BaseMac.java | 16 +- .../provider/symmetric/util/BaseWrapCipher.java | 20 +- .../jcajce/provider/symmetric/util/ClassUtil.java | 45 + .../jcajce/provider/symmetric/util/PBE.java | 16 + .../jcajce/spec/GOST28147ParameterSpec.java | 8 + ...erSpec.java => GOST28147WrapParameterSpec.java} | 48 +- .../jcajce/util/MessageDigestUtils.java | 2 + .../jce/provider/BouncyCastleProvider.java | 50 +- .../jce/provider/BrokenKDF2BytesGenerator.java | 3 +- .../jce/provider/CertPathValidatorUtilities.java | 16 + .../jce/provider/JCERSAPrivateKey.java | 2 +- .../jce/provider/PKIXAttrCertPathBuilderSpi.java | 4 +- .../jce/provider/PKIXCertPathBuilderSpi.java | 4 +- .../jce/provider/PKIXCertPathValidatorSpi.java | 48 +- .../jce/provider/RFC3281CertPathUtilities.java | 14 +- .../pqc/jcajce/interfaces/StateAwareSignature.java | 65 + .../pqc/jcajce/interfaces/XMSSKey.java | 8 + .../pqc/jcajce/interfaces/XMSSMTKey.java | 10 + .../jcajce/provider/BouncyCastlePQCProvider.java | 62 +- .../org/bouncycastle/pqc/jcajce/provider/XMSS.java | 43 + .../mceliece/BCMcElieceCCA2PrivateKey.java | 17 +- .../provider/mceliece/BCMcEliecePrivateKey.java | 24 +- .../mceliece/McElieceCCA2KeyFactorySpi.java | 36 +- .../mceliece/McElieceFujisakiCipherSpi.java | 57 +- .../provider/mceliece/McElieceKeyFactorySpi.java | 34 +- .../mceliece/McElieceKobaraImaiCipherSpi.java | 65 +- .../mceliece/McEliecePointchevalCipherSpi.java | 52 +- .../provider/rainbow/BCRainbowPrivateKey.java | 2 - .../provider/sphincs/BCSphincs256PrivateKey.java | 14 +- .../provider/sphincs/BCSphincs256PublicKey.java | 14 +- .../jcajce/provider/xmss/BCXMSSMTPrivateKey.java | 171 + .../jcajce/provider/xmss/BCXMSSMTPublicKey.java | 114 + .../pqc/jcajce/provider/xmss/BCXMSSPrivateKey.java | 165 + .../pqc/jcajce/provider/xmss/BCXMSSPublicKey.java | 111 + .../pqc/jcajce/provider/xmss/DigestUtil.java | 83 + .../jcajce/provider/xmss/XMSSKeyFactorySpi.java | 116 + .../provider/xmss/XMSSKeyPairGeneratorSpi.java | 96 + .../jcajce/provider/xmss/XMSSMTKeyFactorySpi.java | 116 + .../provider/xmss/XMSSMTKeyPairGeneratorSpi.java | 97 + .../jcajce/provider/xmss/XMSSMTSignatureSpi.java | 202 + .../pqc/jcajce/provider/xmss/XMSSSignatureSpi.java | 203 + .../pqc/jcajce/spec/RainbowParameterSpec.java | 11 +- .../pqc/jcajce/spec/XMSSMTParameterSpec.java | 53 + .../pqc/jcajce/spec/XMSSParameterSpec.java | 46 + .../bouncycastle/x509/PKIXCertPathReviewer.java | 42 +- .../jcajce/provider/symmetric/util/ClassUtil.java | 27 + .../jce/provider/BouncyCastleProvider.java | 12 +- .../provider/symmetric/util/BaseBlockCipher.java | 147 +- .../bouncycastle/jce/cert/X509CertSelector.java | 2 - .../jce/provider/CertPathValidatorUtilities.java | 16 + .../jce/provider/PKIXCertPathBuilderSpi.java | 5 +- .../jce/provider/PKIXCertPathValidatorSpi.java | 5 + .../pqc/jcajce/interfaces/StateAwareSignature.java | 61 + .../jcajce/provider/asymmetric/ECGOST.java | 25 +- .../provider/asymmetric/ec/BCECPrivateKey.java | 6 + .../provider/asymmetric/ec/BCECPublicKey.java | 28 +- .../asymmetric/ec/KeyPairGeneratorSpi.java | 48 +- .../asymmetric/ecgost/BCECGOST3410PrivateKey.java | 6 + .../asymmetric/ecgost/BCECGOST3410PublicKey.java | 13 +- .../jcajce/provider/asymmetric/util/ECUtil.java | 161 +- .../jce/provider/BouncyCastleProvider.java | 40 +- .../jce/provider/CertPathValidatorUtilities.java | 16 + .../jcajce/provider/test/AllTests.java | 1 + .../provider/test/HybridRandomProviderTest.java | 17 + .../jce/provider/test/CertPathValidatorTest.java | 1378 +- .../jce/provider/test/DSTU7624Test.java | 359 + .../bouncycastle/jce/provider/test/DigestTest.java | 7 + .../jce/provider/test/GOST3410Test.java | 383 +- .../bouncycastle/jce/provider/test/HMacTest.java | 13 + .../jce/provider/test/NamedCurveTest.java | 28 +- .../jce/provider/test/PKCS12StoreTest.java | 48 + .../jce/provider/test/RegressionTest.java | 3 +- .../bouncycastle/jce/provider/test/TestUtils.java | 4 +- .../pqc/jcajce/provider/test/AllTests.java | 5 + .../provider/test/NewHopeKeyPairGeneratorTest.java | 3 + .../pqc/jcajce/provider/test/NewHopeTest.java | 3 + .../jcajce/provider/test/RainbowSignatureTest.java | 89 +- .../test/Sphincs256KeyPairGeneratorTest.java | 3 + .../pqc/jcajce/provider/test/Sphincs256Test.java | 3 + .../pqc/jcajce/provider/test/XMSSMTTest.java | 345 + .../pqc/jcajce/provider/test/XMSSTest.java | 367 + .../jce/provider/test/ImplicitlyCaTest.java | 10 +- scripts/jdk1.1ed.sh | 12 + tls/build.gradle | 1 + tls/docs/GnuTLSSetup.html | 4 +- ...tle (D)TLS API and JSSE Provider User Guide.odt | Bin 0 -> 650873 bytes ...tle (D)TLS API and JSSE Provider User Guide.pdf | Bin 0 -> 598449 bytes tls/docs/OpenSSLSetup.html | 8 +- .../java/org/bouncycastle/jsse/BCSNIHostName.java | 109 + .../java/org/bouncycastle/jsse/BCSNIMatcher.java | 25 + .../org/bouncycastle/jsse/BCSNIServerName.java | 55 + .../jsse/provider/BouncyCastleJsseProvider.java | 226 +- .../org/bouncycastle/jsse/provider/FipsUtils.java | 102 + .../org/bouncycastle/jsse/provider/JsseUtils.java | 135 +- .../bouncycastle/jsse/provider/PropertyUtils.java | 86 +- .../jsse/provider/ProvDHConfigVerifier.java | 22 + .../jsse/provider/ProvSSLContextSpi.java | 116 +- .../bouncycastle/jsse/provider/ProvSSLEngine.java | 30 +- .../jsse/provider/ProvSSLParameters.java | 47 +- .../bouncycastle/jsse/provider/ProvSSLSession.java | 8 +- .../jsse/provider/ProvSSLSessionContext.java | 14 +- .../bouncycastle/jsse/provider/ProvSSLSocket.java | 4 +- .../jsse/provider/ProvSSLSocketBase.java | 19 + .../jsse/provider/ProvSSLSocketFactory.java | 6 +- .../jsse/provider/ProvSSLSocketWrap.java | 613 + .../bouncycastle/jsse/provider/ProvTlsClient.java | 119 +- .../bouncycastle/jsse/provider/ProvTlsServer.java | 179 +- .../jsse/provider/ProvTrustManagerFactorySpi.java | 2 +- .../jsse/provider/SSLParametersUtil.java | 297 +- .../org/bouncycastle/tls/AbstractTlsClient.java | 75 +- .../org/bouncycastle/tls/AbstractTlsContext.java | 27 + .../bouncycastle/tls/AbstractTlsKeyExchange.java | 9 + .../org/bouncycastle/tls/AbstractTlsServer.java | 63 +- .../org/bouncycastle/tls/BasicTlsPSKIdentity.java | 3 + .../org/bouncycastle/tls/ByteQueueInputStream.java | 3 + .../bouncycastle/tls/ByteQueueOutputStream.java | 3 + .../bouncycastle/tls/CachedInformationType.java | 25 + .../java/org/bouncycastle/tls/CertChainType.java | 22 +- .../java/org/bouncycastle/tls/Certificate.java | 5 +- .../org/bouncycastle/tls/CertificateStatus.java | 2 +- .../bouncycastle/tls/CertificateStatusRequest.java | 5 +- .../java/org/bouncycastle/tls/CertificateURL.java | 9 + .../java/org/bouncycastle/tls/CipherSuite.java | 13 +- .../java/org/bouncycastle/tls/CombinedHash.java | 23 - .../org/bouncycastle/tls/DTLSClientProtocol.java | 26 +- .../java/org/bouncycastle/tls/DTLSProtocol.java | 11 +- .../java/org/bouncycastle/tls/DTLSRecordLayer.java | 5 + .../bouncycastle/tls/DTLSReliableHandshake.java | 305 +- .../org/bouncycastle/tls/DTLSServerProtocol.java | 13 +- .../tls/DefaultTlsDHConfigVerifier.java | 77 +- .../tls/DefaultTlsECConfigVerifier.java | 21 +- .../java/org/bouncycastle/tls/ExtensionType.java | 17 +- .../org/bouncycastle/tls/FiniteFieldDHEGroup.java | 18 - .../org/bouncycastle/tls/HeartbeatMessage.java | 2 +- .../java/org/bouncycastle/tls/IdentifierType.java | 29 + .../java/org/bouncycastle/tls/MACAlgorithm.java | 41 + .../main/java/org/bouncycastle/tls/NamedCurve.java | 185 - .../main/java/org/bouncycastle/tls/NamedGroup.java | 246 + .../java/org/bouncycastle/tls/PRFAlgorithm.java | 20 + .../java/org/bouncycastle/tls/ProtocolVersion.java | 5 - .../java/org/bouncycastle/tls/RecordStream.java | 38 +- .../java/org/bouncycastle/tls/SSL3Constants.java | 29 - .../main/java/org/bouncycastle/tls/ServerName.java | 2 +- .../tls/SimulatedTlsSRPIdentityManager.java | 10 +- .../org/bouncycastle/tls/TlsAuthentication.java | 2 +- .../org/bouncycastle/tls/TlsClientProtocol.java | 48 +- .../main/java/org/bouncycastle/tls/TlsContext.java | 3 + .../main/java/org/bouncycastle/tls/TlsDHUtils.java | 321 +- .../java/org/bouncycastle/tls/TlsECCUtils.java | 128 +- .../org/bouncycastle/tls/TlsECDHKeyExchange.java | 2 +- .../java/org/bouncycastle/tls/TlsException.java | 22 + .../org/bouncycastle/tls/TlsExtensionsUtils.java | 256 +- .../java/org/bouncycastle/tls/TlsFatalAlert.java | 17 +- .../bouncycastle/tls/TlsFatalAlertReceived.java | 19 + .../java/org/bouncycastle/tls/TlsKeyExchange.java | 2 + .../tls/TlsNoCloseNotifyException.java | 4 + .../org/bouncycastle/tls/TlsObjectIdentifiers.java | 12 + .../org/bouncycastle/tls/TlsPSKKeyExchange.java | 13 +- .../java/org/bouncycastle/tls/TlsProtocol.java | 349 +- .../org/bouncycastle/tls/TlsRSAKeyExchange.java | 13 +- .../java/org/bouncycastle/tls/TlsRSAUtils.java | 11 +- .../org/bouncycastle/tls/TlsSRPKeyExchange.java | 2 +- .../org/bouncycastle/tls/TlsServerCertificate.java | 8 + .../bouncycastle/tls/TlsServerCertificateImpl.java | 24 + .../org/bouncycastle/tls/TlsServerProtocol.java | 47 +- .../main/java/org/bouncycastle/tls/TlsUtils.java | 213 +- .../org/bouncycastle/tls/TrustedAuthority.java | 158 + .../java/org/bouncycastle/tls/crypto/DHGroup.java | 24 +- .../bouncycastle/tls/crypto/DHStandardGroups.java | 90 +- .../bouncycastle/tls/crypto/TlsCertificate.java | 6 + .../org/bouncycastle/tls/crypto/TlsCrypto.java | 41 +- .../tls/crypto/TlsCryptoException.java | 15 +- .../tls/crypto/TlsCryptoParameters.java | 5 + .../org/bouncycastle/tls/crypto/TlsDHConfig.java | 35 +- .../org/bouncycastle/tls/crypto/TlsECConfig.java | 20 +- .../java/org/bouncycastle/tls/crypto/TlsMAC.java | 6 +- .../bouncycastle/tls/crypto/TlsNonceGenerator.java | 12 + .../org/bouncycastle/tls/crypto/TlsSecret.java | 26 +- .../tls/crypto/impl/AbstractTlsCrypto.java | 1 + .../tls/crypto/impl/AbstractTlsSecret.java | 58 +- .../tls/crypto/impl/ChaCha20Poly1305Cipher.java | 222 - .../tls/crypto/impl/TlsAEADCipher.java | 71 +- .../tls/crypto/impl/TlsAEADCipherImpl.java | 6 +- .../tls/crypto/impl/TlsBlockCipher.java | 132 +- .../tls/crypto/impl/TlsBlockCipherImpl.java | 12 +- .../bouncycastle/tls/crypto/impl/TlsImplUtils.java | 24 +- .../tls/crypto/impl/TlsNullCipher.java | 21 +- .../tls/crypto/impl/TlsStreamCipher.java | 163 - .../tls/crypto/impl/TlsStreamCipherImpl.java | 39 - .../bouncycastle/tls/crypto/impl/TlsSuiteHMac.java | 106 +- .../bouncycastle/tls/crypto/impl/TlsSuiteMac.java | 11 - .../tls/crypto/impl/bc/BcChaCha20Poly1305.java | 131 + .../impl/bc/BcDefaultTlsCredentialedAgreement.java | 55 +- .../impl/bc/BcDefaultTlsCredentialedSigner.java | 6 +- .../tls/crypto/impl/bc/BcTlsCertificate.java | 73 +- .../tls/crypto/impl/bc/BcTlsCrypto.java | 392 +- .../bouncycastle/tls/crypto/impl/bc/BcTlsDH.java | 14 +- .../tls/crypto/impl/bc/BcTlsDHDomain.java | 75 +- .../tls/crypto/impl/bc/BcTlsDSASigner.java | 6 +- .../tls/crypto/impl/bc/BcTlsDSAVerifier.java | 4 +- .../tls/crypto/impl/bc/BcTlsDSSSigner.java | 31 +- .../tls/crypto/impl/bc/BcTlsDSSVerifier.java | 31 +- .../bouncycastle/tls/crypto/impl/bc/BcTlsECDH.java | 7 +- .../tls/crypto/impl/bc/BcTlsECDSASigner.java | 6 +- .../tls/crypto/impl/bc/BcTlsECDSAVerifier.java | 4 +- .../tls/crypto/impl/bc/BcTlsECDomain.java | 107 +- .../tls/crypto/impl/bc/BcTlsRSASigner.java | 40 +- .../tls/crypto/impl/bc/BcTlsRSAVerifier.java | 35 +- .../tls/crypto/impl/bc/BcTlsSecret.java | 100 +- .../tls/crypto/impl/bc/BcTlsSigner.java | 37 + .../tls/crypto/impl/bc/BcTlsVerifier.java | 37 + .../bouncycastle/tls/crypto/impl/bc/SSL3Mac.java | 144 - .../tls/crypto/impl/jcajce/JcaNonceGenerator.java | 32 + .../tls/crypto/impl/jcajce/JcaTlsCertificate.java | 73 +- .../tls/crypto/impl/jcajce/JcaTlsCrypto.java | 408 +- .../tls/crypto/impl/jcajce/JceAEADCipherImpl.java | 23 +- .../tls/crypto/impl/jcajce/JceBlockCipherImpl.java | 8 +- .../JceBlockCipherWithCBCImplicitIVImpl.java | 8 +- .../crypto/impl/jcajce/JceChaCha20Poly1305.java | 166 + .../jcajce/JceDefaultTlsCredentialedAgreement.java | 60 +- .../jcajce/JceDefaultTlsCredentialedDecryptor.java | 1 - .../crypto/impl/jcajce/JceStreamCipherImpl.java | 82 - .../tls/crypto/impl/jcajce/JceTlsDH.java | 15 +- .../tls/crypto/impl/jcajce/JceTlsDHDomain.java | 88 +- .../tls/crypto/impl/jcajce/JceTlsECDH.java | 15 +- .../tls/crypto/impl/jcajce/JceTlsECDomain.java | 132 +- .../tls/crypto/impl/jcajce/JceTlsHMAC.java | 4 +- .../tls/crypto/impl/jcajce/JceTlsMAC.java | 4 +- .../tls/crypto/impl/jcajce/JceTlsSecret.java | 107 +- .../jsse/provider/test/BasicTlsTest.java | 53 +- .../jsse/provider/test/CipherSuitesTestSuite.java | 89 +- .../bouncycastle/jsse/provider/test/SSLUtils.java | 12 +- .../bouncycastle/jsse/provider/test/TestUtils.java | 15 + .../provider/test/TrustManagerFactoryTest.java | 12 +- .../java/org/bouncycastle/tls/test/AllTests.java | 5 +- .../org/bouncycastle/tls/test/BasicTlsTest.java | 14 +- .../org/bouncycastle/tls/test/CertChainUtil.java | 184 + .../org/bouncycastle/tls/test/DTLSClientTest.java | 2 +- .../bouncycastle/tls/test/DTLSProtocolTest.java | 4 +- .../org/bouncycastle/tls/test/DTLSServerTest.java | 5 +- .../org/bouncycastle/tls/test/DTLSTestCase.java | 11 +- .../tls/test/DTLSTestClientProtocol.java | 5 +- .../tls/test/DTLSTestServerProtocol.java | 6 +- .../bouncycastle/tls/test/HTTPSServerThread.java | 4 +- .../org/bouncycastle/tls/test/MockDTLSClient.java | 9 +- .../org/bouncycastle/tls/test/MockDTLSServer.java | 14 +- .../bouncycastle/tls/test/MockPSKTlsClient.java | 5 +- .../bouncycastle/tls/test/MockPSKTlsServer.java | 4 +- .../bouncycastle/tls/test/MockSRPTlsClient.java | 5 +- .../bouncycastle/tls/test/MockSRPTlsServer.java | 2 +- .../org/bouncycastle/tls/test/MockTlsClient.java | 14 +- .../org/bouncycastle/tls/test/MockTlsServer.java | 16 +- .../java/org/bouncycastle/tls/test/OCSPTest.java | 150 + .../java/org/bouncycastle/tls/test/PRFTest.java | 179 + .../bouncycastle/tls/test/TestOCSPCertServer.java | 170 + .../bouncycastle/tls/test/TlsTestClientImpl.java | 12 +- .../bouncycastle/tls/test/TlsTestServerImpl.java | 16 +- .../org/bouncycastle/tls/test/TlsTestSuite.java | 13 +- .../org/bouncycastle/tls/test/TlsTestUtils.java | 135 +- .../org/bouncycastle/tls/test/TlsUtilsTest.java | 50 +- .../resources/org/bouncycastle/tls/test/README.txt | 93 +- .../resources/org/bouncycastle/tls/test/ca.tmpl | 2 +- .../tls/test/{client.tmpl => client_agree.tmpl} | 3 +- .../tls/test/{client.tmpl => client_enc.tmpl} | 1 - .../tls/test/{client.tmpl => client_sign.tmpl} | 1 - .../tls/test/{server.tmpl => server_agree.tmpl} | 3 +- .../tls/test/{server.tmpl => server_enc.tmpl} | 1 - .../tls/test/{server.tmpl => server_sign.tmpl} | 1 - .../org/bouncycastle/tls/test/x509-ca-dsa.pem | 26 + .../org/bouncycastle/tls/test/x509-ca-ecdsa.pem | 11 + .../org/bouncycastle/tls/test/x509-ca-key-dsa.pem | 15 + .../bouncycastle/tls/test/x509-ca-key-ecdsa.pem | 6 + .../org/bouncycastle/tls/test/x509-ca-key-rsa.pem | 28 + .../org/bouncycastle/tls/test/x509-ca-key.pem | 32 - .../org/bouncycastle/tls/test/x509-ca-rsa.pem | 19 + .../org/bouncycastle/tls/test/x509-ca.pem | 21 - .../org/bouncycastle/tls/test/x509-client-dsa.pem | 55 +- .../org/bouncycastle/tls/test/x509-client-ecdh.pem | 12 + .../bouncycastle/tls/test/x509-client-ecdsa.pem | 25 +- .../bouncycastle/tls/test/x509-client-key-dsa.pem | 26 +- .../bouncycastle/tls/test/x509-client-key-ecdh.pem | 6 + .../tls/test/x509-client-key-ecdsa.pem | 8 +- .../bouncycastle/tls/test/x509-client-key-rsa.pem | 28 + .../org/bouncycastle/tls/test/x509-client-key.pem | 32 - .../org/bouncycastle/tls/test/x509-client-rsa.pem | 20 + .../org/bouncycastle/tls/test/x509-client.pem | 22 - .../org/bouncycastle/tls/test/x509-server-dsa.pem | 55 +- .../org/bouncycastle/tls/test/x509-server-ecdh.pem | 12 + .../bouncycastle/tls/test/x509-server-ecdsa.pem | 25 +- .../bouncycastle/tls/test/x509-server-key-dsa.pem | 26 +- .../bouncycastle/tls/test/x509-server-key-ecdh.pem | 6 + .../tls/test/x509-server-key-ecdsa.pem | 8 +- .../tls/test/x509-server-key-rsa-enc.pem | 28 + .../tls/test/x509-server-key-rsa-sign.pem | 28 + .../org/bouncycastle/tls/test/x509-server-key.pem | 32 - .../bouncycastle/tls/test/x509-server-rsa-enc.pem | 20 + .../bouncycastle/tls/test/x509-server-rsa-sign.pem | 20 + .../org/bouncycastle/tls/test/x509-server.pem | 22 - 647 files changed, 51384 insertions(+), 12154 deletions(-) create mode 100644 core/src/main/java/org/bouncycastle/asn1/cryptopro/Gost2814789EncryptedKey.java create mode 100644 core/src/main/java/org/bouncycastle/asn1/cryptopro/Gost2814789KeyWrapParameters.java create mode 100644 core/src/main/java/org/bouncycastle/asn1/cryptopro/GostR3410KeyTransport.java create mode 100644 core/src/main/java/org/bouncycastle/asn1/cryptopro/GostR3410TransportParameters.java create mode 100644 core/src/main/java/org/bouncycastle/crypto/agreement/ECVKOAgreement.java create mode 100755 core/src/main/java/org/bouncycastle/crypto/digests/DSTU7564Digest.java create mode 100644 core/src/main/java/org/bouncycastle/crypto/engines/CryptoProWrapEngine.java create mode 100755 core/src/main/java/org/bouncycastle/crypto/engines/DSTU7624Engine.java create mode 100755 core/src/main/java/org/bouncycastle/crypto/engines/DSTU7624WrapEngine.java create mode 100644 core/src/main/java/org/bouncycastle/crypto/engines/GOST28147WrapEngine.java create mode 100755 core/src/main/java/org/bouncycastle/crypto/macs/DSTU7564Mac.java create mode 100755 core/src/main/java/org/bouncycastle/crypto/macs/DSTU7624Mac.java create mode 100644 core/src/main/java/org/bouncycastle/crypto/macs/KGMac.java create mode 100755 core/src/main/java/org/bouncycastle/crypto/modes/KCCMBlockCipher.java create mode 100755 core/src/main/java/org/bouncycastle/crypto/modes/KCTRBlockCipher.java create mode 100755 core/src/main/java/org/bouncycastle/crypto/modes/KGCMBlockCipher.java create mode 100755 core/src/main/java/org/bouncycastle/crypto/modes/KXTSBlockCipher.java create mode 100644 core/src/main/java/org/bouncycastle/crypto/params/ParametersWithUKM.java create mode 100644 core/src/main/java/org/bouncycastle/crypto/signers/ECGOST3410_2012Signer.java create mode 100644 core/src/main/java/org/bouncycastle/crypto/tls/TlsException.java create mode 100644 core/src/main/java/org/bouncycastle/crypto/tls/TlsFatalAlertReceived.java create mode 100644 core/src/main/java/org/bouncycastle/math/ec/custom/gm/SM2P256V1Curve.java copy core/src/main/java/org/bouncycastle/math/ec/custom/{sec/SecP256R1Field.java => gm/SM2P256V1Field.java} (73%) create mode 100644 core/src/main/java/org/bouncycastle/math/ec/custom/gm/SM2P256V1FieldElement.java create mode 100644 core/src/main/java/org/bouncycastle/math/ec/custom/gm/SM2P256V1Point.java create mode 100644 core/src/main/java/org/bouncycastle/pqc/asn1/XMSSKeyParams.java create mode 100644 core/src/main/java/org/bouncycastle/pqc/asn1/XMSSMTKeyParams.java create mode 100644 core/src/main/java/org/bouncycastle/pqc/asn1/XMSSMTPrivateKey.java create mode 100644 core/src/main/java/org/bouncycastle/pqc/asn1/XMSSMTPublicKey.java create mode 100644 core/src/main/java/org/bouncycastle/pqc/asn1/XMSSPrivateKey.java create mode 100644 core/src/main/java/org/bouncycastle/pqc/asn1/XMSSPublicKey.java create mode 100644 core/src/main/java/org/bouncycastle/pqc/crypto/DigestingStateAwareMessageSigner.java create mode 100644 core/src/main/java/org/bouncycastle/pqc/crypto/StateAwareMessageSigner.java create mode 100644 core/src/main/java/org/bouncycastle/pqc/crypto/gmss/GMSSStateAwareSigner.java create mode 100644 core/src/main/java/org/bouncycastle/pqc/crypto/xmss/BDSStateMap.java create mode 100644 core/src/main/java/org/bouncycastle/pqc/crypto/xmss/BDSTreeHash.java delete mode 100644 core/src/main/java/org/bouncycastle/pqc/crypto/xmss/NullPRNG.java create mode 100644 core/src/main/java/org/bouncycastle/pqc/crypto/xmss/XMSSKeyGenerationParameters.java create mode 100644 core/src/main/java/org/bouncycastle/pqc/crypto/xmss/XMSSKeyPairGenerator.java create mode 100644 core/src/main/java/org/bouncycastle/pqc/crypto/xmss/XMSSMTKeyGenerationParameters.java create mode 100644 core/src/main/java/org/bouncycastle/pqc/crypto/xmss/XMSSMTKeyPairGenerator.java create mode 100644 core/src/main/java/org/bouncycastle/pqc/crypto/xmss/XMSSMTSigner.java create mode 100644 core/src/main/java/org/bouncycastle/pqc/crypto/xmss/XMSSNodeUtil.java create mode 100644 core/src/main/java/org/bouncycastle/pqc/crypto/xmss/XMSSSigner.java create mode 100644 core/src/main/java/org/bouncycastle/pqc/crypto/xmss/XMSSVerifierUtil.java create mode 100644 core/src/main/java/org/bouncycastle/util/Fingerprint.java create mode 100644 core/src/main/javadoc/org/bouncycastle/asn1/anssi/package.html create mode 100644 core/src/main/javadoc/org/bouncycastle/asn1/cmc/package.html create mode 100644 core/src/main/javadoc/org/bouncycastle/asn1/est/package.html create mode 100644 core/src/main/javadoc/org/bouncycastle/asn1/gm/package.html create mode 100644 core/src/main/javadoc/org/bouncycastle/asn1/iso/package.html create mode 100644 core/src/main/javadoc/org/bouncycastle/asn1/nsri/package.html create mode 100644 core/src/main/javadoc/org/bouncycastle/asn1/rosstandart/package.html create mode 100644 core/src/main/javadoc/org/bouncycastle/math/ec/custom/gm/package.html create mode 100644 core/src/main/javadoc/org/bouncycastle/math/package.html create mode 100644 core/src/main/javadoc/org/bouncycastle/pqc/asn1/package.html create mode 100644 core/src/main/javadoc/org/bouncycastle/pqc/crypto/newhope/package.html create mode 100644 core/src/main/javadoc/org/bouncycastle/pqc/crypto/sphincs/package.html create mode 100644 core/src/main/javadoc/org/bouncycastle/pqc/crypto/xmss/package.html create mode 100644 core/src/main/jdk1.4/org/bouncycastle/util/Properties.java create mode 100644 core/src/test/java/org/bouncycastle/asn1/test/ASN1IntegerTest.java create mode 100755 core/src/test/java/org/bouncycastle/crypto/test/DSTU7564Test.java create mode 100755 core/src/test/java/org/bouncycastle/crypto/test/DSTU7624Test.java create mode 100644 core/src/test/java/org/bouncycastle/pqc/crypto/test/NullPRNG.java create mode 100644 debian/patches/CVE-2017-13098.patch copy pkix/src/main/{java => j2me}/org/bouncycastle/cert/X509CRLHolder.java (96%) create mode 100644 pkix/src/main/java/org/bouncycastle/pkcs/jcajce/JceUtils.java create mode 100644 pkix/src/test/java/org/bouncycastle/cert/test/GOST3410_2012CMSTest.java create mode 100644 pkix/src/test/java/org/bouncycastle/pkcs/test/PKCS8Test.java create mode 100644 pkix/src/test/resources/org/bouncycastle/cms/test/rawsha256nonull.p7m create mode 100644 prov/src/main/java/org/bouncycastle/jcajce/provider/asymmetric/ecgost/KeyAgreementSpi.java copy prov/src/main/java/org/bouncycastle/jcajce/provider/asymmetric/{ecgost/BCECGOST3410PrivateKey.java => ecgost12/BCECGOST3410_2012PrivateKey.java} (90%) copy prov/src/main/java/org/bouncycastle/jcajce/provider/asymmetric/{ecgost/BCECGOST3410PublicKey.java => ecgost12/BCECGOST3410_2012PublicKey.java} (77%) create mode 100644 prov/src/main/java/org/bouncycastle/jcajce/provider/asymmetric/ecgost12/ECGOST2012SignatureSpi256.java create mode 100644 prov/src/main/java/org/bouncycastle/jcajce/provider/asymmetric/ecgost12/ECGOST2012SignatureSpi512.java create mode 100644 prov/src/main/java/org/bouncycastle/jcajce/provider/asymmetric/ecgost12/KeyAgreementSpi.java copy prov/src/main/java/org/bouncycastle/jcajce/provider/asymmetric/{ecgost => ecgost12}/KeyFactorySpi.java (71%) create mode 100644 prov/src/main/java/org/bouncycastle/jcajce/provider/asymmetric/ecgost12/KeyPairGeneratorSpi.java create mode 100644 prov/src/main/java/org/bouncycastle/jcajce/provider/digest/DSTU7564.java create mode 100644 prov/src/main/java/org/bouncycastle/jcajce/provider/symmetric/DSTU7624.java create mode 100644 prov/src/main/java/org/bouncycastle/jcajce/provider/symmetric/PBEPBKDF1.java create mode 100644 prov/src/main/java/org/bouncycastle/jcajce/provider/symmetric/util/ClassUtil.java copy prov/src/main/java/org/bouncycastle/jcajce/spec/{GOST28147ParameterSpec.java => GOST28147WrapParameterSpec.java} (68%) create mode 100644 prov/src/main/java/org/bouncycastle/pqc/jcajce/interfaces/StateAwareSignature.java create mode 100644 prov/src/main/java/org/bouncycastle/pqc/jcajce/interfaces/XMSSKey.java create mode 100644 prov/src/main/java/org/bouncycastle/pqc/jcajce/interfaces/XMSSMTKey.java create mode 100644 prov/src/main/java/org/bouncycastle/pqc/jcajce/provider/XMSS.java create mode 100644 prov/src/main/java/org/bouncycastle/pqc/jcajce/provider/xmss/BCXMSSMTPrivateKey.java create mode 100644 prov/src/main/java/org/bouncycastle/pqc/jcajce/provider/xmss/BCXMSSMTPublicKey.java create mode 100644 prov/src/main/java/org/bouncycastle/pqc/jcajce/provider/xmss/BCXMSSPrivateKey.java create mode 100644 prov/src/main/java/org/bouncycastle/pqc/jcajce/provider/xmss/BCXMSSPublicKey.java create mode 100644 prov/src/main/java/org/bouncycastle/pqc/jcajce/provider/xmss/DigestUtil.java create mode 100644 prov/src/main/java/org/bouncycastle/pqc/jcajce/provider/xmss/XMSSKeyFactorySpi.java create mode 100644 prov/src/main/java/org/bouncycastle/pqc/jcajce/provider/xmss/XMSSKeyPairGeneratorSpi.java create mode 100644 prov/src/main/java/org/bouncycastle/pqc/jcajce/provider/xmss/XMSSMTKeyFactorySpi.java create mode 100644 prov/src/main/java/org/bouncycastle/pqc/jcajce/provider/xmss/XMSSMTKeyPairGeneratorSpi.java create mode 100644 prov/src/main/java/org/bouncycastle/pqc/jcajce/provider/xmss/XMSSMTSignatureSpi.java create mode 100644 prov/src/main/java/org/bouncycastle/pqc/jcajce/provider/xmss/XMSSSignatureSpi.java create mode 100644 prov/src/main/java/org/bouncycastle/pqc/jcajce/spec/XMSSMTParameterSpec.java create mode 100644 prov/src/main/java/org/bouncycastle/pqc/jcajce/spec/XMSSParameterSpec.java create mode 100644 prov/src/main/jdk1.1/org/bouncycastle/jcajce/provider/symmetric/util/ClassUtil.java create mode 100644 prov/src/main/jdk1.3/org/bouncycastle/pqc/jcajce/interfaces/StateAwareSignature.java copy prov/src/main/{java => jdk1.4}/org/bouncycastle/jcajce/provider/asymmetric/ECGOST.java (54%) copy prov/src/main/{java => jdk1.4}/org/bouncycastle/jce/provider/BouncyCastleProvider.java (92%) create mode 100644 prov/src/test/java/org/bouncycastle/jcajce/provider/test/HybridRandomProviderTest.java create mode 100644 prov/src/test/java/org/bouncycastle/jce/provider/test/DSTU7624Test.java create mode 100644 prov/src/test/java/org/bouncycastle/pqc/jcajce/provider/test/XMSSMTTest.java create mode 100644 prov/src/test/java/org/bouncycastle/pqc/jcajce/provider/test/XMSSTest.java create mode 100644 tls/docs/Legion of the Bouncy Castle (D)TLS API and JSSE Provider User Guide.odt create mode 100644 tls/docs/Legion of the Bouncy Castle (D)TLS API and JSSE Provider User Guide.pdf create mode 100644 tls/src/main/java/org/bouncycastle/jsse/BCSNIHostName.java create mode 100644 tls/src/main/java/org/bouncycastle/jsse/BCSNIMatcher.java create mode 100644 tls/src/main/java/org/bouncycastle/jsse/BCSNIServerName.java create mode 100644 tls/src/main/java/org/bouncycastle/jsse/provider/FipsUtils.java create mode 100644 tls/src/main/java/org/bouncycastle/jsse/provider/ProvDHConfigVerifier.java create mode 100644 tls/src/main/java/org/bouncycastle/jsse/provider/ProvSSLSocketWrap.java create mode 100644 tls/src/main/java/org/bouncycastle/tls/CachedInformationType.java delete mode 100644 tls/src/main/java/org/bouncycastle/tls/FiniteFieldDHEGroup.java create mode 100644 tls/src/main/java/org/bouncycastle/tls/IdentifierType.java delete mode 100644 tls/src/main/java/org/bouncycastle/tls/NamedCurve.java create mode 100644 tls/src/main/java/org/bouncycastle/tls/NamedGroup.java delete mode 100644 tls/src/main/java/org/bouncycastle/tls/SSL3Constants.java create mode 100644 tls/src/main/java/org/bouncycastle/tls/TlsException.java create mode 100644 tls/src/main/java/org/bouncycastle/tls/TlsFatalAlertReceived.java create mode 100644 tls/src/main/java/org/bouncycastle/tls/TlsObjectIdentifiers.java create mode 100644 tls/src/main/java/org/bouncycastle/tls/TlsServerCertificate.java create mode 100644 tls/src/main/java/org/bouncycastle/tls/TlsServerCertificateImpl.java create mode 100644 tls/src/main/java/org/bouncycastle/tls/TrustedAuthority.java create mode 100644 tls/src/main/java/org/bouncycastle/tls/crypto/TlsNonceGenerator.java delete mode 100644 tls/src/main/java/org/bouncycastle/tls/crypto/impl/ChaCha20Poly1305Cipher.java delete mode 100644 tls/src/main/java/org/bouncycastle/tls/crypto/impl/TlsStreamCipher.java delete mode 100644 tls/src/main/java/org/bouncycastle/tls/crypto/impl/TlsStreamCipherImpl.java create mode 100644 tls/src/main/java/org/bouncycastle/tls/crypto/impl/bc/BcChaCha20Poly1305.java create mode 100644 tls/src/main/java/org/bouncycastle/tls/crypto/impl/bc/BcTlsSigner.java create mode 100644 tls/src/main/java/org/bouncycastle/tls/crypto/impl/bc/BcTlsVerifier.java delete mode 100644 tls/src/main/java/org/bouncycastle/tls/crypto/impl/bc/SSL3Mac.java create mode 100644 tls/src/main/java/org/bouncycastle/tls/crypto/impl/jcajce/JcaNonceGenerator.java create mode 100644 tls/src/main/java/org/bouncycastle/tls/crypto/impl/jcajce/JceChaCha20Poly1305.java delete mode 100644 tls/src/main/java/org/bouncycastle/tls/crypto/impl/jcajce/JceStreamCipherImpl.java create mode 100644 tls/src/test/java/org/bouncycastle/tls/test/CertChainUtil.java create mode 100644 tls/src/test/java/org/bouncycastle/tls/test/OCSPTest.java create mode 100644 tls/src/test/java/org/bouncycastle/tls/test/PRFTest.java create mode 100644 tls/src/test/java/org/bouncycastle/tls/test/TestOCSPCertServer.java copy tls/src/test/resources/org/bouncycastle/tls/test/{client.tmpl => client_agree.tmpl} (71%) copy tls/src/test/resources/org/bouncycastle/tls/test/{client.tmpl => client_enc.tmpl} (87%) rename tls/src/test/resources/org/bouncycastle/tls/test/{client.tmpl => client_sign.tmpl} (84%) copy tls/src/test/resources/org/bouncycastle/tls/test/{server.tmpl => server_agree.tmpl} (71%) copy tls/src/test/resources/org/bouncycastle/tls/test/{server.tmpl => server_enc.tmpl} (87%) rename tls/src/test/resources/org/bouncycastle/tls/test/{server.tmpl => server_sign.tmpl} (84%) create mode 100644 tls/src/test/resources/org/bouncycastle/tls/test/x509-ca-dsa.pem create mode 100644 tls/src/test/resources/org/bouncycastle/tls/test/x509-ca-ecdsa.pem create mode 100644 tls/src/test/resources/org/bouncycastle/tls/test/x509-ca-key-dsa.pem create mode 100644 tls/src/test/resources/org/bouncycastle/tls/test/x509-ca-key-ecdsa.pem create mode 100644 tls/src/test/resources/org/bouncycastle/tls/test/x509-ca-key-rsa.pem delete mode 100644 tls/src/test/resources/org/bouncycastle/tls/test/x509-ca-key.pem create mode 100644 tls/src/test/resources/org/bouncycastle/tls/test/x509-ca-rsa.pem delete mode 100644 tls/src/test/resources/org/bouncycastle/tls/test/x509-ca.pem create mode 100644 tls/src/test/resources/org/bouncycastle/tls/test/x509-client-ecdh.pem create mode 100644 tls/src/test/resources/org/bouncycastle/tls/test/x509-client-key-ecdh.pem create mode 100644 tls/src/test/resources/org/bouncycastle/tls/test/x509-client-key-rsa.pem delete mode 100644 tls/src/test/resources/org/bouncycastle/tls/test/x509-client-key.pem create mode 100644 tls/src/test/resources/org/bouncycastle/tls/test/x509-client-rsa.pem delete mode 100644 tls/src/test/resources/org/bouncycastle/tls/test/x509-client.pem create mode 100644 tls/src/test/resources/org/bouncycastle/tls/test/x509-server-ecdh.pem create mode 100644 tls/src/test/resources/org/bouncycastle/tls/test/x509-server-key-ecdh.pem create mode 100644 tls/src/test/resources/org/bouncycastle/tls/test/x509-server-key-rsa-enc.pem create mode 100644 tls/src/test/resources/org/bouncycastle/tls/test/x509-server-key-rsa-sign.pem delete mode 100644 tls/src/test/resources/org/bouncycastle/tls/test/x509-server-key.pem create mode 100644 tls/src/test/resources/org/bouncycastle/tls/test/x509-server-rsa-enc.pem create mode 100644 tls/src/test/resources/org/bouncycastle/tls/test/x509-server-rsa-sign.pem delete mode 100644 tls/src/test/resources/org/bouncycastle/tls/test/x509-server.pem -- Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-java/bouncycastle.git _______________________________________________ pkg-java-commits mailing list pkg-java-comm...@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-commits