guard minimum length in sm2 decrypt and gost/dstu/desede/rc2 unwrap - #2359

Closed

rootvector2 wants to merge 4084 commits into

rootvector2:wrap-engine-min-length-guard

This pull request is big! We're only showing the most recent 250 commits

Commits on Jun 24, 2026

add comments
gefeili
committed
1430ad2
Reject CR/LF at the ArmoredOutputStream and PemWriter header sinks
gefeili
committed
2a5b929
Restrict BCJSSE HTTPS endpoint-identification wildcards to the left-most label
gefeili
committed
45f116a
Avoid unnecessary BigInteger roundtrip
peterdettman
committed
cb4893d
Implement getEncoded via encodeTo
peterdettman
committed
b757130
Add ECDHRawAgreement and use
peterdettman
committed
766c175
Refactor custom Fp curves
peterdettman
committed
acc0d48
More work on raw agreements (to avoid BigInteger roundtrips)
peterdettman
committed
0520dc7
Extract separate IETFUtilsTest
peterdettman
committed
724326d
Merge branch 'jsse-hostname-leftmost-wildcard-fix' into 'main'
Administrator
committed
7d6d75a
added HMAC-SM3 vector test
dghgit
committed
00755bf

Commits on Jun 25, 2026

Commits on Jun 26, 2026

Commits on Jun 27, 2026

Allocate ephemeral ports in JSSE provider tests instead of hardcoded ones
dghgit
committed
2d21055
Split XMSS, SLHDSA, CMCE, Hawk, FAEST, MQOM, SNOVA and QRUOV tests into separate AllTests suites
dghgit
committed
f429007
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
dghgit
committed
185d288
added fork setting, added sampling to SLH-DSA test
dghgit
committed
27d55ac
added calcTestForks
dghgit
committed
f98b0c7
refactored out slow tests for parallel execution.
dghgit
committed
9912127
CMS: It's just "algorithm protection" attribute
peterdettman
committed
154927e
Add AttributeTable.hasAny method
peterdettman
committed
e7047a6
Refactor SIgnerInformation
peterdettman
committed
2cf2af0
Refactor CMSAuthenticatedData
peterdettman
committed
6b21544
Read S-Expression canonical string length incrementally to avoid pre-allocation DoS, relates to github #2338.
dghgit
committed
a4a3109
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
dghgit
committed
0aa2511
Generalise canonical-string read into Streams.readLenBytesFully and add StreamsTest, relates to github #2338.
dghgit
committed
84cba75
Remove unused legacy SXprUtils S-expression helper, relates to github #2338.
dghgit
committed
cbf5b27
EthereumIESEngine: close static-key stream-mode cross-message MAC forgery

ligefeiBouncycastle
authored and
Administrator
committed
0948a3b
Merge branch 'ethereum-ies-static-key-fix' into 'main'
Administrator
committed
14a64f4
Merge branch 'armor-pem-header-injection-fix' into 'main'
Administrator
committed
4c56032
MLS SecureRandom hygiene: source from the Group / registrar, never `new SecureRandom()` per operation

ligefeiBouncycastle
authored and
Administrator
committed
b6496f2
Merge branch 'mls-securerandom-sweep' into 'main'
Administrator
committed
56c6489
GF(2^8) / GF(2^4) arithmetic consolidation onto constant-time util.GF256 / util.GF16

ligefeiBouncycastle
authored and
Administrator
committed
f99a41e
Merge branch 'alg-gf256-dedup' into 'main'
Administrator
committed
953ecde
EAX / CCM / OCB / KCCM: reject nonce reuse on re-init for encryption

ligefeiBouncycastle
authored and
Administrator
committed
9b7ada7
Merge branch 'aead-nonce-reuse-guard' into 'main'
Administrator
committed
b65ba5f

Commits on Jun 28, 2026

AIMer

ligefeiBouncycastle
authored and
Administrator
committed
409c939
Merge branch 'kpqc-aimer' into 'main'
Administrator
committed
62b2c35
ElGamalEngine: validate ciphertext components on decryption (small-subgroup confinement)

ligefeiBouncycastle
authored and
Administrator
committed
c146fca
Merge branch 'elgamal-peer-value-validation' into 'main'
Administrator
committed
9e8991f
Fix `PKIXCertPathReviewer.getPolicyTree()` always returning `null`

ligefeiBouncycastle
authored and
Administrator
committed
4371f61
Merge branch 'pkix-getpolicytree-fix' into 'main'
Administrator
committed
24e0103
Reject empty GeneralSubtrees/GeneralSubtree sequences in X.509 NameConstraints per RFC 5280 sec. 4.2.1.10, relates to github #2331.
dghgit
committed
3a03043
KCCM: Decryption input length guard
peterdettman
committed
211fd23
RFC 8702 — SHAKE in CMS: KMAC-with-SHAKE support

ligefeiBouncycastle
authored and
Administrator
committed
98dc30f
Merge branch 'rfc-8702-shake-cms' into 'main'
Administrator
committed
86626df
KCCM/KGCM: Improve parameter type and reuse checks
peterdettman
committed
efe1030
Enforce the RFC 9106 Argon2 memory-size-exponent floor at key derivation

ligefeiBouncycastle
authored and
Administrator
committed
4fb18ac
Merge branch 'argon2-memory-exponent-floor' into 'main'
Administrator
committed
6fc7c13
GF256AES: Optimize mul, sqr methods
peterdettman
committed
413d481
Refactor ElGamalEngine
peterdettman
committed
407693a

Commits on Jun 29, 2026

DVCS: carry `requester` and `extensions` forward in the `DVCSRequestInformationBuilder` seed constructor (RFC 3029 data-loss fix)

ligefeiBouncycastle
authored and
Administrator
committed
cbac5bb
Merge branch 'dvcs-request-info-builder-seed-fix' into 'main'
Administrator
committed
8a2e78c
Harden GnuPG keybox blob parsing against malformed input

ligefeiBouncycastle
authored and
Administrator
committed
db0e123
Merge branch 'keybox-cert-blob-bounds' into 'main'
Administrator
committed
13178fc
fix a stale-buffer bug on the signing retry path
gefeili
committed
5a42f0b
OpenPGP: reject malformed dash-prefixed lines in cleartext-signed (CSF) messages

ligefeiBouncycastle
authored and
Administrator
committed
fa6dd4a
Merge branch '2329-openpgp-csf-dash-escape' into 'main'
Administrator
committed
8f9908c
ChaCha20Poly1305: improve init parameter checks
peterdettman
committed
df4ef8f
Fix possible integer overflow
peterdettman
committed
5b606f0
Refactoring in bcpg and openpgp tests
peterdettman
committed
1642e9d
Guard OCSP RevokedInfo, SingleResponse and Signature decode constructors with a lower-bound sequence-size check, throwing IllegalArgumentException instead of leaking ArrayIndexOutOfBoundsException …
royb
committed
a4ebade
Guard four fixed-arity ASN.1 SEQUENCE decode constructors (cms.Attribute, cmp.CertStatus, cms.RecipientEncryptedKey, cms.OtherRecipientInfo) with a lower-bound size check, throwing IllegalArgumentE…
royb
committed
8c6581d
ECIES: Fix mac update length and cleanup
peterdettman
committed
9aff128
pass build1-5to1-8
gefeili
committed
c5dcb89

Commits on Jun 30, 2026

Merge branch 'legacy-builds' into 'main'
ligefeiBouncycastle
committed
dfa5a2d
Correct MessageDigestUtils digest name for the RIPEMD-256 OID
gefeili
committed
745c793
Merge branch 'main' into legacy-properties-overlay-sync
gefeili
committed
ebf67f8
build-provider + build-libraries green
gefeili
committed
b8986fa
Pass java 1.4 test package.
gefeili
committed
c2fefda
Merge branch 'messagedigestutils-ripemd256-name-fix' into 'main'
Administrator
committed
7ce90dd
Bound the legacy PBES1 / PBKDF1 iteration count in the pkix PBE decryptor builders
gefeili
committed
24db505
Merge remote-tracking branch 'origin/main' into pbes1-pbkdf1-operator-iteration-cap
gefeili
committed
cbcbc86
Add comment
peterdettman
committed
a5b3fd9
Cap the CMS PasswordRecipient PBKDF2 iteration count (CPU-DoS guard)

ligefeiBouncycastle
authored and
Administrator
committed
ade3d4f
Merge branch 'claude/serene-bouman-77ade5' into 'main'
Administrator
committed
29d25c5
#33+#34+#37 bug fix
gefeili
committed
0caf423
Merge branch 'main' into openssl-pem-parse-ioexception
gefeili
committed
f25c114
Use a constant-time MAC compare in the CMSAuthenticatedDataParser javadoc example
gefeili
committed
9eb7fdb
Wrap RuntimeException from the PKCS12 engineLoad MAC-data parse as IOException
gefeili
committed
e260a06
Wrap RuntimeException from the CMSSignedData parse as CMSException
gefeili
committed
7c77de4
Wrap RuntimeException from the CMSSignedData parse as CMSException
gefeili
committed
2134ca9
Reject a top-level SECRET_SUBKEY packet in PGPObjectFactory.nextObject() with IOException (parser robustness)

ligefeiBouncycastle
authored and
Administrator
committed
b29107b
Merge branch 'pg-objectfactory-secret-subkey-ioexception' into 'main'
Administrator
committed
913ef61
Surface a malformed IssuingDistributionPoint extension from X509CRLHolder(byte[] / InputStream) as IOException instead of leaking an IllegalArgumentException (parser robustness)

ligefeiBouncycastle
authored and
Administrator
committed
3826620
Merge branch 'x509crlholder-idp-parse-ioexception' into 'main'
Administrator
committed
4cdf7c6
Cap the BKS keystore load iteration count to prevent a pre-integrity-check CPU-DoS

ligefeiBouncycastle
authored and
Administrator
committed
87ce888
Merge branch 'bks-keystore-iteration-cap' into 'main'
Administrator
committed
a919761
Cap the PKCS#12-PBE iteration count in the pkix operator / OpenSSL PKCS#8 layer (CPU-DoS guard)

ligefeiBouncycastle
authored and
Administrator
committed
72fce66
Merge branch 'pkcs12-pbe-operator-iteration-cap' into 'main'
Administrator
committed
b709460

Commits on Jul 1, 2026

Merge branch 'main' into openssl-pem-parse-ioexception
gefeili
committed
8bc1876
Merge branch 'main' into pkcs12-cms-parse-runtimeexception-leak
gefeili
committed
8a7f525
Merge branch 'refs/heads/main' into pqc-pubkey-length-validation
gefeili
committed
de0d4d4
Merge branch 'main' into pqc-verify-malformed-input-hardening
gefeili
committed
bf06265
Merge branch 'main' into pg-sig-subpacket-length-guard
gefeili
committed
52ba533
Update CMCE and FrodoKEM
gefeili
committed
07a811b
Validate encoding length in PQC public key parameter decode constructors
gefeili
committed
c4b24fe
Merge branch 'main' into lms-hss-sig-parse-npe-fix
gefeili
committed
34e9fce
Merge branch 'pqc-verify-malformed-input-hardening' into pqc-pubkey-length-validation
gefeili
committed
a38e460
replaced IllegalStateException with IllegalArgumentException as advertised.
dghgit
committed
bf86812
Reject malformed MLS external-join messages instead of crashing with a pre-auth NPE in verifyNewMemberCommit / verifyNewMemberProposal

ligefeiBouncycastle
authored and
Administrator
committed
f0049a9
Merge branch 'mls-newmember-verify-npe-fix' into 'main'
Administrator
committed
1414d5d
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
dghgit
committed
f828a0b
Corrected BIP-340 step numbering in BIP340Signer signing comments, relates to github #2340.
dghgit
committed
e757665
replaced IllegalStateException with IllegalArgumentException as advertised.
dghgit
committed
c7185cf
Revert "Wrap RuntimeException from the CMSSignedData parse as CMSException"
gefeili
committed
c046171
Merge branch 'main' into pkcs12-cms-parse-runtimeexception-leak
gefeili
committed
5f3c410
Convert malformed-inner-content IllegalArgumentException to CMSException in CMSAuthEnvelopedData / CMSAuthenticatedData (parser robustness)

ligefeiBouncycastle
authored and
Administrator
committed
28ba229
Merge branch 'cms-auth-decode-robustness' into 'main'
Administrator
committed
49dfc18
Merge branch 'main' into pg-sig-subpacket-length-guard
gefeili
committed
aaf287d
Refactor withinDNSubtree
peterdettman
committed
9a5d1db
ASN.1: New fromExplicit method(s) for casts in parsing context
peterdettman
committed
eba0e61
Guard TimeStampResp / TimeStampReq against a too-short SEQUENCE (parser robustness)

ligefeiBouncycastle
authored and
Administrator
committed
3a402b8
Merge branch 'tsp-request-response-parse-guard' into 'main'
Administrator
committed
da9a22e
Merge branch 'main' into pqc-pubkey-length-validation
dghgit
committed
34b5282
Merge branch 'main' into pkcs12-cms-parse-runtimeexception-leak
dghgit
committed
b8fa7a3
Validate ciphertext length in eight PQC KEM decapsulators before decoding (parser robustness / DoS)

ligefeiBouncycastle
authored and
Administrator
committed
314e626
Merge branch 'pqc-kem-ciphertext-length-validation' into 'main'
Administrator
committed
80b14cb
Align CMS malformed-content-tag test with the IllegalArgumentException now thrown by the ASN.1 tag check.
dghgit
committed
caaa307
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
dghgit
committed
25f6188
Merge branch 'main' into openssl-pem-parse-ioexception
dghgit
committed
75b0a0a
Merge branch 'main' into lms-hss-sig-parse-npe-fix
dghgit
committed
c8b108b

Commits on Jul 2, 2026

Commits on Jul 3, 2026

Commits on Jul 4, 2026

Commits on Jul 5, 2026

Reject a key whose tree digest is outside the named XMSS/XMSS^MT signer family with InvalidKeyException, keeping the generic and pre-hash signers key-driven, relates to github #2176.
dghgit
committed
cd1d88f

Commits on Jul 6, 2026

Commits on Jul 7, 2026

Commits on Jul 8, 2026

Commits on Jul 9, 2026

Commits on Jul 10, 2026

Commits on Jul 11, 2026

Commits on Jul 12, 2026

Commits on Jul 14, 2026

Commits on Jul 15, 2026