{
  "artefact":"org.bouncycastle/bcprov-jdk15to18",
  "dependencies":null,
  "filter":[
    ".*?-jdk15to18\\.jar",
    ".+(-sources)?\\.jar$"
  ],
  "history":[
    {
      "changes":null,
      "date":"2024-04-24T11:44:15+02:00",
      "dependencies":null,
      "description":"The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 to JDK 1.8.",
      "files":null,
      "hashes":{"bcprov-jdk15on.jar":"b6758a0a72ed44dfdb316e50a67919cc4640e160a26b8a7e9d989cdcb3fc8a7f"},
      "licenses":[{
        "name":"Bouncy Castle Licence",
        "url":"http://www.bouncycastle.org/licence.html",
        "distribution":"repo"
      }],
      "minJRE":"JVM_1_5",
      "name":"Bouncy Castle Provider",
      "version":"1.78.1"
    },
    {
      "changes":"1.79\t: Defects Fixed\r\n - Leading zeroes were sometimes dropped from Ed25519 signatures leading to verification errors in the PGP API. This has been fixed.\r\n - Default version string for Armored Output is now set correctly in 18on build.\r\n - The Elephant cipher would fail on large messages. This has been fixed.\r\n - CMSSignedData.replaceSigners() would re-encode the digest algorithms block, occassionally dropping ones where NULL had been previously added as an algorithm parameter. The method now attempts to only use the original digest algorithm identifiers.\r\n - ERSInputStreamData would fail to generate the correct hash if called a second time with a different hash algorithm. This has been fixed.\r\n - A downcast in the CrlCache which would cause FTP based CRLs to fail to load has been removed.\r\n - ECUtil.getNamedCurveOid() now trims curve names of excess space before look up.\r\n - The PhotonBeetle and Xoodyak did not reset properly after a doFinal() call. This has been fixed.\r\n - Malformed AlgorithmIdentifiers in CertIDs could cause caching issues in the OCSP cache. This has been fixed.\r\n - With Java 21 a provider service class will now be returned with a null class name where previously a null would have been returned for a service. This can cause a NullPointerException to be thrown by the BC provider if a non-existant service is requested. This issue has now been worked around.\r\n - CMS: OtherKeyAttribute.keyAttr now treated as optional.\r\n - CMS: EnvelopedData and AuthEnvelopedData could calculate the wrong versions. This has been fixed.\r\n \r\nAdditional Features and Functionality\r\n - Object Identifiers have been added for ML-KEM, ML-DSA, and SLH-DSA.\r\n - The PQC algorithms, ML-KEM, ML-DSA (including pre-hash), and SLH-DSA (including pre-hash) have been added to the BC provider and the lightweight API.\r\n - A new spec, ContextParameterSpec, has been added to support signature contexts for ML-DSA and SLH-DSA.\r\n - BCJSSE: Added support for security property \"jdk.tls.server.defaultDHEParameters\" (disabled in FIPS mode).\r\n - BCJSSE: Added support for signature_algorithms_cert configuration via \"org.bouncycastle.jsse.client.SignatureSchemesCert\" and \"org.bouncycastle.jsse.server.SignatureSchemesCert\" system properties or BCSSLParameters property \"SignatureSchemesCert\".\r\n - BCJSSE: Added support for boolean system property \"org.bouncycastle.jsse.fips.allowGCMCiphersIn12\" (false by default).\r\n - (D)TLS: Remove redundant verification of self-generated RSA signatures.\r\n - CompositePrivateKeys now support the latest revision of the composite signature draft.\r\n - Delta Certificates now support the latest revision of the delta certificate extension draft.\r\n - A general KeyIdentifier class, encapsulating both PGP KeyID and the PGP key fingerprint has been added to the PGP API.\r\n - Support for the LibrePGP PreferredEncryptionModes signature subpacket has been added to the PGP API.\r\n - Support Version 6 signatures, including salts, has been added to the PGP API.\r\n - Support for the PreferredKeyServer signature supacket has been added to the PGP API.\r\n - Support for RFC 9269, \"Using KEMs in Cryptographic Message Syntax (CMS)\", has been added to the CMS API.\r\n - Support for the Argon2 S2K has been added to the PGP API.\r\n - The system property \"org.bouncycastle.pemreader.lax\" has been introduced for situations where the BC PEM parsing is now too strict.\r\n - The system property \"org.bouncycastle.ec.disable_f2m\" has been introduced to allow F2m EC support to be disabled.",
      "date":"2024-10-30T13:45:44.491+01:00",
      "dependencies":null,
      "description":"The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 to JDK 1.8.",
      "files":null,
      "hashes":{"bcprov-jdk15on.jar":"8ca88a20788483873d925e2f9d2cb4c494dce6b000fe1e894e3b2459aa9e1e9e"},
      "licenses":[{
        "name":"Bouncy Castle Licence",
        "url":"http://www.bouncycastle.org/licence.html",
        "distribution":"repo"
      }],
      "minJRE":"JVM_1_5",
      "name":"Bouncy Castle Provider",
      "version":"1.79"
    },
    {
      "changes":"1.80\t: Defects Fixed\r\n - A splitting issue for ML-KEM lead to an incorrect size for kemct in KEMRecipientInfos. This has been fixed.\r\n - The PKCS12 KeyStore has been adjusted to prevent accidental doubling of the Oracle trusted certificate attribute (results in an IOException when used with the JVM PKCS12 implementation).\r\n - The SignerInfoGenerator copy constructor was ignoring the certHolder field. This has been fixed.\r\n - The getAlgorithm() method return value for a CompositePrivateKey was not consistent with the corresponding getAlgorithm() return value for the CompositePrivateKey. This has been fixed.\r\n - The international property files were missing from the bcjmail distribution. This has been fixed.\r\n - Issues with ElephantEngine failing on processing large/multi-block messages have been addressed.\r\n - GCFB mode now fully resets on a reset.\r\n - The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle, Xoodyak now support the use of the AEADParameters class and provide accurate update/doFinal output lengths.\r\n - An unnecessary downcast in CertPathValidatorUtilities was resulting in the ignoring of URLs for FTP based CRLs. This has been fixed.\r\n - A regression in the OpenPGP API could cause NoSuchAlgorithmException to be thrown when attempting to use SHA-256 in some contexts. This has been fixed.\r\n - EtsiTs1029411TypesAuthorization was missing an extension field. This has been added.\r\n - Interoperability issues with single depth LMS keys have been addressed.\r\n \r\nAdditional Features and Functionality\r\n - CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.\r\n - ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06, draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.\r\n - Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.\r\n - Support has been added for EC-JPAKE to the lightweight API.\r\n - Support has been added for the direct construction of S/MIME AuthEnvelopedData objects, via the SMIMEAuthEnvelopedData class.\r\n - An override \"org.bouncycastle.asn1.allow_wrong_oid_enc\" property has been added to disable new OID encoding checks (use with caution).\r\n - Support has been added for the PBEParemeterSpec.getParameterSpec() method where supported by the JVM.\r\n - ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context is provided. This allows the algorithms to be used with the existing Java key tool.\r\n - HQC has been updated to reflect the reference implementation released on 2024-10-30.\r\n - Support has been added to the low-level APIs for the OASIS Shamir Secret Splitting algorithms.\r\n - BCJSSE: System property \"org.bouncycastle.jsse.fips.allowGCMCiphersIn12\" no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if done in alignment with FIPS requirements.\r\n - Support has been added for OpenPGP V6 PKESK and message encryption.\r\n - PGPSecretKey.copyWithNewPassword() now includes AEAD support.\r\n - The ASCON family of algorithms have been updated in accordance with the published FIPS SP 800-232 draft.",
      "date":"2025-02-08T20:14:56.235+01:00",
      "dependencies":null,
      "description":"The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 to JDK 1.8.",
      "files":null,
      "hashes":{
        "../code-ressourcen/bcprov-jdk15on-sources.jar":"a601b2237237f26241e3a1e840b34ece38ac539b0dbcf8ba859519455f51e338",
        "bcprov-jdk15on.jar":"380e17ed748c07487e6764e95618abb43cf0cf39bf364cd5dfaff75724e7da11"
      },
      "licenses":[{
        "name":"Bouncy Castle Licence",
        "url":"http://www.bouncycastle.org/licence.html",
        "distribution":"repo"
      }],
      "minJRE":"JVM_1_5",
      "name":"Bouncy Castle Provider",
      "version":"1.80"
    }
  ],
  "installed":{
    "changes":"1.81\t: Defects Fixed\r\n - A potention NullPointerException in the KEM KDF KemUtil class has been removed.\r\n - Overlapping input/output buffers in doFinal could result in data corruption. This has been fixed.\r\n - Fixed Grain-128AEAD decryption incorrectly handle MAC verification.\r\n - Add configurable header validation to prevent malicious header injection in PGP cleartext signed messages; Fix signature packet encoding issues in PGPSignature.join() and embedded signatures while phasing out legacy format.\r\n - Fixed ParallelHash initialization stall when using block size B=0.\r\n - The PRF from the PBKDF2 function was been lost when PBMAC1 was initialized from protectionAlgorithm. This has been fixed.\r\n - The lowlevel DigestFactory was cloning MD5 when being asked to clone SHA1. This has been fixed.\r\n \r\nAdditional Features and Functionality\r\n - XWing implementation updated to draft-connolly-cfrg-xwing-kem/07/\r\n - Further support has been added for generation and use of PGP V6 keys\r\n - Additional validation has been added for armored headers in Cleartext Signed Messages.- - The PQC signature algorithm proposal Mayo has been added to the low-level API and the BCPQC provider.\r\n - The PQC signature algorithm proposal Snova has been added to the low-level API and the BCPQC provider.\r\n - Support for ChaCha20-Poly1305 has been added to the CMS/SMIME APIs.\r\n - The Falcon implementation has been updated to the latest draft.\r\n - Support has been added for generating keys which encode as seed-only and expanded-key-only for ML-KEM and ML-DSA private keys.\r\n - Private key encoding of ML-DSA and ML-KEM private keys now follows the latest IETF draft.\r\n - The Ascon family of algorithms has been updated to the initial draft of SP 800-232. Some additional optimisation work has been done.\r\n - Support for ML-DSA's external-mu calculation and signing has been added to the BC provider.\r\n - CMS now supports ML-DSA for SignedData generation.\r\n - Introduce high-level OpenPGP API for message creation/consumption and certificate evaluation.\r\n - Added JDK21 KEM API implementation for HQC algorithm.\r\n - BCJSSE: Strip trailing dot from hostname for SNI, endpointID checks.\r\n - BCJSSE: Draft support for ML-KEM updated (draft-connolly-tls-mlkem-key-agreement-05).\r\n - BCJSSE: Draft support for hybrid ECDHE-MLKEM (draft-ietf-tls-ecdhe-mlkem-00).\r\n - BCJSSE: Optionally prefer TLS 1.3 server's supported_groups order (BCSSLParameters.useNamedGroupsOrder).",
    "date":"2025-06-24T15:20:01.38+02:00",
    "dependencies":null,
    "description":"The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains the  JCA/JCE provider and low-level API for the BC Java version 1.81 for Java 1.5 to Java 1.8.",
    "files":[
      "",
      "bcprov-jdk15to18-javadoc.jar",
      "bcprov-jdk15to18-javadoc.jar.asc",
      "bcprov-jdk15to18-javadoc.jar.md5",
      "bcprov-jdk15to18-javadoc.jar.sha1",
      "bcprov-jdk15to18-javadoc.jar.sha256",
      "bcprov-jdk15to18-javadoc.jar.sha512",
      "bcprov-jdk15to18-sources.jar",
      "bcprov-jdk15to18-sources.jar.asc",
      "bcprov-jdk15to18-sources.jar.md5",
      "bcprov-jdk15to18-sources.jar.sha1",
      "bcprov-jdk15to18-sources.jar.sha256",
      "bcprov-jdk15to18-sources.jar.sha512",
      "bcprov-jdk15to18.jar",
      "bcprov-jdk15to18.jar.asc",
      "bcprov-jdk15to18.jar.md5",
      "bcprov-jdk15to18.jar.sha1",
      "bcprov-jdk15to18.jar.sha256",
      "bcprov-jdk15to18.jar.sha512",
      "bcprov-jdk15to18.pom",
      "bcprov-jdk15to18.pom.asc",
      "bcprov-jdk15to18.pom.md5",
      "bcprov-jdk15to18.pom.sha1",
      "bcprov-jdk15to18.pom.sha256",
      "bcprov-jdk15to18.pom.sha512",
      "meta.json"
    ],
    "hashes":{
      "../code-ressourcen/bcprov-jdk15on-sources.jar":"25186d46ccca1c3782b5585c39f222ba1766b738e1f2731b213bdeaaad343ac0",
      "bcprov-jdk15on.jar":"0ef9c4d9536719aaa1c92a7c694d87981fa9d4d64dd9479cc322a08aebbc651e"
    },
    "licenses":[{
      "name":"Bouncy Castle Licence",
      "url":"https://www.bouncycastle.org/licence.html",
      "distribution":"repo"
    }],
    "minJRE":"JVM_1_5",
    "name":"Bouncy Castle Provider",
    "version":"1.81"
  },
  "minJRE":"1.6",
  "provider":"maven",
  "renames":{
    "jdk15to18":"jdk15on",
    "(.*-sources.*)":"../code-ressourcen/$1"
  },
  "requiredBy":[
    {
      "artefact":"org.bouncycastle/bcutil-jdk15to18",
      "file":"JDownloader\\ressourcen\\libs\\bcutil-jdk15to18.dep.json",
      "provider":"maven",
      "version":"1.77"
    },
    {
      "artefact":"org.bouncycastle/bctls-jdk15to18",
      "file":"JDownloader\\ressourcen\\libs\\bctls-jdk15to18.dep.json",
      "provider":"maven",
      "version":"1.77"
    },
    {
      "artefact":"org.bouncycastle/bcpkix-jdk15to18",
      "file":"JDownloader\\ressourcen\\libs\\bcpkix-jdk15to18.dep.json",
      "provider":"maven",
      "version":"1.77"
    }
  ],
  "version":null,
  "autoRenameEnabled":true,
  "confirm":true
}