Download Bouncy Castle Java - Bouncycastle (original) (raw)
Welcome to the download page for the general edition of Bouncy Castle Java. In addition to the available access options, including GitHub, Maven Central, and direct download, you will find searchable release notes and links to API and other documentation.
Maven
The Bouncy Castle Java jars are mirrored on the Maven central repository
Download from bouncycastle.org
We facilitate effortless downloads through bouncycastle.org, simplifying the process for our users.
GitHub
Access the Bouncy Castle APIs Java package on GitHub, where you can also report issues, join discussions, and contribute to the software.
Documentation
Explore the Bouncy Castle for Java documentation online for concise guidance and examples.
Join the discussion
You can ask questions and learn from specialists in the Bouncy Castle Java forum on GitHub Discussions. We highly appreciate and value your input.
Report an issue
If you encounter any issues that require attention, feel free to report them in our GitHub repository.
Release notes
Find out detailed information about the latest release and search in older release notes.
Beta releases
The current working betas, when available, for the next release for JDK 1.8 and later can be found here. If you need a beta to be made available for another version of Java please ask by emailing: feedback-crypto@bouncycastle.org.
Donate to support the Bouncy Castle APIs
Supporting Bouncy Castle is now a substantial effort, the Java API is now over 300,000 lines, the C# one well past 140,000.
Bouncy Castle Java Downloads
The latest Bouncy Castle Java release is 1.80.
Except where otherwise stated, this software is distributed under the regular Bouncy Castle license. For full details of other licenses involved, see Third party licenses.
Distribution Files (JAR and ZIP format)
Compiled classes, sources and JavaDoc for Java 1.8 and later.
Note: the compiled jar files in this distribution are all multi-release, if you need a version specific to Java 1.8, we recommend using the JDK 1.5 to JDK 1.8 release.
Compiled classes, sources and JavaDoc for Java 1.5 to Java 1.8.
Compiled classes, sources and JavaDoc for Java 1.4.
Compiled classes, sources and JavaDoc for Java 1.3.
Compiled classes, sources and JavaDoc for Java 1.2.
Compiled classes, sources and JavaDoc for Java 1.1.
Checksums
To confirm the integrity of the distributions, checksums are available:
Maven Central Signing Key
If you are trying to confirm the signatures for artifacts from Maven Central, you can use the public key linked below.
Download bc_maven_public_key.asc
Release notes
Find out detailed information about the latest Bouncy Castle Java releases and search in older release notes.
14 January, 2025
Defects Fixed A splitting issue for ML-KEM led to an incorrect size for kemct in KEMRecipientInfos. This has been fixed. The PKCS12 KeyStore has been adjus...
Defects Fixed
- A splitting issue for ML-KEM led to an incorrect size for kemct in KEMRecipientInfos. This has been fixed.
- The PKCS12 KeyStore has been adjusted to prevent accidental doubling of the Oracle trusted certificate attribute (results in an IOException when used with the JVM PKCS12 implementation).
- The SignerInfoGenerator copy constructor was ignoring the certHolder field. This has been fixed.
- The getAlgorithm() method return value for a CompositePrivateKey was not consistent with the corresponding getAlgorithm() return value for the CompositePrivateKey. This has been fixed.
- The international property files were missing from the bcjmail distribution. This has been fixed.
- Issues with ElephantEngine failing on processing large/multi-block messages have been addressed.
- GCFB mode now fully resets on a reset.
- The lightweight algorithm contestants: Elephant, ISAP, PhotonBeetle, Xoodyak now support the use of the AEADParameters class and provide accurate update/doFinal output lengths.
- An unnecessary downcast in CertPathValidatorUtilities was resulting in the ignoring of URLs for FTP based CRLs. This has been fixed.
- A regression in the OpenPGP API could cause NoSuchAlgorithmException to be thrown when attempting to use SHA-256 in some contexts. This has been fixed.
- EtsiTs1029411TypesAuthorization was missing an extension field. This has been added.
- Interoperability issues with single depth LMS keys have been addressed.
Additional Features and Functionality
- CompositeSignatures now updated to draft-ietf-lamps-pq-composite-sigs-03.
- ML-KEM, ML-DSA, SLH-DSA, and Composite private keys now use raw encodings as per the latest drafts from IETF 121: draft-ietf-lamps-kyber-certificates-06, draft-ietf-lamps-dilithium-certificates-05, and draft-ietf-lamps-x509-slhdsa.
- Initial support has been added for RFC 9579 PBMAC1 in the PKCS API.
- Support has been added for EC-JPAKE to the lightweight API.
- Support has been added for the direct construction of S/MIME AuthEnvelopedData objects, via the SMIMEAuthEnvelopedData class.
- An override "org.bouncycastle.asn1.allow_wrong_oid_enc" property has been added to disable new OID encoding checks (use with caution).
- Support has been added for the PBEParemeterSpec.getParameterSpec() method where supported by the JVM.
- ML-DSA/SLH-DSA now return null for Signature.getParameters() if no context is provided. This allows the algorithms to be used with the existing Java key tool.
- HQC has been updated to reflect the reference implementation released on 2024-10-30.
- Support has been added to the low-level APIs for the OASIS Shamir Secret Splitting algorithms.
- BCJSSE: System property "org.bouncycastle.jsse.fips.allowGCMCiphersIn12" no longer used. FIPS TLS 1.2 GCM suites can now be enabled according to JcaTlsCrypto#getFipsGCMNonceGeneratorFactory (see JavaDoc for details) if done in alignment with FIPS requirements.
- Support has been added for OpenPGP V6 PKESK and message encryption.
- PGPSecretKey.copyWithNewPassword() now includes AEAD support.
- The ASCON family of algorithms have been updated in accordance with the published FIPS SP 800-232 draft.