Skip to main content
3,203 questions
Newest Active Bountied Unanswered
Filter by
Sorted by
Tagged with
Advice
0 votes
2 replies
175 views

I have a .Net 4.8.1 project and want to add a method for enrypt/decryp using AES-GCM. Since .Net 4.8.1 does not support inbuilt AES-GCM, I used BouncyCastle.Cryptography (v2.6.2) library for this and ...
nuwancy's user avatar
  • 391
0 votes
0 answers
65 views

I'm trying to create a XAdES signature with Bouncy Castle and C#. Schema for version 1.3.2 requires signing certificate's issuer name on this XPath: /ds:Signature/ds:Object/xades:QualifyingProperties/...
azur3's user avatar
  • 63
0 votes
0 answers
80 views

I have stopped being able to run instrumented tests on Android Studio. They were working fine for weeks. But now even the simplest instrumented test will result in this error, in Build Output: :app:...
John Gorenfeld's user avatar
  • 2,475
-1 votes
0 answers
56 views

I downloaded the latest version of WinGPG, encrypted a file using an RSA 2048 key, and then attempted to decrypt it using the BouncyCastle.Cryptography 2.6.2 nuget package. It fails with System.IO....
Shane's user avatar
  • 119
0 votes
0 answers
81 views

I'm trying to improve my document signing process using PKCS11, but I'm having a problem. No matter how many attempts I made, I could not resolve the relevant error. Net.Pkcs11Interop.Common....
Halil İbrahim AYHAN's user avatar
  • 11
0 votes
1 answer
110 views

I am using several third party libs which have dependencies to various bouncycastle libraries. Here some examples: bcpkix-jdk18on bcprov-jdk15to18 bcprov-lts8on bcutil-lts8on ... After updating one ...
Bastian's user avatar
  • 403
0 votes
0 answers
91 views

I have a web service that returns a Timestamp Token as a base64 string, I have this code in Java using BouncyCastle to parse, open and extract the date: String timestamp = "..."; byte[] ...
Alfredo Morales's user avatar
  • 143
3 votes
1 answer
244 views

I have a text which I am encrypting using Java's Bouncy Castle AES/GCM utility. package com.stackoflow.symmetric_token_decryptor; import static org.apache.commons.codec.binary.Hex.encodeHex; ...
ashtrix-001's user avatar
  • 434
0 votes
0 answers
231 views

After upgrading BouncyCastle dependencies from: org.bouncycastle:bc-fips:2.0.0 → 2.1.0 org.bouncycastle:bctls-fips:2.0.19 → 2.1.20 I started encountering issues when using the Ktor CIO client engine. ...
Kamil Kurek's user avatar
  • 1
1 vote
1 answer
88 views

Since some packages are not available in higher versions of JDK, I am looking for an alternative to implement apk or jar signing (V1). Source: https://github.com/appium-boneyard/sign/blob/master/src/...
lalaki's user avatar
  • 21
1 vote
1 answer
198 views

Is there a standard way to validate an Ed25519 public key (check that it's really a point on the curve and not some random bytes) using the standard Java Crypto APIs and/or BouncyCastle? I found a ...
algrid's user avatar
  • 6,034
2 votes
1 answer
274 views

We have a target Java codebase responsible for decrypting an incoming payload. The payload is being encrypted within a .NET Core isolated Azure Function before being sent to the endpoint where the ...
Ayan Panjal's user avatar
  • 29
2 votes
1 answer
290 views

I have a query regarding the use of the Bouncy Castle library for post-quantum cryptography (PQC) in my Spring Boot application. I am using Java version 21, Bouncy Castle version 1.80, which supports ...
harish balaji's user avatar
  • 51
0 votes
1 answer
82 views

Implementing openssl command openssl rsautl -sign -in rasi.bin -inkey riktest.key -out allkiri.bin is based on code from answer Converting Openssl signing to .NET6 using Org.BouncyCastle.Crypto; ...
Andrus's user avatar
  • 28.3k
0 votes
1 answer
55 views

I have a java web project which includes lo4j2. It is deploy on tomcat instance locally on my PC. I was debugging the java project. When debugger is on the instruction of Certificate class contructor ...
user3637971's user avatar
  • 335
0 votes
1 answer
209 views

Tried to implement openssl command openssl rsautl -sign -in rasi.bin -inkey riktest.key -out allkiri.bin using BouncyCastle 2.6.0 Nuget package with code from Converting Openssl signing to .NET6 ...
Andrus's user avatar
  • 28.3k
0 votes
0 answers
69 views

I created a certificate with keystore type BCFKS using bc-fips-1.0.2.5.jar and Azul Zulu Java 17. The content is shown correctly in the keystore file: I am trying to enable TLS in tomcat/conf/server....
Pravin Nawale's user avatar
  • 21
1 vote
0 answers
53 views

I'm encountering a frustrating dependency conflict in my ASP.NET Core 7 application involving different versions of BouncyCastle, and standard resolution techniques like binding redirects don't seem ...
Luke Puplett's user avatar
  • 45.9k
-3 votes
2 answers
306 views

I was trying to decrypt a JSON request with a key, hex and textbody but all the codes I found are from 2013 - 2017. I tried using this one namespace AES { using System.IO; using System; ...
Ndifreke James Okpo's user avatar
  • 127
0 votes
0 answers
51 views

I have a problem connecting with connecting to a Rabbit queue... Unfortunately this is a very old project and it has to be run on Java 1.6. this is my class: import com.rabbitmq.client.Channel; import ...
Mateusz Niedbal's user avatar
  • 346
0 votes
0 answers
41 views

I have a legacy project running on .NET Framework 4.5, and we recently encountered issues because HttpClient relies on Windows for HTTPS connections. Is there an alternative HttpMessageHandler that ...
Max Bündchen's user avatar
  • 1,416
2 votes
1 answer
461 views

Step 1: generate Ed25519 key, signature and verify using OpenSSL openssl version REM output: OpenSSL 3.3.2 3 Sep 2024 (Library: OpenSSL 3.3.2 3 Sep 2024) REM Generate private key openssl genpkey -...
phibao37's user avatar
  • 2,412
0 votes
0 answers
60 views

I am adding digital signatures using certificates on PDFs, there is a property SignatureOptions.PreferredSignatureSize which accepts the preferred signature size, however the values varies for ...
Vikash Yadav's user avatar
  • 813
0 votes
1 answer
517 views

Recently upgraded oracle drivers from ojdbc8 to ojdbc17 and ucp17.jar, for tocmat server where a Java17 based application is deployed. But the database connection now showing following error. Other ...
YS_NE's user avatar
  • 346
0 votes
2 answers
57 views

In grails 2.x version, the bouncy castle provided by the grails itself is present in the runtime environment. Since the bc library in part of grail lib, is it possible to overwrite with latest bc ...
Janardhan Bonu's user avatar
  • 1
0 votes
1 answer
151 views

I want to verify X.509 Certificates (if they were revoked) using the OCSP Protocol and Java/Kotlin. As this is a non trivial task I use Java Security together with the Bouncy Castle Crypto lib. When I ...
Oliver's user avatar
  • 362
1 vote
0 answers
72 views

I’ve been working with the Bouncy Castle library for encrypting and decrypting my data using a subkey (designated as E) for encryption. However, I have a few specific concerns that I’d like some ...
Hiep To's user avatar
  • 11
0 votes
0 answers
189 views

I'm trying to make my Spring Boot microservices FIPS 10-3 compliant, which led me to Bouncycastle as the security providers. I have a basic Spring Boot application created with Spring initializr which ...
lopushen's user avatar
  • 1,147
0 votes
0 answers
60 views

I am getting below exception when trying to decrypt pgp message in Java 11 Caused by: java.lang.SecurityException: JCE cannot authenticate the provider BC And we are using below bouncycastle ...
Chennai Cheetah's user avatar
  • 363
0 votes
0 answers
93 views

Currently we did migration from java 1.8 to java 11. During migration we are facing below decrypting pgp message issue in one of the application. Caused by: org.bouncycastle.crypto....
Chennai Cheetah's user avatar
  • 363
1 vote
1 answer
53 views

I am working with iText 8.0.4 (GitHub Repository) and trying to cast IBasicOCSPResponse (from com.itextpdf.signatures) to IBasicOCSPResp (from com.itextpdf.commons.bouncycastle.cert.ocsp). This is ...
blinkbink's user avatar
  • 119
1 vote
1 answer
396 views

I would like to use Bouncy Castle as a security provider within GraalVM. However, this approach leads to a com.oracle.svm.core.jdk.UnsupportedFeatureError: Trying to verify a provider that was not ...
Harry Developer's user avatar
  • 572
0 votes
1 answer
184 views

I'm trying to establish a TLS 1.2 connection to a server that requires 1.2 connection with renegotiation. I have no control over the server. Using bouncycastle and android 11, I keep getting the ...
user3429974's user avatar
  • 3
2 votes
1 answer
542 views

I would like to create and store my own root certificate on a smart card using the P-256 ECDSA encryption algorithm (secp256r1). I managed to open access to the certificates created so far on the card ...
Marogo's user avatar
  • 45
0 votes
0 answers
36 views

I need to connect to a service that request SSLMA (SSL Mutual Authentication using Apache HttpClient 4.5 and BouncyCastle. I managed to prepare the SSLConnectionSocketFactory instance (see code) but ...
user1391606's user avatar
  • 135
1 vote
1 answer
118 views

I'm trying to generate a Certificate Signing Request (CSR) using Bouncy Castle in CFML/Lucee. The CSR needs to include Subject Alternative Names (SANs) for both DNS names and IP addresses. However, I'...
George Murphy's user avatar
  • 1,107
1 vote
1 answer
211 views

MOTIVATION I am trying to use latest PDFBOX 3 to sign pdf documents. RIG Windows machine with java23 CERTIFICATES I have created domain certificates with certbot 2.9.0 and openssl-3.0.7 in jks, p12 ...
Tugalsan Karabacak's user avatar
  • 753
0 votes
0 answers
32 views

My current solution is to use the shade-maven-plugin,but there is an error. java.security.NoSuchAlgorithmException: Cannot find any provider supporting SM4/CBC/PKCS7Padding For example, my case is : ...
wcf's user avatar
  • 1
0 votes
0 answers
80 views

I'm trying to create a CMC message wrapped inside CMS to feed MS ADCS service with a certificate request. We're trying to fulfill the specification (WCCE - 2.2.2.6.5 Null Signature and WCCE - 3.1.1.4....
Andreas F.'s user avatar
  • 11
1 vote
1 answer
132 views

I need to sign a 32byte message with an Ed25519PrivateKey. The signed message is verified by an embedded controller. Therefore, I need to match the implementation of this controller. The requirement ...
Raynigon's user avatar
  • 701
0 votes
0 answers
59 views

We are currently using the Snowflake JDBC FIPS driver in a non-FIPS environment. The reason for this choice is to simplify maintenance, as managing different drivers for various environments can be ...
rakesh singh's user avatar
  • 161
0 votes
0 answers
62 views

please look my android code about verify signature using bouncycastle. condition: have one cms file and root.crt, use root.crt verify cms file. first use:openssl smime -verify -CAfile root.crt -in ...
刘顺江's user avatar
  • 11
0 votes
0 answers
70 views

I'm encountering an issue while verifying a TSD (Timestamped Digital Signature) file named nameFile.pdf.tsd using the DSS (Digital Signature Service) library version 5.13. I previously encountered ...
Rony Robin's user avatar
  • 1
0 votes
2 answers
240 views

I'm on Mac and I've created and exported a key: % gpg --generate-key % gpg --export --armor --output new.pub B42B1AF5 the contents of which you can see here: -----BEGIN PGP PUBLIC KEY BLOCK----- ...
Sahand's user avatar
  • 8,450
0 votes
2 answers
406 views

I have a pkcs12 file that contains a public and private key pair that I created using openssl. My Java program reads in the pcks12 file and saves the public and private keys separately for use by the ...
ogionnj's user avatar
  • 1
0 votes
0 answers
141 views

For compliance reasons, we have to use the FIPS version of BouncyCastle, available from here: https://www.bouncycastle.org/download/bouncy-castle-c-fips/#latest However we also use other libraries, ...
Red Riding Hood's user avatar
  • 2,654
0 votes
2 answers
299 views

Given this randomly generated ECDSA private key: -----BEGIN OPENSSH PRIVATE KEY----- b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAaAAAABNlY2RzYS ...
Gili's user avatar
  • 90.9k
0 votes
1 answer
248 views

I am encountering a javax.crypto.AEADBadTagException: mac check in GCM failed error when attempting to decrypt data using AES in GCM mode with BouncyCastle. The error occurs during the AES decryption ...
Sisodiya Mahipalsing's user avatar
  • 3
0 votes
0 answers
69 views

I am working with CMS (Cryptographic Message Syntax) envelopes in Java and need to extract the encrypted key and encrypted content from a CMSEnvelopedData object using the BouncyCastle library. ...
Sisodiya Mahipalsing's user avatar
  • 3
0 votes
1 answer
1k views

I was trying to learn AES GCM from (https://asecuritysite.com/bouncy/bc_gcm). Although the site does a nice job combining the code all in one. I was trying to break it out and make it a function (GCM ...
DemarcPoint's user avatar
  • 199

1
2 3 4 5
…
65