All Classes

This class provides some default behavior and common implementation for a X500NameStyle.

A cipher mode that includes authenticated encryption with a streaming mode and optional associated data.

ParameterSpec for AEAD modes which allows associated data to be added via an algorithm parameter spec.In normal circumstances you would only want to use this if you had to work with the pre-JDK1.7 Cipher class as associated data is ignored for the purposes of returning a Cipher's parameters.

PBEWithMD5And128BitAES-OpenSSL

PBEWithMD5And256BitAES-OpenSSL

PBEWithSHA256AES-CBC

PBEWithSHA256And192BitAES-BC

PBEWithSHA1And128BitAES-BC

PBEWithSHA1And256BitAES-BC

an implementation of the AES (Rijndael), from FIPS-197.

test vectors based on NIST Special Publication 800-38A, "Recommendation for Block Cipher Modes of Operation"

basic test class for the AES cipher vectors from FIPS-197

an implementation of the AES Key Wrapper from the NIST Key Wrap Specification.

This is a test harness I use because I cannot modify the BC test harness without invalidating the signature on their signed provider library.

General JCA/JCE utility methods.

ANSSI Elliptic curve table.

PBEWithSHAAnd128BitRC4

PBEWithSHAAnd40BitRC4

Implementation of the Archive Timestamp type defined in RFC4998.

Implementation of ArchiveTimeStampSequence type, as defined in RFC4998.

Tests from https://tools.ietf.org/html/draft-irtf-cfrg-argon2-03

RFC 5794.

basic test class for the ARIA cipher vectors from FIPS-197

Iterator backed by a specific array.

Interface to parse ASN.1 ApplicationSpecific objects.

Public facade of ASN.1 Boolean data.

Utility class for dumping ASN.1 objects as (hopefully) human friendly strings.

Mutable class for building ASN.1 constructed objects such as SETs or SEQUENCEs.

Class representing the ASN.1 ENUMERATED type.

Class representing the DER-type External

Basic class for streaming generators.

Class representing the ASN.1 INTEGER type.

A NULL object - use DERNull.INSTANCE for populating structures.

Class representing the ASN.1 OBJECT IDENTIFIER type.

A basic parser for an OCTET STRING object

Exception thrown when correctly encoded, but unexpected data is found in a stream while building an object.

ASN.1 SEQUENCE and SEQUENCE OF constructs.

A basic parser for a SET object

General interface implemented by ASN.1 STRING objects for extracting the content String.

Interface for the parsing of a generic tagged ASN.1 object.

- * UTC time object.

base interface that a public/private key block cipher needs to conform to.

interface that a public/private key pair generator should conform to.

Base class for unit tests of AsymmetricHybridCiphers.

RFC 5652: Attribute is a pair of OID (as type identifier) + set of values.

This is helper tool to construct Attributes sets.

AttrOrOID ::= CHOICE (oid OBJECT IDENTIFIER, attribute Attribute }

Parse AuthenticatedData stream.

RFC 5083: CMS AuthEnveloped Data object.

The AuthorityInformationAccess object.

A streaming Base64 encoder.

The basic interface that basic Diffie-Hellman implementations conforms to.

An EntropySourceProvider where entropy generation is based on a SecureRandom output using SecureRandom.generateSeed().

OCSP RFC 2560, RFC 6960

Represent two kind of GOST34.10 2012 PublicKeys: with 256 and 512 size

Exercise the BCFKS KeyStore,

A JCA/JCE helper that refers to the BC provider for all it's needs.

This class implements a McEliece CCA2 public key and is usually instantiated by the McElieceCCA2KeyPairGenerator or McElieceCCA2KeyFactorySpi.

This class implements a McEliece public key and is usually instantiated by the McElieceKeyPairGenerator or McElieceKeyFactorySpi.

Object Identifiers belonging to iso.org.dod.internet.private.enterprise.legion-of-the-bouncy-castle (1.3.6.1.4.1.22554)

The Private key in Rainbow consists of the linear affine maps L1, L2 and the map F, consisting of quadratic polynomials.

A provider representation for a RSA private key, with CRT factors included.

BDS.

An indefinite-length encoding version of an ASN.1 ApplicationSpecific object.

Base class for generators for indefinite-length structures.

A generator for indefinite-length OCTET STRINGs

Indefinite length SEQUENCE of objects.

Parser for indefinite-length SEQUENCEs.

Parser for indefinite-length SETs.

Parser for indefinite-length tagged objects.

BigInteger utilities.

Extended Euclidean Algorithm in BigIntegers

A polynomial with BigInteger coefficients.
Some methods (like add) change the polynomial, others (like mult) do not but return the result as a new polynomial.

FIXME: is this really necessary?!

The BiometricData object.

Implementation of the cryptographic hash function Blakbe2b.

Implementation of the cryptographic hash function BLAKE2s.

Implementation of the eXtendable Output Function (XOF) BLAKE2xs.

Block cipher engines are expected to conform to this interface.

a basic test that takes a cipher, key parameter, and an input and output string.

basic test class for a block cipher, basically this just exercises the provider, and makes sure we are behaving sensibly, correctness of the implementation is shown in the lightweight test classes.

blowfish tester - vectors from https://www.counterpane.com/vectors.txt

Test the creation of BodyPartListTest and encoding and decoding.

To add the provider at runtime use:

PBEWithMD5AndDES

PBEWithSHAAnd2-KeyTripleDES-CBC

OldPBEWithSHAAnd3-KeyTripleDES-CBC

Generator for PBE derived keys and ivs as defined by IEEE P1363a
This implementation is based on draft 9 of IEEE P1363a.

uses the appropriate mixer to generate the key and IV if neccessary.

a buffer wrapper for an asymmetric block cipher, allowing input to be accumulated in a piecemeal fashion until final processing.

A buffering class to allow translation from one format to another to be done in discrete chunks.

An output stream that buffers data to be feed into an encapsulated output stream.

Camellia - based on RFC 3713, smaller implementation, about half the size of CamelliaEngine.

Camellia tester - vectors from https://www.cosic.esat.kuleuven.be/nessie/testvectors/ and RFC 3713

An implementation of the Camellia key wrapper based on RFC 3657/RFC 3394.

cast tester - vectors from https://www.ietf.org/rfc/rfc2144.txt

cast6 tester - vectors from https://www.ietf.org/rfc/rfc2612.txt

standard CBC Block Cipher MAC - if no padding is specified the default of pad of zeroes is used.

RFC 5084: CCMParameters object.

First four test vectors from NIST Special Publication 800-38C.

ISIS-MTT PROFILE: The responder may include this extension in a response to send the hash of the requested certificate to the responder.

an X509Certificate structure.

class for dealing with X509 certificates.

This class helps to support crossCerfificatePairs in a LDAP directory according RFC 2587

CertificationRequest ::= SEQUENCE { certificationRequestInfo SEQUENCE { version INTEGER, subject Name, subjectPublicKeyInfo SEQUENCE { algorithm AlgorithmIdentifier, subjectPublicKey BIT STRING }, attributes [0] IMPLICIT SET OF Attribute }, signatureAlgorithm AlgorithmIdentifier, signature BIT STRING }

PKCS10 CertificationRequestInfo object.

CertPolicyId, used in the CertificatePolicies and PolicyMappings X509V3 Extensions.

implements a Cipher-FeedBack (CFB) mode on top of a simple cipher.

Implementation of Daniel J.

ChaCha Test

Interface for a converter that produces a byte encoding for a char array.

Factory methods for creating Cipher objects and CipherOutputStreams.

A CipherInputStream is composed of an InputStream and a cipher so that read() methods return data that are read in from the underlying InputStream but have been additionally processed by the Cipher.

The base class for symmetric, or secret, cipher key generators.

A CipherOutputStream is composed of an OutputStream and a cipher so that write() methods process the written data with the cipher, and the output of the cipher is in turn written to the underlying OutputStream.

all parameter classes implement this.

classes that inherit from us.

CMAC tester - Official Test Vectors.

A non-NIST variant which allows passing of an IV to the underlying CBC cipher.

CMCFailInfo ::= INTEGER { badAlg (0), badMessageCheck (1), badRequest (2), badTime (3), badCertId (4), unsupportedExt (5), mustArchiveKeys (6), badIdentity (7), popRequired (8), popFailed (9), noKeyReuse (10), internalCAError (11), tryLater (12), authDataFail (13) }

Object Identifiers from RFC 5272

-- Used to return status state in a response id-cmc-statusInfo OBJECT IDENTIFIER ::= {id-cmc 1} CMCStatusInfo ::= SEQUENCE { cMCStatus CMCStatus, bodyList SEQUENCE SIZE (1..MAX) OF BodyPartID, statusString UTF8String OPTIONAL, otherInfo CHOICE { failInfo CMCFailInfo, pendInfo PendInfo } OPTIONAL }

-- Replaces CMC Status Info -- id-cmc-statusInfoV2 OBJECT IDENTIFIER ::= {id-cmc 25} CMCStatusInfoV2 ::= SEQUENCE { cMCStatus CMCStatus, bodyList SEQUENCE SIZE (1..MAX) OF BodyPartReference, statusString UTF8String OPTIONAL, otherStatusInfo OtherStatusInfo OPTIONAL } OtherStatusInfo ::= CHOICE { failInfo CMCFailInfo, pendInfo PendInfo, extendedFailInfo ExtendedFailInfo } PendInfo ::= SEQUENCE { pendToken OCTET STRING, pendTime GeneralizedTime } ExtendedFailInfo ::= SEQUENCE { failInfoOID OBJECT IDENTIFIER, failInfoValue ANY DEFINED BY failInfoOID }

id-aa-cmc-unsignedData OBJECT IDENTIFIER ::= {id-aa 34} CMCUnsignedData ::= SEQUENCE { bodyPartPath BodyPartPath, identifier OBJECT IDENTIFIER, content ANY DEFINED BY identifier }

From RFC 6211

A simple collection backed store.

CompleteRevocationRefs ::= SEQUENCE OF CrlOcspRef

A composite key class.

Parser of RFC 3274 CompressedData object.

Generator for Concatenation Key Derivation Function defined in NIST SP 800-56A, Sect 5.8.1

RFC 5652 ContentInfo, and RFC 5652 EncapsulatedContentInfo objects.

RFC 5652 ContentInfo object parser.

-- Inform follow on servers that one or more controls have already been -- processed id-cmc-controlProcessed OBJECT IDENTIFIER ::= {id-cmc 32} ControlsProcessed ::= SEQUENCE { bodyList SEQUENCE SIZE(1..MAX) OF BodyPartReference }

Class, holding Cramer Shoup ciphertexts (u1, u2, e, v)

CS exception for wrong cipher-texts

a Cramer Shoup key pair generator

CrlIdentifier ::= SEQUENCE { crlissuer Name, crlIssuedTime UTCTime, crlNumber INTEGER OPTIONAL }

The CRLNumber object.

The CRLReason enumeration.

the foundation class for the hard exceptions thrown by the crypto packages.

GOST Algorithms OBJECT IDENTIFIERS : { iso(1) member-body(2) ru(643) rans(2) cryptopro(2)}

Permissions that need to be configured if a SecurityManager is used.

Available properties that can be set.

CSHAKE test vectors from: https://csrc.nist.gov/CSRC/media/Projects/Cryptographic-Standards-and-Guidelines/documents/examples/cSHAKE_samples.pdf

CTR DRBG Test

A Cipher Text Stealing (CTS) mode cipher.

The DataGroupHash object.

this exception is thrown if a buffer that is meant to have output copied into it turns out to be too short, or if we've been given insufficient input.

id-cmc-decryptedPOP OBJECT IDENTIFIER ::= {id-cmc 10} DecryptedPOP ::= SEQUENCE { bodyPartID BodyPartID, thePOPAlgID AlgorithmIdentifier, thePOP OCTET STRING }

JcaJceHelper that obtains all algorithms using the default JCA/JCE mechanism (i.e.

XMSSOid class.

A DER encoding version of an application specific object.

A BIT STRING with DER encoding - the first byte contains the count of padding bits included in the byte array's last byte.

Parser DER EXTERNAL tagged objects.

ASN.1 GENERAL-STRING data type.

Parameters for key/byte stream derivation classes

Builder to create OtherInfo

An ASN.1 DER NULL object.

Parser for DER encoded OCTET STRINGS

Builder to create OtherInfo

DER PrintableString object.

A stream generator for DER SEQUENCEs

DER T61String (also the teletex string), try not to use this if you don't need to.

DER UniversalString object - encodes UNICODE (ISO 10646) characters using 32-bit format.

DER UTF8String object.

DES64with7816-4Padding

DES9797Alg3with7816-4Padding

PBEWithMD2AndDES

PBEWithMD5AndDES

PBEWithSHA1AndDES

DESede64with7816-4Padding

DESede - the default for this is to generate a key in a-b-a format that's 24 bytes long but has 16 bytes of key material (the first 8 bytes is repeated as the last 8 bytes).

PBEWithSHAAnd2-KeyTripleDES-CBC

PBEWithSHAAnd3-KeyTripleDES-CBC

DESede tester

Wrap keys according to RFC 3217.

DESExample is a simple DES based encryptor/decryptor.

Tests are taken from RFC 6979 - "Deterministic Usage of the Digital Signature Algorithm (DSA) and Elliptic Curve Digital Signature Algorithm (ECDSA)"

a Diffie-Hellman key agreement class.

A DHPrivateKeySpec that also carries a set of DH domain parameters.

DHKEK Generator tests - from RFC 2631.

a Diffie-Hellman key pair generator.

X9.42 definition of a DHPublicKey

From RFC 2875 for Diffie-Hellman POP.

Standard Diffie-Hellman groups from various IETF specifications.

Parameter spec to provide Diffie-Hellman Unified model keys and user keying material.

Parameters holder for static/ephemeral agreement as described in NIST SP 800-56A.

utility class for converting jce/jca DH objects objects into their org.bouncycastle.crypto counterparts.

base interface for general purpose Digest based byte derivation functions.

Basic factory class for message digests.

The DigestInfo object.

Implements the sign and verify functions for a Signature Scheme using a hash function to allow processing of large messages.

The DirectoryString CHOICE object.

DisplayText class, used in CertificatePolicies X509 V3 extensions (in policy qualifiers).

The DistributionPointName object.

A Definite length BIT STRING

Class checking the correct functionality of DLExternal

Parser class for DL SEQUENCEs.

Parser class for DL SETs.

check that doFinal is properly reseting the cipher.

An "extended" interface for classes implementing DSA-style algorithms, that provides access to the group order.

Generate suitable parameters for DSA, in line with FIPS 186-2, or FIPS 186-3.

Test based on FIPS 186-2, Appendix 5, an example of DSA, and FIPS 168-3 test vectors.

utility class for converting jce/jca DSA objects objects into their org.bouncycastle.crypto counterparts.

Reference implementation of national ukrainian standard of hashing transformation DSTU7564.

Implementation of DSTU7624 MAC mode

basic test class for DSTU7624

Dual EC SP800-90 DRBG test

A SP800-90A Dual EC DRBG.

DVCSCertInfo::= SEQUENCE { version Integer DEFAULT 1 , dvReqInfo DVCSRequestInformation, messageImprint DigestInfo, serialNumber Integer, responseTime DVCSTime, dvStatus [0] PKIStatusInfo OPTIONAL, policy [1] PolicyInformation OPTIONAL, reqSignature [2] SignerInfos OPTIONAL, certs [3] SEQUENCE SIZE (1..MAX) OF TargetEtcChain OPTIONAL, extensions Extensions OPTIONAL }

DVCSErrorNotice ::= SEQUENCE { transactionStatus PKIStatusInfo , transactionIdentifier GeneralName OPTIONAL }

DVCSRequest ::= SEQUENCE { requestInformation DVCSRequestInformation, data Data, transactionIdentifier GeneralName OPTIONAL }

DVCSRequestInformation ::= SEQUENCE { version INTEGER DEFAULT 1 , service ServiceType, nonce Nonce OPTIONAL, requestTime DVCSTime OPTIONAL, requester [0] GeneralNames OPTIONAL, requestPolicy [1] PolicyInformation OPTIONAL, dvcs [2] GeneralNames OPTIONAL, dataLocations [3] GeneralNames OPTIONAL, extensions [4] IMPLICIT Extensions OPTIONAL }

DVCSTime ::= CHOICE { genTime GeneralizedTime, timeStampToken ContentInfo }

Elliptic curves over F2m.

P1363 7.2.2 ECSVDP-DHC ECSVDP-DHC is Elliptic Curve Secret Value Derivation Primitive, Diffie-Hellman version with cofactor multiplication.

EC Unified static/ephemeral agreement as described in NIST SP 800-56A using EC co-factor Diffie-Hellman.

ECDHKEK Generator tests.

Parameters holder for public unified static/ephemeral agreement as described in NIST SP 800-56A using EC DH/CDH.

EC-DSA as described in X9.62

this does your basic ElGamal encryption algorithm using EC

Class representing the Elements of the finite field F2m in polynomial basis (PB) representation.

this transforms the original randomness used for an ElGamal encryption by a fixed value.

Signature for GOST34.10 2012 512.

table of the available named parameters for GOST 3410-2001 / 2012.

GOST R 34.10-2001 Signature Algorithm

The ECIES Key Encapsulation Mechanism (ECIES-KEM) from ISO 18033-2.

Test for ECIES - Elliptic Curve Integrated Encryption Scheme

generic interface for an Elliptic Curve Key.

base class for an Elliptic Curve Key Spec

Utility class to allow conversion of EC key parameters to explicit from named curves and back (where possible).

Named curve generation spec

specification signifying that the curve parameters can also be referred to by name.

a table of locally supported named curves.

this does your basic Elgamal encryption algorithm using EC

EC-NR as described in IEEE 1363-2000 - a signature algorithm for Elliptic Curve which also offers message recovery.

basic domain parameters for an Elliptic Curve public or private key.

Elliptic curve points over F2m

All BC elliptic curve keys implement this interface.

Utility class for handling EC point decoding.

interface for Elliptic Curve Private keys.

Elliptic Curve private key specification.

interface for elliptic curve public keys.

Elliptic Curve public key specification

GOST VKO key agreement class - RFC 7836 Section 4.3

Edwards Elliptic Curve Object Identifiers (RFC 8410)

this does your basic ElGamal algorithm.

a ElGamal key pair generator.

This class specifies an ElGamal public key with its associated parameters.

Encodable digests allow you to download an encoded copy of their internal state.

Exception thrown if an attempt is made to encode invalid data, or some other failure occurs.

Parser for RFC 5652 EncryptedContentInfo object.

The EncryptedData object.

EncryptedObjectStoreData ::= SEQUENCE { encryptionAlgorithm AlgorithmIdentifier encryptedContent OCTET STRING }

Base interface describing an entropy source for a DRBG.

Utility methods for making use of EntropySources.

RFC 5652 EnvelopedData object.

Basic KDF generator for derived keys and ivs as defined by IEEE P1363a/ISO 18033
This implementation is based on ISO 18033/P1363a.

RFC 4998: Evidence Record Syntax (ERS)

Interface for NewHope style key material exchange generators.

ExtendedFailInfo ::= SEQUENCE { failInfoOID OBJECT IDENTIFIER, failInfoValue ANY DEFINED BY failInfoOID }

an object for the elements in the X.509 V3 extension block.

ExtensionReq ::= SEQUENCE SIZE (1..MAX) OF Extension

Extensions ::= SEQUENCE SIZE (1..MAX) OF Extension Extension ::= SEQUENCE { extnId EXTENSION.&id ({ExtensionSet}), critical BOOLEAN DEFAULT FALSE, extnValue OCTET STRING }

This is an extended exception.

basic FIPS test class for a block cipher, just to make sure ECB/CBC/OFB/CFB are behaving correctly.

Class holding precomputation data for fixed-point multiplications.

A secure random that returns pre-seeded data to calls of nextBytes() or generateSeed().

BigInteger Source - in this case we expect requests for data that will be used for BigIntegers.

Base class for sources of fixed "Randomness"

An implementation of the CBC mode for GOST 3412 2015 cipher.

implements the GOST 3412 2015 CTR counter mode (GCTR).

An implementation of the GOST CFB mode with CryptoPro key meshing as described in RFC 4357.

RFC 5084: GCMParameters object.

A basic hash-committer based on the one described in "Making Mix Nets Robust for Electronic Voting by Randomized Partial Checking", by Jakobsson, Juels, and Rivest (11th Usenix Security Symposium, 2002).

The GeneralName object.

Class for containing a restriction object subtrees in NameConstraints.

RFC 5990 GenericHybridParameters class.

id-cmc-getCert OBJECT IDENTIFIER ::= {id-cmc 15} GetCert ::= SEQUENCE { issuerName GeneralName, serialNumber INTEGER }

id-cmc-getCRL OBJECT IDENTIFIER ::= {id-cmc 16} GetCRL ::= SEQUENCE { issuerName Name, cRLName GeneralName OPTIONAL, time GeneralizedTime OPTIONAL, reasons ReasonFlags OPTIONAL }

This class describes some operations with matrices over finite field GF(2) and is used in ecc and MQ-PKC (also has some specific methods and implementation)

This class describes some operations with matrices over finite field GF(2^m) with small m (1< m <32).

This abstract class implements an element of the finite field GF(2)ⁿ in either optimal normal basis representation (ONB) or in polynomial representation.

This class implements an element of the finite field GF(2ⁿ ).

This class implements polynomials over GF2nElements.

This class implements the abstract class GF2nField for polynomial representation.

This class implements the abstract class Vector for the case of vectors over the finite field GF(2).

The GMAC specialisation of Galois/Counter mode (GCM) detailed in NIST Special Publication 800-38D.

Chinese standard GM named curves.

This class provides a specification for the GMSS parameters that are used by the GMSSKeyPairGenerator and GMSSSignature classes.

This class provides a specification for a GMSS private key.

This class computes a whole Merkle tree and saves the needed values for AuthPath computation.

This class implements the GMSS signature scheme.

This class implements the GMSS signature scheme, but allows multiple signatures to be generated.

GNU project OID collection

This class describes decoding operations of an irreducible binary Goppa code.

This class is a container for an instance of GF2Matrix and one int[].

implementation of GOST 28147-89 MAC

ASN.1 algorithm identifier parameters for GOST-28147

basic test class for the GOST28147 cipher

A parameter spec for the GOST-28147 cipher.

table of the available named parameters for GOST 3410-94.

generate suitable parameters for GOST3410.

ParameterSpec for a GOST 3410-94 key.

This class specifies a GOST3410-94 public key with its associated parameters.

utility class for converting jce/jca GOST3410-94 objects objects into their org.bouncycastle.crypto counterparts.

PBEWithHmacGOST3411

GOST3412 2015 CMAC( OMAC1)

see GOST_R_3413-2015

basic test class for the GOST28147 cipher

GostR3410-TransportParameters ::= SEQUENCE { encryptionParamSet OBJECT IDENTIFIER, ephemeralPublicKey [0] IMPLICIT SubjectPublicKeyInfo OPTIONAL, ukm OCTET STRING }

Grain-128 Test

Implementation of Martin Hell's, Thomas Johansson's and Willi Meier's stream cipher, Grain v1.

BSI Key Derivation Function Parameters for Session Keys (see BSI-TR-03111 Section 4.3.3)

BSI Key Derivation Function for Session Keys (see BSI-TR-03111 Section 4.3.3)

DRBG Test

HC-128 and HC-256 Tests.

Utility class for converting hex data to bytes and back again.

Converters for going from hex to binary and back.

HKDF tests - vectors from RFC 5869, + 2 more, 101 and 102

HMAC implementation based on RFC2104 H(K XOR opad, H(K XOR ipad, text))

A deterministic K calculator based on the algorithm in section 3.2 of RFC 6979.

HMAC tester

{ ISOITU(2) intorgs(23) icao(136) }

Classes that inherit from us

Classes that inherit from us

key pair for use with an integrated encryptor

Parameter spec for an integrated encryptor, as in IEEE P1363a

Implementation of IetfAttrSyntax as specified by RFC3281.

Represents a string of bits and supports appending, reading the head, and reading the tail.

Interface implemented by objects that can be converted from streaming to in-memory objects.

Class of number-theory related functions for use with integers represented as int's or BigInteger objects.

this exception is thrown whenever we find something we don't expect in a message.

Utility methods for processing String objects containing IP addresses.

ISAAC Test - see https://www.burtleburtle.net/bob/rand/isaacafa.html

ISISMT -- Industrial Signature Interoperability Specification

parameters for Key derivation functions for ISO-18033

ISO 9796-1 padding.

ISO9796-2 - mechanism using a hash function with recovery (scheme 1)

DES based CBC Block Cipher MAC according to ISO9797, algorithm 3 (ANSI X9.19 Retail MAC) This could as well be derived from CBCBlockCipherMac, but then the property mac in the base class must be changed to protected

OIDS from ISO/IEC 10118-3:2004

RFC 5652: IssuerAndSerialNumber object.

General JCA/JCE utility methods.

A SecureRandom that maintains a journal of its output.

An example of a J-PAKE exchange.

Standard pre-computed prime order groups for use by J-PAKE.

The payload sent/received during the first round of a J-PAKE exchange.

The payload sent/received during the optional third round of a J-PAKE exchange, which is for explicit key confirmation.

Implementation of DSTU7624 CTR mode

KDF1 tests - vectors from ISO 18033.

KDF2 tests - vectors from ISO 18033.

This KDF has been defined by the publicly available NIST SP 800-108 specification.

Note that counter is only supported at the location presented in the NIST SP 800-108 specification, not in the additional locations present in the CAVP test vectors.

This KDF has been defined by the publicly available NIST SP 800-108 specification.

Note that counter is only supported at the location presented in the NIST SP 800-108 specification, not in the additional locations present in the CAVP test vectors.

implementation of Keccak based on following KeccakNISTInterface.c from http://keccak.noekeon.org/

RFC 5652: Content encryption key delivery mechanisms.

Diffie-Hellman key agreement using elliptic curve keys, ala IEEE P1363 both the simple one, and the simple one with cofactors are supported.

KeyAgreement according to BSI TR-03111 chapter 4.3.1

KeyAgreement according to BSI TR-03111 chapter 4.3.1

KeyAgreement according to BSI TR-03111 chapter 4.3.1

RFC 5652: Content encryption key delivery mechanisms.