All pull requests

Pull requests

• Bump the gradle-dependencies group across 1 directory with 19 updates

  dependenciesjava
  #2465·dependabot[bot] opened Sep 24, 2026Bot·

  ·

• look up indirect CRL entries by issuer and serial number

  #2464·rootvector2 opened Sep 23, 2026Contributor·

  ·
  1

• Take the ITS explicit certificate signature choice from the content signer's curve

  #2463·Arpan0995 opened Sep 23, 2026Contributor·

  ·

• Compute the TupleHash element length prefix in long arithmetic and refuse a negative length

  #2462·Arpan0995 opened Sep 22, 2026Contributor·

  ·
  1

  

• PGPSessionKeyEncryptedData: Make Mister-Zuccherato prevention optional

  #2461·vanitasvitae opened Sep 22, 2026Contributor·

  ·
  1

  

• ERS: sort the hash lists once instead of inserting into a LinkedList by index

  #2457·dejmekradim opened Sep 21, 2026Contributor·

  ·
  1

  3

  

• Bump the gradle-dependencies group across 14 directories with 19 updates

  dependenciesjava
  #2453·dependabot[bot] opened Sep 17, 2026Bot·

  ·

• Fix Grain-128AEAD streamed decryption writing its second output segment over the first

  #2447·Arpan0995 opened Sep 14, 2026Contributor·

  ·
  1

  

• Unwrap the RFC 9709 content-encryption algorithm at every CMS recipient key-size and policy check

  #2446·Arpan0995 opened Sep 14, 2026Contributor·

  ·
  1

  

• Zeroize a copy of the card user PIN in the YubiKey decryptor factories, not the provider's array

  #2444·Arpan0995 opened Sep 14, 2026Contributor·

  ·
  1

  

• Add CRMF ProtocolEncrKeyControl support

  #2443·sfeng-c opened Sep 14, 2026Contributor·

  ·
  1

  

• DTLS 1.3 post-handshake: KeyUpdate, NewSessionTicket and ACKs (RFC 9147), part 4 of 4; closes #1468

  #2442·mondain opened Sep 12, 2026·

  ·
  1

  3

  

• DTLS 1.3 client and server handshakes (RFC 9147), part 3 of 4 for #1468

  #2441·mondain opened Sep 12, 2026·

  ·
  3

  

• DTLS 1.3 reliable handshake (RFC 9147 sections 5.8 and 7), part 2 of 4 for #1468; closes #1487

  #2440·mondain opened Sep 12, 2026·

  ·
  

• DTLS 1.3 record layer (RFC 9147 section 4), part 1 of 4 for #1468

  #2439·mondain opened Sep 11, 2026·

  ·
  

• Register the NTRU Prime and NTRU+ KEM OIDs in loadPQCKeys so their keys decode through the BC provider

  #2438·Arpan0995 opened Sep 11, 2026Contributor·

  ·
  

• OpenPGP Smart Card Signature Support

  #2430·vanitasvitae opened Sep 8, 2026Contributor·

  ·
  6

  

• Bump Checkstyle from 9.0 to 14.0.0

  #2423·guptas6est opened Sep 4, 2026·

  ·

• CI: Add automated PQCA CBOM (Cryptography Bill of Materials) generation

  #2370·xaexaex opened Jul 22, 2026·

  ·

• add six new SLH-DSA parameter sets from NIST SP 800-230

  #2292·chen-cht opened May 5, 2026·

  ·
  2

  

• Make KEM abstract methods protected to allow external subclassing

  #2290·jmcrawford45 opened Apr 30, 2026Contributor·

  ·
  1

  

• Add support for simplified component binding signature history evaluation

  #2262·vanitasvitae opened Feb 24, 2026Contributor·

  ·

• Make negotiated group in SecurityParameters available from SSLEngine

  #2215·theobisproject opened Dec 15, 2025·

  ·

• OpenPGPKey.join()

  #2170·vanitasvitae opened Sep 27, 2025Contributor·

  ·

• TLS: Initial work on draft-kwiatkowski-tls-ecdhe-mlkem-03

  #1996·yuhh0328 opened Feb 14, 2025Contributor·

  ·