Deprecated API

Contents

• Deprecated Packages
• Deprecated Interfaces
• Deprecated Classes
• Deprecated Enums
• Deprecated Exceptions
• Deprecated Fields
• Deprecated Methods
• Deprecated Constructors

Deprecated Packages

Package and Description
org.bouncycastle.pqc.crypto.lms this implementation has been promoted to org.bouncycastle.crypto - the key parameter classes to org.bouncycastle.crypto.params, the key pair generators to org.bouncycastle.crypto.generators, LMSSigner / HSSSigner and the LMSContextBased* interfaces to org.bouncycastle.crypto.signers, and LMSContext with the engine to org.bouncycastle.crypto.signers.lms. This package is scheduled for removal in the next release.
org.bouncycastle.pqc.crypto.xmss this implementation has been promoted to org.bouncycastle.crypto - the key parameter classes to org.bouncycastle.crypto.params, the key pair generators to org.bouncycastle.crypto.generators, XMSSSigner / XMSSMTSigner to org.bouncycastle.crypto.signers, and the engine classes to org.bouncycastle.crypto.signers.xmss. This package is scheduled for removal in the next release.

Deprecated Interfaces

Interface and Description
org.bouncycastle.crypto.KeyEncapsulation use EncapsulatedSecretGenerator and EncapsulatedSecretExtractor
org.bouncycastle.pqc.crypto.lms.LMSContextBasedSigner use LMSContextBasedSigner instead.
org.bouncycastle.pqc.crypto.lms.LMSContextBasedVerifier use LMSContextBasedVerifier instead.
org.bouncycastle.pqc.crypto.xmss.XMSSOid this class is implementation detail of the XMSS / XMSS^MT engine, which has moved to org.bouncycastle.crypto.signers.xmss and is package-private there. Drive XMSS through XMSSSigner / XMSSKeyPairGenerator and the org.bouncycastle.crypto.params key classes instead; the engine operations those are built on are on org.bouncycastle.crypto.signers.xmss.XMSSEngine.
org.bouncycastle.pqc.crypto.xmss.XMSSStoreableObjectInterface use Encodable

Deprecated Classes

Class and Description
org.bouncycastle.crypto.engines.AESFastEngine unfortunately this class is has a few side channel issues. In an environment where encryption/decryption may be closely observed it should not be used.
org.bouncycastle.crypto.digests.AsconDigest use Ascon Hash 256 Digest
org.bouncycastle.crypto.engines.AsconEngine Now superseded. Please refer to AsconAEAD128Engine for future implementations.
org.bouncycastle.crypto.digests.AsconXof Now superseded - please use AsconXof128
org.bouncycastle.pqc.crypto.xmss.BDS use BDS instead.
org.bouncycastle.pqc.crypto.xmss.BDSStateMap use BDSStateMap instead.
org.bouncycastle.crypto.params.CCMParameters use AEADParameters
org.bouncycastle.pqc.crypto.lms.Composer the promoted implementation in org.bouncycastle.crypto.signers.lms keeps its encoding helpers internal; scheduled for removal with the rest of this package.
org.bouncycastle.pqc.crypto.xmss.DefaultXMSSMTOid this class is implementation detail of the XMSS / XMSS^MT engine, which has moved to org.bouncycastle.crypto.signers.xmss and is package-private there. Drive XMSS through XMSSSigner / XMSSKeyPairGenerator and the org.bouncycastle.crypto.params key classes instead; the engine operations those are built on are on org.bouncycastle.crypto.signers.xmss.XMSSEngine.
org.bouncycastle.pqc.crypto.xmss.DefaultXMSSOid this class is implementation detail of the XMSS / XMSS^MT engine, which has moved to org.bouncycastle.crypto.signers.xmss and is package-private there. Drive XMSS through XMSSSigner / XMSSKeyPairGenerator and the org.bouncycastle.crypto.params key classes instead; the engine operations those are built on are on org.bouncycastle.crypto.signers.xmss.XMSSEngine.
org.bouncycastle.asn1.util.DERDump use ASN1Dump.
org.bouncycastle.asn1.x9.DHDomainParameters use DomainParameters
org.bouncycastle.asn1.x9.DHValidationParms use ValidationParams
org.bouncycastle.crypto.signers.ECGOST3410_2012Signer Use ECGOST3410Signer instead.
org.bouncycastle.crypto.kems.ECIESKeyEncapsulation use ECIESKEMGenerator, ECIESKEMExtractor
org.bouncycastle.asn1.sec.ECPrivateKeyStructure use ECPrivateKey
org.bouncycastle.util.GF16 moved to GF16; this type now delegates there and will be removed in a future release.
org.bouncycastle.pqc.crypto.lms.HSSKeyGenerationParameters use HSSKeyGenerationParameters instead.
org.bouncycastle.pqc.crypto.lms.HSSKeyPairGenerator use HSSKeyPairGenerator instead.
org.bouncycastle.pqc.crypto.lms.HSSPrivateKeyParameters use HSSPrivateKeyParameters instead.
org.bouncycastle.pqc.crypto.lms.HSSPublicKeyParameters use HSSPublicKeyParameters instead.
org.bouncycastle.pqc.crypto.lms.HSSSigner use HSSSigner instead.
org.bouncycastle.pqc.crypto.lms.LMOtsParameters use LMOtsParameters instead.
org.bouncycastle.pqc.crypto.lms.LMSContext use org.bouncycastle.crypto.signers.LMSContext instead.
org.bouncycastle.pqc.crypto.lms.LMSigParameters use LMSigParameters instead.
org.bouncycastle.pqc.crypto.lms.LMSKeyGenerationParameters use LMSKeyGenerationParameters instead.
org.bouncycastle.pqc.crypto.lms.LMSKeyPairGenerator use LMSKeyPairGenerator instead.
org.bouncycastle.pqc.crypto.lms.LMSKeyParameters use LMSKeyParameters instead.
org.bouncycastle.pqc.crypto.lms.LMSParameters use LMSParameters instead.
org.bouncycastle.pqc.crypto.lms.LMSPrivateKeyParameters use LMSPrivateKeyParameters instead.
org.bouncycastle.pqc.crypto.lms.LMSPublicKeyParameters use LMSPublicKeyParameters instead.
org.bouncycastle.pqc.crypto.lms.LMSSigner use LMSSigner instead.
org.bouncycastle.asn1.OIDTokenizer Will be removed
org.bouncycastle.crypto.util.Pack use org.bouncycastle.util.pack
org.bouncycastle.crypto.modes.PaddedBlockCipher use org.bouncycastle.crypto.paddings.PaddedBufferedBlockCipher instead.
org.bouncycastle.asn1.x509.PrivateKeyStatement use PrivateKeyPossessionStatement
org.bouncycastle.crypto.kems.RSAKeyEncapsulation use RSAKEMGenerator, RSAKEMExtractor
org.bouncycastle.asn1.pkcs.RSAPrivateKeyStructure use RSAPrivateKey
org.bouncycastle.asn1.x509.RSAPublicKeyStructure use org.bouncycastle.asn1.pkcs.RSAPublicKey
org.bouncycastle.asn1.x509.TBSCertificateStructure use TBSCertificate
org.bouncycastle.asn1.x509.X509CertificateStructure use org.bouncycastle.asn1.x509.Certificate
org.bouncycastle.asn1.x509.X509Extension use Extension
org.bouncycastle.asn1.x509.X509Extensions use Extension and Extensions
org.bouncycastle.asn1.x509.X509ExtensionsGenerator use org.bouncycastle.asn1.x509.ExtensionsGenerator
org.bouncycastle.asn1.x509.X509Name use org.bouncycastle.asn1.x500.X500Name.
org.bouncycastle.asn1.x509.X509NameTokenizer use X500NameTokenizer
org.bouncycastle.pqc.crypto.xmss.XMSS this class is implementation detail of the XMSS / XMSS^MT engine, which has moved to org.bouncycastle.crypto.signers.xmss and is package-private there. Drive XMSS through XMSSSigner / XMSSKeyPairGenerator and the org.bouncycastle.crypto.params key classes instead; the engine operations those are built on are on org.bouncycastle.crypto.signers.xmss.XMSSEngine.
org.bouncycastle.pqc.crypto.xmss.XMSSAddress this class is implementation detail of the XMSS / XMSS^MT engine, which has moved to org.bouncycastle.crypto.signers.xmss and is package-private there. Drive XMSS through XMSSSigner / XMSSKeyPairGenerator and the org.bouncycastle.crypto.params key classes instead; the engine operations those are built on are on org.bouncycastle.crypto.signers.xmss.XMSSEngine.
org.bouncycastle.pqc.crypto.xmss.XMSSKeyGenerationParameters use XMSSKeyGenerationParameters instead.
org.bouncycastle.pqc.crypto.xmss.XMSSKeyPairGenerator use XMSSKeyPairGenerator instead.
org.bouncycastle.pqc.crypto.xmss.XMSSKeyParameters use XMSSKeyParameters instead.
org.bouncycastle.pqc.crypto.xmss.XMSSMT this class is implementation detail of the XMSS / XMSS^MT engine, which has moved to org.bouncycastle.crypto.signers.xmss and is package-private there. Drive XMSS through XMSSSigner / XMSSKeyPairGenerator and the org.bouncycastle.crypto.params key classes instead; the engine operations those are built on are on org.bouncycastle.crypto.signers.xmss.XMSSEngine.
org.bouncycastle.pqc.crypto.xmss.XMSSMTKeyGenerationParameters use XMSSMTKeyGenerationParameters instead.
org.bouncycastle.pqc.crypto.xmss.XMSSMTKeyPairGenerator use XMSSMTKeyPairGenerator instead.
org.bouncycastle.pqc.crypto.xmss.XMSSMTKeyParameters use XMSSMTKeyParameters instead.
org.bouncycastle.pqc.crypto.xmss.XMSSMTParameters use XMSSMTParameters instead.
org.bouncycastle.pqc.crypto.xmss.XMSSMTPrivateKeyParameters use XMSSMTPrivateKeyParameters instead.
org.bouncycastle.pqc.crypto.xmss.XMSSMTPublicKeyParameters use XMSSMTPublicKeyParameters instead.
org.bouncycastle.pqc.crypto.xmss.XMSSMTSignature this class is implementation detail of the XMSS / XMSS^MT engine, which has moved to org.bouncycastle.crypto.signers.xmss and is package-private there. Drive XMSS through XMSSSigner / XMSSKeyPairGenerator and the org.bouncycastle.crypto.params key classes instead; the engine operations those are built on are on org.bouncycastle.crypto.signers.xmss.XMSSEngine.
org.bouncycastle.pqc.crypto.xmss.XMSSMTSigner use XMSSMTSigner instead.
org.bouncycastle.pqc.crypto.xmss.XMSSNode this class is implementation detail of the XMSS / XMSS^MT engine, which has moved to org.bouncycastle.crypto.signers.xmss and is package-private there. Drive XMSS through XMSSSigner / XMSSKeyPairGenerator and the org.bouncycastle.crypto.params key classes instead; the engine operations those are built on are on org.bouncycastle.crypto.signers.xmss.XMSSEngine.
org.bouncycastle.pqc.crypto.xmss.XMSSParameters use XMSSParameters instead.
org.bouncycastle.pqc.crypto.xmss.XMSSPrivateKeyParameters use XMSSPrivateKeyParameters instead.
org.bouncycastle.pqc.crypto.xmss.XMSSPublicKeyParameters use XMSSPublicKeyParameters instead.
org.bouncycastle.pqc.crypto.xmss.XMSSReducedSignature this class is implementation detail of the XMSS / XMSS^MT engine, which has moved to org.bouncycastle.crypto.signers.xmss and is package-private there. Drive XMSS through XMSSSigner / XMSSKeyPairGenerator and the org.bouncycastle.crypto.params key classes instead; the engine operations those are built on are on org.bouncycastle.crypto.signers.xmss.XMSSEngine.
org.bouncycastle.pqc.crypto.xmss.XMSSSignature this class is implementation detail of the XMSS / XMSS^MT engine, which has moved to org.bouncycastle.crypto.signers.xmss and is package-private there. Drive XMSS through XMSSSigner / XMSSKeyPairGenerator and the org.bouncycastle.crypto.params key classes instead; the engine operations those are built on are on org.bouncycastle.crypto.signers.xmss.XMSSEngine.
org.bouncycastle.pqc.crypto.xmss.XMSSSigner use XMSSSigner instead.
org.bouncycastle.pqc.crypto.xmss.XMSSUtil this class is implementation detail of the XMSS / XMSS^MT engine, which has moved to org.bouncycastle.crypto.signers.xmss and is package-private there. Drive XMSS through XMSSSigner / XMSSKeyPairGenerator and the org.bouncycastle.crypto.params key classes instead; the engine operations those are built on are on org.bouncycastle.crypto.signers.xmss.XMSSEngine.

Deprecated Enums

Enum and Description
org.bouncycastle.crypto.threshold.ShamirSecretSplitter.Mode no longer selects anything. Mode.Table indexed log/exp tables with the secret being split and with the share bytes, so which cache line it touched revealed them; both values now use the same constant-time arithmetic. Use ShamirSecretSplitter.getInstance(Algorithm, int, SecureRandom), which takes no mode.

Deprecated Exceptions

Exceptions and Description
org.bouncycastle.pqc.crypto.ExhaustedPrivateKeyException use org.bouncycastle.crypto.ExhaustedPrivateKeyException instead. This class now extends it, so a catch of the replacement catches this one as well.

Deprecated Fields

Field and Description
org.bouncycastle.asn1.x509.ReasonFlags.AA_COMPROMISE use lower case version
org.bouncycastle.asn1.x509.CRLReason.AA_COMPROMISE use lower case version
org.bouncycastle.asn1.cmp.PKIFailureInfo.ADD_INFO_NOT_AVAILABLE use lower case version
org.bouncycastle.asn1.x509.ReasonFlags.AFFILIATION_CHANGED use lower case version
org.bouncycastle.asn1.x509.CRLReason.AFFILIATION_CHANGED use lower case version
org.bouncycastle.asn1.x509.X509Extensions.AuditIdentity use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.AuthorityInfoAccess use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.AuthorityKeyIdentifier use X509Extension value.
org.bouncycastle.asn1.cmp.PKIFailureInfo.BAD_ALG use lower case version
org.bouncycastle.asn1.cmp.PKIFailureInfo.BAD_CERT_ID use lower case version
org.bouncycastle.asn1.cmp.PKIFailureInfo.BAD_DATA_FORMAT use lower case version
org.bouncycastle.asn1.cmp.PKIFailureInfo.BAD_MESSAGE_CHECK use lower case version
org.bouncycastle.asn1.cmp.PKIFailureInfo.BAD_POP use lower case version
org.bouncycastle.asn1.cmp.PKIFailureInfo.BAD_REQUEST use lower case version
org.bouncycastle.asn1.cmp.PKIFailureInfo.BAD_TIME use lower case version
org.bouncycastle.asn1.x509.X509Extensions.BasicConstraints use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.BiometricInfo use X509Extension value.
org.bouncycastle.asn1.x509.X509Name.C use a X500NameStyle
org.bouncycastle.asn1.x509.ReasonFlags.CA_COMPROMISE use lower case version
org.bouncycastle.asn1.x509.CRLReason.CA_COMPROMISE use lower case version
org.bouncycastle.asn1.x509.ReasonFlags.CERTIFICATE_HOLD use lower case version
org.bouncycastle.asn1.x509.CRLReason.CERTIFICATE_HOLD use lower case version
org.bouncycastle.asn1.x509.X509Extensions.CertificateIssuer use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.CertificatePolicies use X509Extension value.
org.bouncycastle.asn1.x509.ReasonFlags.CESSATION_OF_OPERATION use lower case version
org.bouncycastle.asn1.x509.CRLReason.CESSATION_OF_OPERATION use lower case version
org.bouncycastle.asn1.x509.X509Name.CN use a X500NameStyle
org.bouncycastle.asn1.x509.X509Extensions.CRLDistributionPoints use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.CRLNumber use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.DeltaCRLIndicator use X509Extension value.
org.bouncycastle.asn1.x509.X509Name.EmailAddress use a X500NameStyle
org.bouncycastle.asn1.x509.X509Extensions.ExtendedKeyUsage use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.FreshestCRL use X509Extension value.
org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers.id_aa_commitmentType use id_aa_ets_commitmentType instead
org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers.id_aa_otherSigCert use id_aa_ets_otherSigCert instead
org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers.id_aa_signerLocation use id_aa_ets_signerLocation instead
org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers.id_aa_sigPolicyId use id_aa_ets_sigPolicyId instead
org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers.id_alg use smime_alg instead
org.bouncycastle.asn1.x509.X509AttributeIdentifiers.id_at_privateKeyStatement use statementOfPossession
org.bouncycastle.asn1.iana.IANAObjectIdentifiers.id_MLKEM1024_ECDH_BP384_SHA3_256 use id_MLKEM1024_ECDH_brainpoolP384r1_SHA3_256 instead
org.bouncycastle.asn1.iana.IANAObjectIdentifiers.id_MLKEM768_ECDH_BP256_SHA3_256 use id_MLKEM768_ECDH_brainpoolP256r1_SHA3_256 instead
org.bouncycastle.asn1.x509.X509ObjectIdentifiers.id_PasswordBasedMac Use CRMFObjectIdentifiers.passwordBasedMac instead
org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers.id_spq use id_spq_oid instead
org.bouncycastle.asn1.cmp.PKIFailureInfo.INCORRECT_DATA use lower case version
org.bouncycastle.asn1.x509.X509Extensions.InhibitAnyPolicy use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.InstructionCode use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.InvalidityDate use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.IssuerAlternativeName use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.IssuingDistributionPoint use X509Extension value.
org.bouncycastle.crypto.hpke.HPKE.kem_P384_SHA348 use kem_P384_SHA384
org.bouncycastle.asn1.x509.ReasonFlags.KEY_COMPROMISE use lower case version
org.bouncycastle.asn1.x509.CRLReason.KEY_COMPROMISE use lower case version
org.bouncycastle.asn1.x509.X509Extensions.KeyUsage use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.LogoType use X509Extension value.
org.bouncycastle.asn1.cmp.PKIFailureInfo.MISSING_TIME_STAMP use lower case version
org.bouncycastle.asn1.x509.X509Extensions.NameConstraints use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.NoRevAvail use X509Extension value.
org.bouncycastle.asn1.x509.X509Name.O use a X500NameStyle
org.bouncycastle.asn1.x509.X509Name.OIDLookUp use DefaultSymbols
org.bouncycastle.asn1.x509.X509Name.OU use a X500NameStyle
org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers.pbewithSHAAnd40BitRC2_CBC use pbeWithSHAAnd40BitRC2_CBC
org.bouncycastle.asn1.x509.X509Extensions.PolicyConstraints use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.PolicyMappings use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.PrivateKeyUsagePeriod use X509Extension value.
org.bouncycastle.asn1.x509.ReasonFlags.PRIVILEGE_WITHDRAWN use lower case version
org.bouncycastle.asn1.x509.CRLReason.PRIVILEGE_WITHDRAWN use lower case version
org.bouncycastle.asn1.eac.CertificateBody.profileType
org.bouncycastle.asn1.x509.X509Extensions.QCStatements use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.ReasonCode use X509Extension value.
org.bouncycastle.asn1.x509.CRLReason.REMOVE_FROM_CRL use lower case version
org.bouncycastle.asn1.eac.CertificateBody.requestType
org.bouncycastle.asn1.x509.X509AttributeIdentifiers.RoleSyntax use id_at_role
org.bouncycastle.crypto.engines.Salsa20Engine.sigma
org.bouncycastle.asn1.x500.style.BCStyle.SN use SERIALNUMBER or SURNAME
org.bouncycastle.crypto.encodings.PKCS1Encoding.STRICT_LENGTH_ENABLED_PROPERTY use NOT_STRICT_LENGTH_ENABLED_PROPERTY
org.bouncycastle.asn1.x509.X509Extensions.SubjectAlternativeName use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.SubjectDirectoryAttributes use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.SubjectInfoAccess use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.SubjectKeyIdentifier use X509Extension value.
org.bouncycastle.asn1.x509.ReasonFlags.SUPERSEDED use lower case version
org.bouncycastle.asn1.x509.CRLReason.SUPERSEDED use lower case version
org.bouncycastle.asn1.x509.X509Name.SymbolLookUp use DefaultLookUp
org.bouncycastle.asn1.cmp.PKIFailureInfo.SYSTEM_FAILURE use lower case version
org.bouncycastle.asn1.x509.X509Name.T use a X500NameStyle
org.bouncycastle.asn1.x509.X509Extensions.TargetInformation use X509Extension value.
org.bouncycastle.crypto.engines.Salsa20Engine.tau
org.bouncycastle.asn1.cmp.PKIFailureInfo.TIME_NOT_AVAILABLE use lower case version
org.bouncycastle.crypto.signers.X931Signer.TRAILER_IMPLICIT use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2Signer.TRAILER_IMPLICIT use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2PSSSigner.TRAILER_IMPLICIT use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_RIPEMD128 use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2Signer.TRAILER_RIPEMD128 use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2PSSSigner.TRAILER_RIPEMD128 use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_RIPEMD160 use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2Signer.TRAILER_RIPEMD160 use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2PSSSigner.TRAILER_RIPEMD160 use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_SHA1 use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2Signer.TRAILER_SHA1 use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2PSSSigner.TRAILER_SHA1 use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_SHA224 use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_SHA256 use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2Signer.TRAILER_SHA256 use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2PSSSigner.TRAILER_SHA256 use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_SHA384 use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2Signer.TRAILER_SHA384 use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2PSSSigner.TRAILER_SHA384 use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_SHA512 use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2Signer.TRAILER_SHA512 use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2PSSSigner.TRAILER_SHA512 use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_WHIRLPOOL use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2Signer.TRAILER_WHIRLPOOL use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2PSSSigner.TRAILER_WHIRLPOOL use ISOTrailers
org.bouncycastle.asn1.cmp.PKIFailureInfo.UNACCEPTED_EXTENSION use lower case version
org.bouncycastle.asn1.cmp.PKIFailureInfo.UNACCEPTED_POLICY use lower case version
org.bouncycastle.asn1.x509.CRLReason.UNSPECIFIED use lower case version
org.bouncycastle.asn1.x509.ReasonFlags.UNUSED use lower case version
org.bouncycastle.asn1.cmp.PKIFailureInfo.WRONG_AUTHORITY use lower case version
org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers.x509certType use x509Certificate instead
org.bouncycastle.pqc.asn1.PQCObjectIdentifiers.xmss_mt_with_SHA256 use xmss_mt_SHA256ph
org.bouncycastle.pqc.asn1.PQCObjectIdentifiers.xmss_mt_with_SHA512 use xmss_mt_SHA512ph
org.bouncycastle.pqc.asn1.PQCObjectIdentifiers.xmss_mt_with_SHAKE128 use xmss_mt_SHAKE128ph
org.bouncycastle.pqc.asn1.PQCObjectIdentifiers.xmss_mt_with_SHAKE256 use xmss_mt_SHAKE256ph
org.bouncycastle.pqc.asn1.PQCObjectIdentifiers.xmss_with_SHA256 use xmss_SHA256ph
org.bouncycastle.pqc.asn1.PQCObjectIdentifiers.xmss_with_SHA512 use xmss_SHA512ph
org.bouncycastle.pqc.asn1.PQCObjectIdentifiers.xmss_with_SHAKE128 use xmss_SHAKE128ph
org.bouncycastle.pqc.asn1.PQCObjectIdentifiers.xmss_with_SHAKE256 use xmss_SHAKE256ph

Deprecated Methods

Method and Description
org.bouncycastle.asn1.x509.ExtensionsGenerator.addExtension(Extensions) Use addExtensions instead.
org.bouncycastle.crypto.engines.ThreefishEngine.bytesToWord(byte[], int) Will be removed
org.bouncycastle.util.Fingerprint.calculateFingerprintSHA512_160(byte[]) use the SHAKE based version.
org.bouncycastle.crypto.agreement.jpake.JPAKEUtil.calculateGx(BigInteger, BigInteger, BigInteger) x is a private ephemeral value, and this method has no q to randomise the exponent with, so it falls back to a multiple of p-1 - always sound, but it grows the exponent from the size of q to the size of p. Use JPAKEUtil.calculateGx(BigInteger, BigInteger, BigInteger, BigInteger, SecureRandom) instead.
org.bouncycastle.crypto.agreement.jpake.JPAKEUtil.calculateS(char[]) Use version including the modulus instead.
org.bouncycastle.util.GF16.decode(byte[], byte[], int) use GF16.decode(byte[], byte[], int).
org.bouncycastle.math.ec.rfc7748.X448Field.decode(byte[], int[]) Use X448Field.decode448(byte[], int[]) instead.
org.bouncycastle.math.ec.rfc7748.X25519Field.decode(byte[], int[]) Use X25519Field.decode255(byte[], int[]) instead.
org.bouncycastle.util.GF16.decode(byte[], int, byte[], int, int) use GF16.decode(byte[], int, byte[], int, int).
org.bouncycastle.math.ec.rfc7748.X448Field.decode(byte[], int, int[]) Use X448Field.decode448(byte[], int, int[], int) instead.
org.bouncycastle.math.ec.rfc7748.X25519Field.decode(byte[], int, int[]) Use X25519Field.decode255(byte[], int, int[], int) instead.
org.bouncycastle.math.ec.rfc7748.X448Field.decode(byte[], int, int[], int) Use X448Field.decode448(byte[], int, int[], int) instead.
org.bouncycastle.math.ec.rfc7748.X25519Field.decode(byte[], int, int[], int) Use X25519Field.decode255(byte[], int, int[], int) instead.
org.bouncycastle.math.ec.rfc7748.X448Field.decode(int[], int, int[]) Use X448Field.decode448(int[], int, int[], int) instead.
org.bouncycastle.math.ec.rfc7748.X25519Field.decode(int[], int, int[]) Use X25519Field.decode255(int[], int, int[], int) instead.
org.bouncycastle.crypto.kems.ECIESKeyEncapsulation.decrypt(byte[], int) use ECIESKEMExtractor
org.bouncycastle.crypto.kems.ECIESKeyEncapsulation.decrypt(byte[], int, int, int) use ECIESKEMExtractor
org.bouncycastle.util.GF16.encode(byte[], byte[], int) use GF16.encode(byte[], byte[], int).
org.bouncycastle.util.GF16.encode(byte[], byte[], int, int) use GF16.encode(byte[], byte[], int, int).
org.bouncycastle.crypto.kems.ECIESKeyEncapsulation.encrypt(byte[], int) use ECIESKEMGenerator
org.bouncycastle.crypto.kems.ECIESKeyEncapsulation.encrypt(byte[], int, int) use ECIESKEMGenerator
org.bouncycastle.crypto.generators.BCrypt.generate(byte[], byte[], int) as a direct replacement use BCrypt.generate(byte[], byte[], int, boolean) so the terminator choice is explicit at the call site — pass true to have the spec-required 0x00 terminator appended (equivalent to feeding pwInput through BCrypt.passwordToByteArray(char[])), false when the supplied bytes already include it. For general password hashing prefer OpenBSDBCrypt, which handles termination, salt formatting and the modular crypt output line; this raw primitive remains available for test-vector validation and interop with implementations that emit the 24-byte hash directly (issue #1741).
org.bouncycastle.asn1.x509.SubjectPublicKeyInfo.getAlgorithmId() use getAlgorithm()
org.bouncycastle.crypto.signers.RSADigestSigner.getAlgorithmName()
org.bouncycastle.asn1.ASN1BitString.getBytes(int) Will be removed
org.bouncycastle.asn1.cms.TimeStampAndCRL.getCertificateList() use getCRL()
org.bouncycastle.asn1.mozilla.PublicKeyAndChallenge.getChallenge() Use PublicKeyAndChallenge.getChallengeIA5() instead.
org.bouncycastle.asn1.cmc.CMCStatusInfoV2.getcMCStatus() use getCMCStatus();
org.bouncycastle.asn1.cmc.RevokeRequest.getComment() Use RevokeRequest.getCommentUTF8() instead.
org.bouncycastle.asn1.ess.ContentHints.getContentDescription() Use ContentHints.getContentDescriptionUTF8() instead.
org.bouncycastle.asn1.esf.SignerLocation.getCountryName() use getCountry()
org.bouncycastle.asn1.ocsp.CrlID.getCrlUrl() Use CrlID.getCrlUrlIA5() instead.
org.bouncycastle.asn1.cms.TimeStampedDataParser.getDataUri() Use TimeStampedDataParser.getDataUriIA5() instead.
org.bouncycastle.asn1.cms.TimeStampedData.getDataUri() Use TimeStampedData.getDataUriIA5() instead.
org.bouncycastle.crypto.agreement.ECVKOAgreement.getFieldSize() Will be removed
org.bouncycastle.asn1.cms.MetaData.getFileName() Use MetaData.getFileNameUTF8() instead.
org.bouncycastle.asn1.bc.ExternalValue.getHashVal() use getHash(), the internal encoding is now an OCTET STRING
org.bouncycastle.asn1.tsp.EncryptionInfo.getInstance(ASN1Object) Use EncryptionInfo.getInstance(Object) instead.
org.bouncycastle.asn1.x509.AuthorityKeyIdentifier.getKeyIdentifier() Use AuthorityKeyIdentifier.getKeyIdentifierOctets() instead.
org.bouncycastle.asn1.cryptopro.GOST3410ParamSetParameters.getLKeySize() use getKeySize
org.bouncycastle.asn1.esf.SignerLocation.getLocalityName() use getLocality()
org.bouncycastle.asn1.cms.MetaData.getMediaType() Use MetaData.getMediaTypeIA5() instead.
org.bouncycastle.asn1.ASN1BitString.getPadBits(int) Will be removed
org.bouncycastle.crypto.params.MLKEMPrivateKeyParameters.getParametersWithFormat(int) Use MLKEMPrivateKeyParameters.withPreferredFormat(int) instead.
org.bouncycastle.asn1.crmf.CertReqMsg.getPopo() use getPop
org.bouncycastle.crypto.params.MLDSAPrivateKeyParameters.getPrivateKey() Use MLDSAPrivateKeyParameters.getEncoded() instead.
org.bouncycastle.asn1.cms.OriginatorPublicKey.getPublicKey() Use OriginatorPublicKey.getPublicKeyData() instead.
org.bouncycastle.asn1.x509.SubjectPublicKeyInfo.getPublicKey() use parsePublicKey
org.bouncycastle.asn1.x509.qualified.BiometricData.getSourceDataUri() Use BiometricData.getSourceDataUriIA5() instead.
org.bouncycastle.asn1.cmc.CMCStatusInfoV2.getStatusString() Use CMCStatusInfoV2.getStatusStringUTF8() instead.
org.bouncycastle.asn1.cmc.CMCStatusInfo.getStatusString() Use CMCStatusInfo.getStatusStringUTF8() instead.
org.bouncycastle.asn1.cmp.PKIFreeText.getStringAt(int) Use PKIFreeText.getStringAtUTF8(int) instead.
org.bouncycastle.asn1.cmp.CRLStatus.getTime() Use CRLStatus.getThisUpdate() instead.
org.bouncycastle.asn1.x509.DeltaCertificateDescriptor.getValidity() Use getValidityObject instead.
org.bouncycastle.asn1.cms.RecipientInfo.getVersion() Will be removed
org.bouncycastle.asn1.cmp.CMPCertificate.getX509v2AttrCert() use getOtherCert and getOtherTag to make sure message is really what it should be.
org.bouncycastle.util.GF16.innerProduct(byte[], int, byte[], int, int) use GF16.innerProduct(byte[], int, byte[], int, int).
org.bouncycastle.crypto.kems.MLKEMGenerator.internalGenerateEncapsulated(AsymmetricKeyParameter, byte[]) Use MLKEMGenerator.internalGenerateEncapsulated(MLKEMPublicKeyParameters, byte[]) instead.
org.bouncycastle.util.GF16.inv(byte) use GF16.inv(byte).
org.bouncycastle.util.GF16.mul(byte, byte) use GF16.mul(byte, byte).
org.bouncycastle.util.GF16.mul(int, int) use GF16.mul(int, int).
org.bouncycastle.asn1.ASN1InputStream.readFully(byte[]) No longer used; will be removed
org.bouncycastle.asn1.ASN1InputStream.readLength() No longer used; will be removed
org.bouncycastle.asn1.crmf.CertTemplateBuilder.setExtensions(X509Extensions) use method taking Extensions
org.bouncycastle.asn1.x509.V3TBSCertificateGenerator.setExtensions(X509Extensions) use method taking Extensions
org.bouncycastle.asn1.x509.V2TBSCertListGenerator.setExtensions(X509Extensions) use the method taking Extensions
org.bouncycastle.asn1.x509.V2AttributeCertificateInfoGenerator.setExtensions(X509Extensions) use method taking Extensions
org.bouncycastle.asn1.x509.V3TBSCertificateGenerator.setIssuer(X509Name) use X500Name method
org.bouncycastle.asn1.x509.V2TBSCertListGenerator.setIssuer(X509Name) use X500Name method
org.bouncycastle.asn1.x509.V1TBSCertificateGenerator.setIssuer(X509Name) use X500Name method
org.bouncycastle.asn1.x509.V3TBSCertificateGenerator.setSubject(X509Name) use X500Name method
org.bouncycastle.asn1.x509.V1TBSCertificateGenerator.setSubject(X509Name) use X500Name method
org.bouncycastle.crypto.params.Ed25519PrivateKeyParameters.sign(int, Ed25519PublicKeyParameters, byte[], byte[], int, int, byte[], int) use overload that doesn't take a public key
org.bouncycastle.crypto.params.Ed448PrivateKeyParameters.sign(int, Ed448PublicKeyParameters, byte[], byte[], int, int, byte[], int) use overload that doesn't take a public key
org.bouncycastle.crypto.params.XMSSPublicKeyParameters.toByteArray() use getEncoded() - this method will become private.
org.bouncycastle.crypto.params.XMSSPrivateKeyParameters.toByteArray() use getEncoded() - this method will become private.
org.bouncycastle.crypto.params.XMSSMTPublicKeyParameters.toByteArray() use getEncoded() - this method will become private.
org.bouncycastle.crypto.params.XMSSMTPrivateKeyParameters.toByteArray() use getEncoded() - this method will become private.
org.bouncycastle.pqc.crypto.xmss.XMSSSignature.toByteArray() use getEncoded() this method will become private.
org.bouncycastle.pqc.crypto.xmss.XMSSPublicKeyParameters.toByteArray() use getEncoded() - this method will become private.
org.bouncycastle.pqc.crypto.xmss.XMSSPrivateKeyParameters.toByteArray() use getEncoded() - this method will become private.
org.bouncycastle.pqc.crypto.xmss.XMSSMTPublicKeyParameters.toByteArray() use getEncoded() - this method will become private.
org.bouncycastle.pqc.crypto.xmss.XMSSMTPrivateKeyParameters.toByteArray() use getEncoded() - this method will become private.
org.bouncycastle.asn1.x509.DeltaCertificateDescriptor.trimTo(TBSCertificate, Extensions) Use DeltaCertificateTool#trimDeltaCertificateDescriptor instead.
org.bouncycastle.crypto.engines.ThreefishEngine.wordToBytes(long, byte[], int) Will be removed
org.bouncycastle.util.Longs.xorTo(int, long[], int, long[], int) Use Nat.xorTo64(int, long[], int, long[], int) instead.

Deprecated Constructors

Constructor and Description
org.bouncycastle.asn1.tsp.Accuracy() Will be removed
org.bouncycastle.crypto.engines.AESEngine() use AESEngine.newInstance()
org.bouncycastle.crypto.AsymmetricCipherKeyPair(CipherParameters, CipherParameters) use AsymmetricKeyParameter
org.bouncycastle.asn1.x509.AuthorityKeyIdentifier(SubjectPublicKeyInfo) create the extension using org.bouncycastle.cert.X509ExtensionUtils
org.bouncycastle.asn1.x509.AuthorityKeyIdentifier(SubjectPublicKeyInfo, GeneralNames, BigInteger) create the extension using org.bouncycastle.cert.X509ExtensionUtils
org.bouncycastle.crypto.macs.BlockCipherMac(BlockCipher) use CBCBlockCipherMac
org.bouncycastle.crypto.macs.BlockCipherMac(BlockCipher, int) use CBCBlockCipherMac
org.bouncycastle.crypto.BufferedBlockCipher(BlockCipher) use the constructor on DefaultBufferedBlockCipher.
org.bouncycastle.crypto.modes.CBCBlockCipher(BlockCipher) use the CBCBlockCipher.newInstance() static method.
org.bouncycastle.crypto.modes.CCMBlockCipher(BlockCipher) use the CCMBlockCipher.newInstance() static method.
org.bouncycastle.asn1.cmp.CertAnnContent(AttributeCertificate) use (type, otherCert) constructor
org.bouncycastle.asn1.pkcs.CertificationRequest(ASN1Sequence) use getInstance()
org.bouncycastle.asn1.pkcs.CertificationRequestInfo(X509Name, SubjectPublicKeyInfo, ASN1Set) use X500Name method.
org.bouncycastle.crypto.modes.CFBBlockCipher(BlockCipher, int) use the equivalent CFBBlockCipher.newInstance() static method.
org.bouncycastle.asn1.cmp.CMPCertificate(AttributeCertificate) use (type, otherCert) constructor
org.bouncycastle.asn1.DERExternal(ASN1EncodableVector) Use DERExternal.fromVector(ASN1EncodableVector) instead.
org.bouncycastle.asn1.DERExternal(DERSequence) Use DERExternal.fromSequence(ASN1Sequence) instead.
org.bouncycastle.asn1.DLExternal(ASN1EncodableVector) Use DLExternal.fromVector(ASN1EncodableVector) instead.
org.bouncycastle.asn1.DLExternal(DLSequence) Use DLExternal.fromSequence(ASN1Sequence) instead.
org.bouncycastle.asn1.x509.ExtendedKeyUsage(Vector) use KeyPurposeId[] constructor.
org.bouncycastle.math.ec.ECCurve.F2m(int, int, BigInteger, BigInteger) use constructor taking order/cofactor
org.bouncycastle.math.ec.ECCurve.F2m(int, int, int, int, BigInteger, BigInteger) use constructor taking order/cofactor
org.bouncycastle.pqc.asn1.FalconPublicKey(ASN1Sequence) use getInstance()
org.bouncycastle.util.Fingerprint(byte[], boolean) use the SHAKE only version.
org.bouncycastle.math.ec.ECCurve.Fp(BigInteger, BigInteger, BigInteger) use constructor taking order/cofactor
org.bouncycastle.crypto.modes.GCMBlockCipher(BlockCipher) use the GCMBlockCipher.newInstance() static method.
org.bouncycastle.crypto.modes.GCMBlockCipher(BlockCipher, GCMMultiplier) use the CBCBlockCipher.newInstance() static method.
org.bouncycastle.asn1.x509.GeneralName(X509Name) use X500Name constructor.
org.bouncycastle.asn1.cms.IssuerAndSerialNumber(ASN1Sequence) use getInstance() method.
org.bouncycastle.asn1.cms.IssuerAndSerialNumber(X509CertificateStructure) use constructor taking Certificate
org.bouncycastle.asn1.cms.IssuerAndSerialNumber(X509Name, ASN1Integer) use X500Name constructor
org.bouncycastle.asn1.cms.IssuerAndSerialNumber(X509Name, BigInteger) use X500Name constructor
org.bouncycastle.crypto.macs.OldHMac(Digest) uses incorrect pad for SHA-512 and SHA-384 use HMac.
org.bouncycastle.asn1.cms.OriginatorIdentifierOrKey(ASN1OctetString) use version taking a SubjectKeyIdentifier
org.bouncycastle.asn1.cms.OriginatorIdentifierOrKey(ASN1Primitive) use more specific version
org.bouncycastle.asn1.x509.PolicyMappings(Hashtable) use CertPolicyId constructors.
org.bouncycastle.asn1.x509.PolicyQualifierInfo(ASN1Sequence) use PolicyQualifierInfo.getInstance()
org.bouncycastle.asn1.ocsp.ResponseData(ResponderID, ASN1GeneralizedTime, ASN1Sequence, X509Extensions) use method taking Extensions
org.bouncycastle.asn1.cmp.RevDetails(CertTemplate, X509Extensions) use method taking Extensions
org.bouncycastle.crypto.threshold.ShamirSecretSplitter(ShamirSecretSplitter.Algorithm, ShamirSecretSplitter.Mode, int, SecureRandom) the mode is ignored - see ShamirSecretSplitter.Mode. Use ShamirSecretSplitter.getInstance(Algorithm, int, SecureRandom).
org.bouncycastle.crypto.threshold.ShamirSplitSecret(ShamirSecretSplitter.Algorithm, ShamirSecretSplitter.Mode, ShamirSplitSecretShare[]) the mode is ignored - see ShamirSecretSplitter.Mode. Use ShamirSplitSecret.getInstance(ShamirSecretSplitter.Algorithm, ShamirSplitSecretShare[]).
org.bouncycastle.crypto.modes.SICBlockCipher(BlockCipher) use newInstance() method.
org.bouncycastle.asn1.ocsp.SingleResponse(CertID, CertStatus, ASN1GeneralizedTime, ASN1GeneralizedTime, X509Extensions) use method taking ASN1GeneralizedTime and Extensions
org.bouncycastle.pqc.asn1.SPHINCSPLUSPrivateKey(ASN1Sequence) use getInstance()
org.bouncycastle.pqc.asn1.SPHINCSPLUSPublicKey(ASN1Sequence) use getInstance()
org.bouncycastle.asn1.x509.SubjectPublicKeyInfo(ASN1Sequence) use SubjectPublicKeyInfo.getInstance()
org.bouncycastle.asn1.ocsp.TBSRequest(GeneralName, ASN1Sequence, X509Extensions) use method taking Extensions
org.bouncycastle.asn1.x500.X500Name(X500NameStyle, X500Name) use the getInstance() method that takes a style.
org.bouncycastle.asn1.x509.X509Extensions(Vector, Hashtable) use Extensions
org.bouncycastle.asn1.x509.X509Extensions(Vector, Vector) use Extensions
org.bouncycastle.asn1.x509.X509Name(ASN1Sequence) use X500Name.getInstance()
org.bouncycastle.asn1.x509.X509Name(boolean, Hashtable, String) use X500Name, X500NameBuilder
org.bouncycastle.asn1.x509.X509Name(boolean, String) use X500Name, X500NameBuilder
org.bouncycastle.asn1.x509.X509Name(boolean, String, X509NameEntryConverter) use X500Name, X500NameBuilder
org.bouncycastle.asn1.x509.X509Name(Hashtable) use an ordered constructor! The hashtable ordering is rarely correct
org.bouncycastle.asn1.x509.X509Name(String) use X500Name, X500NameBuilder
org.bouncycastle.asn1.x509.X509Name(String, X509NameEntryConverter) use X500Name, X500NameBuilder
org.bouncycastle.asn1.x509.X509Name(Vector, Hashtable, X509NameEntryConverter) use X500Name, X500NameBuilder
org.bouncycastle.asn1.x509.X509Name(Vector, Vector) use X500Name, X500NameBuilder
org.bouncycastle.asn1.x509.X509Name(Vector, Vector, X509NameEntryConverter) use X500Name, X500NameBuilder