02 Jan 23:45

cconlon

cc9f5f6

wolfCrypt JNI and JCE Provider 1.9.0 Latest

Latest

To download the release bundle of wolfCrypt JNI/JCE visit the download page at www.wolfssl.com/download/

Release 1.9.0 of wolfCrypt JNI and JCE has bug fixes and new features including:

New JCE Functionality:

Add KeyGenerator implementation (AES, HmacSHA1, HmacSHA256, HmacSHA384, HmacSHA512) (PR 98)
Add SHA-224 support to MessageDigest, Mac, Signature, KeyGenerator (PR 104)
Add SHA-3 support to MessageDigest, Mac, Signature (PR 103)
Add utility method to convert JKS/PKCS12 KeyStore to WKS type (PR 108)
Add more AES mode support to Cipher class (PR 129, 163, 173):
- AES/CCM/NoPadding
- AES/CTR/NoPadding
- AES/ECB/NoPadding
- AES/ECB/PKCS5Padding
- AES/OFB/NoPadding
- AES/CTS/NoPadding
Add AESCMAC (AES-CMAC), AESGMAC (AES-GMAC) to Mac class (PR 129)
Add RSA-PSS support to Signature class (PR 131):
- RSASSA-PSS
- SHA224withRSA/PSS
- SHA256withRSA/PSS
- SHA384withRSA/PSS
- SHA512withRSA/PSS
Add Cipher.engineGetParameters() support (PR 140)
Add Cipher generic AES type support (PR 142)
Add AES and GCM support to AlgorithmParameters class (PR 144)
Add HmacSHA3 support to KeyGenerator class (PR 150):
- HmacSHA3-224
- HmacSHA3-256
- HmacSHA3-384
- HmacSHA3-512
Add toString() to WolfCryptRandom, used when printing SecureRandom object (PR 154)
Add additional ECC algorithm OIDs to Signature and KeyPairGenerator classes (PR 158)
Add EC KeyFactory support (PR 159)
Add P1363 ECDSA signature formats to Signature class (PR 160)
Add DH support to AlgorithmParameter, AlgorithmParameterGenerator, and KeyFactory classes (PR 161)
Add AES and 3DES support to SecretKeyFactory and SecretKey classes (PR 164)
Add additional AES and Hmac algorithm aliases to Cipher and Mac classes (PR 166)
Add Java ServiceLoader support for wolfJCE provider for Java Module System (JPMS) compatibility (PR 167)
Add RSA KeyFactory support (PR 169)
Add MessageDigest OID alias values for SHA-224/256/384/512 (PR 170)
Add PSS parameter encoding support in WolfCryptPSSParameters class (PR 175)
Add engineProbe() implementation to WolfSSLKeyStore (PR 178)
Add optional KEK caching to WolfSSLKeyStore for performance (PR 176)
Add RSASSA-PSS key support to WolfSSLKeyStore (PR 180)

JNI and JCE Changes:

Fix Cipher.getOutputSize() for AES/GCM/NoPadding in DECRYPT mode (PR 107)
Dynamically get algorithm and key ASN enum values from wolfSSL (PR 111)
Dynamically get hash OID sums from wolfSSL (PR 124)
Fix max secret size in DH agreement (PR 123)
Fix potential JNI-level ECC issues (PR 117)
Fix build issues with older wolfSSL and FIPS build variants (PR 133)
Fix AES-CTR IV consistency across state resets (PR 136)
Fix for using buffered data in Cipher.engineGetOutputSize() (PR 138)
Throw AEADBadTagException on AES-GCM decrypt failure (PR 139)
Fix Cipher.engineInit() with null parameters (PR 141)
Throw correct InvalidAlgorithmParameterException from Cipher.init() on unsupported mode (PR 143)
Fix for PKCS#7 pad/unpad operations in Cipher (PR 146)
Fix expected output size for Cipher decrypt related to pad size (PR 147)
Fix AES-GCM Cipher edge case to allow for null input or output arrays (PR 145)
Improve Cipher input validation, output buffer sizing, update behavior (PR 148)
Fix MessageDigest parameter validation (PR 149)
Fix ArrayIndexOutOfBoundsException in Cipher AES-GCM/CCM with zero-length plaintext (PR 151)
Throw exception if RSA PrivateKey does not include CRT parameters (PR 153)
Throw IllegalArgumentException from WolfCryptRandom.engineGenerateSeed() on bad input values (PR 152)
Set default key and parameter sizes in KeyPairGenerator if not explicitly set (PR 155)
Fix ECC KeyPairGenerator bits to bytes conversion (PR 157)
Check RSA key size used against min allowed in KeyPairGenerator (PR 162)
Fix SecretKey decryption to use stored PBKDF2 iteration count in WKS (PR 168)
Remove synchronization on some WolfSSLKeyStore methods (PR 165)
Validate EC key sizes in KeyPairGenerator.initialize() (PR 174)
Improvements to PKIXCertPathValidator with OCSP revocation checking, disabled algorithm validation, and more (PR 177, 178)

Debugging Changes:

Switch to use Java logging (java.util.logging) framework for debug logs (PR 110)
Refresh debug flags when WolfCryptProvider is loaded (PR 135)
Switch debug log timestamp to use Java Instant.ofEpochMilli(), remove dependency on java.sql.Timestamp (PR 137)

Example Changes:

Add RSA key generation to wolfJCE benchmark app (PR 95)
Add ECC and ECDH to wolfJCE benchmark app (PR 99, 116)
Add HMAC benchmark to wolfJCE benchmark app (PR 100)
Add DH benchmarks to wolfJCE benchmark app (PR 102)
Add PBKDF2 benchmark to wolfJCE benchmark app (PR 105)
Add MessageDigest benchmark to wolfJCE benchmark app (PR 106)
Add Signature benchmark to wolfJCE benchmark app (PR 109)
Add SHA-3 ciphers to HMAC benchmark in wolfJCE benchmark app (PR 113)
Add KeyGenerator benchmark to wolfJCE benchmark app (PR 115)
Add SecureRandom benchmark to wolfJCE benchmark app (PR 120)
Add KeyStore benchmark example app for WKS/JKS/PKCS12 (PR 118)
Add individual algorithm category options to wolfJCE benchmark app (PR 121)

Testing Changes:

Add GitHub Actions PRB test for AddressSanitizer (-fsanitize=address) builds (PR 119)
Add GitHub Actions PRB tests for coding style (line length, comment style) (PR 126, 127)
Add GitHub Actions PRB test for Clang scan-build static analysis (PR 128)
Add GitHub Actions PRB test for Visual Studio builds on Windows (PR 130)
Add GitHub Actions PRB test to build against last 5 stable wolfSSL releases (PR 181)
Add GitHub Actions PRB test to run unit tests on Android emulator (PR 183)
Output time taken in ms per JUnit test when ant test is run (PR 171)
JUnit test performance improvements (PR 172)

Misc Changes:

Clean up IDE warnings in Cursor and VSCode (PR 101)
Add CLAUDE.md for consumption by Claude Code (PR 122)

The wolfCrypt JNI/JCE Manual is available at:
https://www.wolfssl.com/documentation/manuals/wolfcryptjni/. For build instructions and more details comments, please check the manual.

Assets 3

23 Jan 21:13

cconlon

v1.8.0-stable

2eeb8f1

wolfCrypt JNI and JCE Provider 1.8.0

To download the release bundle of wolfCrypt JNI/JCE visit the download page at www.wolfssl.com/download/

Release 1.8.0 of wolfCrypt JNI and JCE has bug fixes and new features including:

New JCE Functionality:

Add Java security property support for mapping JKS/PKCS12 to WKS type (PR 83)

JNI and JCE Changes:

Run FIPS CASTs once up front to prevent threaded app errors (PR 84, 91)

Example Changes:

Define WOLFSSL_CUSTOM_CONFIG in Android Studio project builds (PR 85)
Add basic JCE cryptography benchmark app (PR 88, 89, 93, 94)

Testing Changes:

Add GitHub Action testing Maven (pom.xml) build on macOS and Linux (PR 82)

The wolfCrypt JNI/JCE Manual is available at:
https://www.wolfssl.com/documentation/manuals/wolfcryptjni/. For build instructions and more details comments, please check the manual.

Assets 3

11 Nov 22:26

cconlon

v1.7.0-stable

b75d8aa

wolfCrypt JNI and JCE Provider 1.7.0

To download the release bundle of wolfCrypt JNI/JCE visit the download page at www.wolfssl.com/download/

Release 1.7.0 of wolfCrypt JNI and JCE has bug fixes and new features including:

New JCE Functionality:

New WolfSSLKeyStore (WKS) KeyStore implementation for FIPS 140-2/3 compliance (PR 67)

JNI and JCE Changes:

Remove call to BigInteger.longValueExact(), not available on some Java versions (PR 76)
Detect RSA_MIN_SIZE in tests, add Rsa.RSA_MIN_SIZE helper (PR 77)
Fix pointer use in native X509CheckPrivateKey() (PR 80)

Example Changes:

Set keytool path correctly in system-cacerts-to-wks.sh (PR 78)
Add example Android Studio project (IDE/Android) (PR 79)

Testing Changes:

Run Facebook Infer on pull requests with GitHub Actions (PR 74)
Add Android Gradle build with GitHub Actions to run on all pull requests (PR 79)

The wolfCrypt JNI/JCE Manual is available at: https://www.wolfssl.com/documentation/manuals/wolfcryptjni/. For build instructions and more details comments, please check the manual.

Assets 3

19 Apr 22:25

cconlon

v1.6.0-stable

e25d43d

wolfCrypt JNI and JCE Provider 1.6.0

Release 1.6.0 of wolfCrypt JNI and JCE has bug fixes and new features including:

New JCE Functionality:

Add RSA support to KeyPairGenerator class (PR 49)
Add AES/CBC/PKCS5Padding support to Cipher class (PR 51)
Add RSA support to Cipher class (PR 51)
Add PKIX implementation of CertPathValidator class (PR 60, 66)
Add SHA1 alias for MessageDigest SHA-1 for interop compatibility (PR 61)
Add AES/GCM/NoPadding support to Cipher class (PR 62)
Add SecretKeyFactory implementation supporting PBKDF2 (PR 70)
Add DEFAULT support to SecureRandom class (PR 72)

New JNI Wrapped APIs and Functionality:

Add AES-GCM support to com.wolfssl.wolfcrypt.AesGcm class (PR 62)

JNI and JCE Changes:

Add synchronization to com.wolfssl.wolfcrypt.Rng class (PR 44)
Correct preprocessor guards for 3DES with wolfCrypt FIPS (PR 47)
Correct order of operations in wc_CreatePKCS8Key() JNI wrapper API (PR 50)
Add synchronization around native structure pointer use (PR 53)
Remove inclusion of CyaSSL header includes, switch to wolfSSL (PR 56)
Call PRIVATE_KEY_LOCK/UNLOCK() for wolfCrypt FIPS 140-3 compatibility (PR 57)
Improve native HMAC feature detection (PR 58)
Prepend zero byte to DH shared secret if less than prime length (PR 69)
Add synchronization to protected methods in WolfCryptSignature (PR 68)
Add synchronization to public methods of WolfCryptKeyPairGenerator (PR 73)
Only allocate one Rng object per WolfCryptSignature, not per sign operation (PR 73)
Reduce extra WolfCryptRng object creation in Signature and KeyPairGenerator (PR 73)

New Platform Support:

Add Windows support with Visual Studio, see IDE/WIN/README.md (PR 46)

Build System Changes:

Support custom wolfSSL library prefix and name in makefile.linux (PR 45)
Standardize JNI library name on OSX to .dylib (PR 54)
Update Maven build support (PR 55)

Example Changes:

Print provider of SecureRandom from ProviderTest.java (PR 43)
Add Windows batch script to run ProviderTest example (PR 52)

Testing Changes:

Add extended threading test for WolfCryptRandom class (PR 44)
Add Facebook Infer test script, make fixes (PR 48, 63)
Add GitHub Actions tests for Oracle/Zulu/Coretto/Temurin/Microsoft JDKs on Linux and OS X (PR 65)

Documentation Changes:

Remove build instructions from README.md for FIPS historical cert #2425 (PR 56)
Fix Javadoc warnings for Java 21 and 22 (PR 71)

The wolfCrypt JNI/JCE Manual is available at:
https://www.wolfssl.com/documentation/manuals/wolfcryptjni/. For build
instructions and more details comments, please check the manual.

Assets 3

13 Jan 19:05

cconlon

v1.5.0-stable

2016cb2

wolfCrypt JNI and JCE Provider 1.5.0

Release 1.5.0 of wolfCrypt JNI has bug fixes and new features including:

Add build compatibility for Java 7 (PR 38)
Add support for "SHA" algorithm string in wolfJCE (PR 39)
Add rpm package support (PR 40)
Add wolfJCE MessageDigest.clone() support (PR 41)
Improve error checking of native Md5 API calls (PR 41)
Add unit tests for com.wolfssl.wolfcrypt.Md5 (PR 41)

Assets 3