OPS packet: Default to new packet format - #2347

Open

vanitasvitae wants to merge 4051 commits into

pgpainless:opsNewPacketFormat

This pull request is big! We're only showing the most recent 250 commits

Commits on Jun 22, 2026

Commits on Jun 23, 2026

Compare BigIntegers.constantTimeAreEqual operands as common-length unsigned byte arrays
gefeili
committed
Validate encoding length in PQC public key parameter decode constructors
gefeili
committed
Guard five OpenPGP signature subpackets against truncated bodies at parse time
gefeili
committed
Guard PQC verifySignature against malformed-length signatures
gefeili
committed
Validate encoding length in PQC public key parameter decode constructors
gefeili
committed
Gate loading of legacy 16-bit-MAC BKS v0/v1 keystores behind enable_v1 (CVE-2018-5382)
dghgit
committed
Document the constant-time contract of BigIntegers.constantTimeAreEqual

ligefeiBouncycastle
authored and
Administrator
committed
Merge branch 'bigintegers-ct-contract' into 'main'
Administrator
committed
Verify CRL signatures in lightweight cert-path CRLValidation before trusting revocation status
dghgit
committed
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
dghgit
committed
Add Argon2 (RFC 9106) SecretKeyFactory to the BC JCE provider
dghgit
committed
Route the OpenPGP jcajce Argon2 S2K path through SecretKeyFactory ARGON2 and rename the calculator to JcePGPS2KCalculator
dghgit
committed
Zero the temporary unsigned encodings in BigIntegers.constantTimeAreEqual and complete its javadoc
dghgit
committed
Fix HQC parameter-spec name round-trip and make the dash form the primary HQC algorithm name with no-dash aliases
dghgit
committed
Standardised Classic McEliece (ISO/IEC 18033-2:2006/Amd 2:2026)

ligefeiBouncycastle
authored and
Administrator
committed
Merge branch 'cmce-iso18033' into 'main'
Administrator
committed
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
dghgit
committed
Add lightweight crypto.util key-info round-trip test with id-kem-cm OID assertion for standardised Classic McEliece
dghgit
committed
Implement ProvSSLSession.getRequestedServerNames so a server can read the requested SNI after the handshake, relates to github #1773.
royb
committed
added missing test
royb
committed

Commits on Jun 24, 2026

Commits on Jun 25, 2026

Commits on Jun 26, 2026

Commits on Jun 27, 2026

Commits on Jun 28, 2026

AIMer

ligefeiBouncycastle
authored and
Administrator
committed
Merge branch 'kpqc-aimer' into 'main'
Administrator
committed
ElGamalEngine: validate ciphertext components on decryption (small-subgroup confinement)

ligefeiBouncycastle
authored and
Administrator
committed
Merge branch 'elgamal-peer-value-validation' into 'main'
Administrator
committed
Fix `PKIXCertPathReviewer.getPolicyTree()` always returning `null`

ligefeiBouncycastle
authored and
Administrator
committed
Merge branch 'pkix-getpolicytree-fix' into 'main'
Administrator
committed
Reject empty GeneralSubtrees/GeneralSubtree sequences in X.509 NameConstraints per RFC 5280 sec. 4.2.1.10, relates to github #2331.
dghgit
committed
KCCM: Decryption input length guard
peterdettman
committed
RFC 8702 — SHAKE in CMS: KMAC-with-SHAKE support

ligefeiBouncycastle
authored and
Administrator
committed
Merge branch 'rfc-8702-shake-cms' into 'main'
Administrator
committed
KCCM/KGCM: Improve parameter type and reuse checks
peterdettman
committed
Enforce the RFC 9106 Argon2 memory-size-exponent floor at key derivation

ligefeiBouncycastle
authored and
Administrator
committed
Merge branch 'argon2-memory-exponent-floor' into 'main'
Administrator
committed
GF256AES: Optimize mul, sqr methods
peterdettman
committed
Refactor ElGamalEngine
peterdettman
committed

Commits on Jun 29, 2026

Commits on Jun 30, 2026

Merge branch 'legacy-builds' into 'main'
ligefeiBouncycastle
committed
Correct MessageDigestUtils digest name for the RIPEMD-256 OID
gefeili
committed
Merge branch 'main' into legacy-properties-overlay-sync
gefeili
committed
build-provider + build-libraries green
gefeili
committed
Pass java 1.4 test package.
gefeili
committed
Merge branch 'messagedigestutils-ripemd256-name-fix' into 'main'
Administrator
committed
Bound the legacy PBES1 / PBKDF1 iteration count in the pkix PBE decryptor builders
gefeili
committed
Merge remote-tracking branch 'origin/main' into pbes1-pbkdf1-operator-iteration-cap
gefeili
committed
Add comment
peterdettman
committed
Cap the CMS PasswordRecipient PBKDF2 iteration count (CPU-DoS guard)

ligefeiBouncycastle
authored and
Administrator
committed
Merge branch 'claude/serene-bouman-77ade5' into 'main'
Administrator
committed
#33+#34+#37 bug fix
gefeili
committed
Merge branch 'main' into openssl-pem-parse-ioexception
gefeili
committed
Use a constant-time MAC compare in the CMSAuthenticatedDataParser javadoc example
gefeili
committed
Wrap RuntimeException from the PKCS12 engineLoad MAC-data parse as IOException
gefeili
committed
Wrap RuntimeException from the CMSSignedData parse as CMSException
gefeili
committed
Wrap RuntimeException from the CMSSignedData parse as CMSException
gefeili
committed
Reject a top-level SECRET_SUBKEY packet in PGPObjectFactory.nextObject() with IOException (parser robustness)

ligefeiBouncycastle
authored and
Administrator
committed
Merge branch 'pg-objectfactory-secret-subkey-ioexception' into 'main'
Administrator
committed
Surface a malformed IssuingDistributionPoint extension from X509CRLHolder(byte[] / InputStream) as IOException instead of leaking an IllegalArgumentException (parser robustness)

ligefeiBouncycastle
authored and
Administrator
committed
Merge branch 'x509crlholder-idp-parse-ioexception' into 'main'
Administrator
committed
Cap the BKS keystore load iteration count to prevent a pre-integrity-check CPU-DoS

ligefeiBouncycastle
authored and
Administrator
committed
Merge branch 'bks-keystore-iteration-cap' into 'main'
Administrator
committed
Cap the PKCS#12-PBE iteration count in the pkix operator / OpenSSL PKCS#8 layer (CPU-DoS guard)

ligefeiBouncycastle
authored and
Administrator
committed
Merge branch 'pkcs12-pbe-operator-iteration-cap' into 'main'
Administrator
committed

Commits on Jul 1, 2026

Commits on Jul 2, 2026

Commits on Jul 3, 2026

Commits on Jul 4, 2026

Commits on Jul 5, 2026

Reject a key whose tree digest is outside the named XMSS/XMSS^MT signer family with InvalidKeyException, keeping the generic and pre-hash signers key-driven, relates to github #2176.
dghgit
committed

Commits on Jul 6, 2026

Commits on Jul 7, 2026

Commits on Jul 8, 2026

Commits on Jul 9, 2026