-
Interfaces Interface Description org.bouncycastle.asn1.ASN1ApplicationSpecificParser org.bouncycastle.jcajce.provider.asymmetric.util.DSAEncoder No longer usedorg.bouncycastle.jce.interfaces.MQVPrivateKey use MQVParameterSpec for passing the ephemeral key.org.bouncycastle.jce.interfaces.MQVPublicKey use MQVParameterSpec for passing the ephemeral key.org.bouncycastle.pqc.crypto.xmss.XMSSStoreableObjectInterface use Encodableorg.bouncycastle.pqc.jcajce.interfaces.StateAwareSignature it's better to avoid this and use extractKeyShard methods where possible.org.bouncycastle.x509.X509AttributeCertificate use X509CertificateHolder class in the PKIX package.
-
Classes Class Description org.bouncycastle.asn1.ASN1ApplicationSpecific Will be removed. Change application code to handle asASN1TaggedObject
only, testing for the expectedtag class
ofBERTags.APPLICATION
in relevant objects before using. If using astream parser
, handle application-tagged objects usingASN1TaggedObjectParser
in the usual way, again testing for atag class
ofBERTags.APPLICATION
.org.bouncycastle.asn1.BERApplicationSpecific Will be removed. See comments forASN1ApplicationSpecific
.org.bouncycastle.asn1.BERApplicationSpecificParser org.bouncycastle.asn1.BERTaggedObjectParser Will be made non-public. Test for and use onlyASN1TaggedObjectParser
.org.bouncycastle.asn1.DERApplicationSpecific Will be removed. See comments forASN1ApplicationSpecific
.org.bouncycastle.asn1.DLApplicationSpecific Will be removed. See comments forASN1ApplicationSpecific
.org.bouncycastle.asn1.pkcs.RSAPrivateKeyStructure use RSAPrivateKeyorg.bouncycastle.asn1.sec.ECPrivateKeyStructure use ECPrivateKeyorg.bouncycastle.asn1.util.DERDump use ASN1Dump.org.bouncycastle.asn1.x509.RSAPublicKeyStructure use org.bouncycastle.asn1.pkcs.RSAPublicKeyorg.bouncycastle.asn1.x509.TBSCertificateStructure use TBSCertificateorg.bouncycastle.asn1.x509.X509CertificateStructure use org.bouncycastle.asn1.x509.Certificateorg.bouncycastle.asn1.x509.X509Extension use Extensionorg.bouncycastle.asn1.x509.X509Extensions useExtensions
org.bouncycastle.asn1.x509.X509ExtensionsGenerator use org.bouncycastle.asn1.x509.ExtensionsGeneratororg.bouncycastle.asn1.x509.X509Name use org.bouncycastle.asn1.x500.X500Name.org.bouncycastle.asn1.x509.X509NameTokenizer use X500NameTokenizerorg.bouncycastle.asn1.x9.DHDomainParameters use DomainParametersorg.bouncycastle.asn1.x9.DHValidationParms use ValidationParamsorg.bouncycastle.crypto.engines.AESFastEngine unfortunately this class is has a few side channel issues. In an environment where encryption/decryption may be closely observed it should not be used.org.bouncycastle.crypto.modes.PaddedBlockCipher use org.bouncycastle.crypto.paddings.PaddedBufferedBlockCipher instead.org.bouncycastle.crypto.params.CCMParameters use AEADParametersorg.bouncycastle.crypto.util.Pack use org.bouncycastle.util.packorg.bouncycastle.jcajce.BCFKSStoreParameter This class does not support configuration on creation, use BCFKSLoadStoreParameter for best results.org.bouncycastle.jcajce.provider.config.PKCS12StoreParameter use org.bouncycastle.jcajce.PKCS12StoreParameterorg.bouncycastle.jce.PKCS10CertificationRequest use classes in org.bouncycastle.pkcs.org.bouncycastle.jce.provider.JDKPKCS12StoreParameter use org.bouncycastle.jcajce.config.PKCS12StoreParameterorg.bouncycastle.jce.provider.X509CertificateObject Do not use this class directly - either use org.bouncycastle.cert (bcpkix) or CertificateFactory.org.bouncycastle.jce.provider.X509CertParser use CertificateFactory or the PEMParser in the openssl package (pkix jar).org.bouncycastle.jce.provider.X509CRLObject Do not use this class directly - either use org.bouncycastle.cert (bcpkix) or CertificateFactory.org.bouncycastle.jce.spec.GOST28147ParameterSpec use org.bouncycastle.jcajce.spec.GOST28147ParameterSpecorg.bouncycastle.jce.spec.RepeatedSecretKeySpec use super class org.bouncycastle.jcajce.spec.RepeatedSecretKeySpecorg.bouncycastle.jce.X509Principal use the X500Name class.org.bouncycastle.pqc.crypto.ntru.NTRUSigner the NTRUSigner algorithm was broken in 2012 by Ducas and Nguyen. See https://www.di.ens.fr/~ducas/NTRUSign_Cryptanalysis/DucasNguyen_Learning.pdf for details.org.bouncycastle.pqc.jcajce.spec.LMSHSSParameterSpec use LMSKeyGenParameterSpecorg.bouncycastle.pqc.jcajce.spec.LMSParameterSpec use LMSKeyGenParameterSpecorg.bouncycastle.pqc.math.linearalgebra.ByteUtils use org.bouncycastle.util.Arrays.org.bouncycastle.x509.AttributeCertificateHolder use org.bouncycastle.cert.AttributeCertificateHolderorg.bouncycastle.x509.AttributeCertificateIssuer use org.bouncycastle.cert.AttributeCertificateIssuerorg.bouncycastle.x509.ExtendedPKIXBuilderParameters use PKIXExtendedBuilderParametersorg.bouncycastle.x509.ExtendedPKIXParameters use PKIXExtendedParametersorg.bouncycastle.x509.extension.AuthorityKeyIdentifierStructure use JcaX509ExtensionUtils and AuthorityKeyIdentifier.getInstance()org.bouncycastle.x509.extension.X509ExtensionUtil use org.bouncycastle.cert.jcajce.JcaX509ExtensionUtilsorg.bouncycastle.x509.X509Attribute see X509CertificateHolder class in the PKIX package.org.bouncycastle.x509.X509AttributeCertStoreSelector use org.bouncycastle.cert.X509AttributeCertificateSelector and org.bouncycastle.cert.X509AttributeCertificateSelectorBuilder.org.bouncycastle.x509.X509CertStoreSelector use the classes under org.bouncycastle.cert.selectororg.bouncycastle.x509.X509Store use CollectionStore - this class will be removed.org.bouncycastle.x509.X509V1CertificateGenerator use org.bouncycastle.cert.X509v1CertificateBuilder.org.bouncycastle.x509.X509V2AttributeCertificate use org.bouncycastle.cert.X509AttributeCertificateHolderorg.bouncycastle.x509.X509V2CRLGenerator use org.bouncycastle.cert.X509v2CRLBuilder.org.bouncycastle.x509.X509V3CertificateGenerator use org.bouncycastle.cert.X509v3CertificateBuilder.