We are pleased to announce the availability of Bouncy Castle Java 1.86.
The release includes additional features, fixed defects, and resolution to CVEs. For more information, see release notes for Java.
Key features
- Post-Quantum Key Establishment Across the Protocol Stack
- SM9 Identity-Based Cryptography for Regulated Markets
- Next-Generation Certificate Formats: C509 and Merkle Tree Certificates
- Modernized TLS: OCSP Stapling and RFC 9850 Key Logging
- Hash-Based Signatures Promoted to Core Cryptography
Resolution of CVEs
CVE-2026-17507 - MLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range sender.
CVE-2026-17508 - Password-based KDF cost parameters honoured unbounded from untrusted input across the remaining PBE entry points.
CVE-2026-18036 - NTRU leaks private key information by reducing secret values with a non-constant-time integer division.
CVE-2026-18040 - HQC leaks private key information through secret-indexed GF(2^8) tables and a secret-dependent fixed-weight sampler.
CVE-2026-71885 - MLS X.509 credential not bound to the LeafNode signature key.
CVE-2026-71886 - OpenPGP certification accepted from a subkey without certification authority.
CVE-2026-71887 - OpenPGP data signature accepted from a signing subkey without cross-certification.
CVE-2026-71888 - CMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absent.
CVE-2026-71889 - PKIXCertPathReviewer does not apply X.509 name constraints to the target certificate.
CVE-2026-71890 - MLS external commit can remove an arbitrary group member.
CVE-2026-71891 - BLS12-381 key validation accepts a public key built on a foreign curve.
CVE-2026-71892 - CMS key-transport recipient key-size validation never runs for RFC 9709 HKDF-derived keys.
CVE-2026-85515 - OpenPGP message truncation not reported, bypassing the SEIPDv1 integrity check.
Downloads
To download the latest Java release, go to https://www.bouncycastle.org/download/bouncy-castle-java/.
Comments
Article is closed for comments.