fix(vuln): bouncycastle security issue

This commit is contained in:
2026-06-03 21:02:35 +02:00
parent eca392007c
commit 4a5e7b9c11
3 changed files with 6 additions and 6 deletions

View File

@@ -32,7 +32,7 @@ dependencies {
// Define dependency versions as constraints
implementation 'org.apache.commons:commons-text:1.15.0'
implementation 'commons-cli:commons-cli:1.11.0'
implementation 'org.bouncycastle:bcpkix-jdk18on:1.83'
implementation 'org.bouncycastle:bcpkix-jdk18on:1.84'
implementation 'org.egothor:conflux:[1.0,2.0)'
implementation 'org.apache.commons:commons-imaging:1.0.0-alpha6'
}

View File

@@ -44,12 +44,12 @@ import java.util.Objects;
import javax.security.auth.DestroyFailedException;
import org.bouncycastle.crypto.SecretWithEncapsulation;
import org.bouncycastle.pqc.crypto.bike.BIKEKEMExtractor;
import org.bouncycastle.pqc.crypto.bike.BIKEKEMGenerator;
import org.bouncycastle.pqc.crypto.bike.BIKEPrivateKeyParameters;
import org.bouncycastle.pqc.crypto.bike.BIKEPublicKeyParameters;
import org.bouncycastle.pqc.crypto.util.PrivateKeyFactory;
import org.bouncycastle.pqc.crypto.util.PublicKeyFactory;
import org.bouncycastle.pqc.legacy.bike.BIKEKEMExtractor;
import org.bouncycastle.pqc.legacy.bike.BIKEKEMGenerator;
import org.bouncycastle.pqc.legacy.bike.BIKEPrivateKeyParameters;
import org.bouncycastle.pqc.legacy.bike.BIKEPublicKeyParameters;
import zeroecho.core.CryptoAlgorithm;
import zeroecho.core.context.KemContext;

View File

@@ -5,7 +5,7 @@ plugins {
dependencies {
testImplementation(project(":lib"))
testImplementation 'org.egothor:conflux:[1.0,2.0)'
testImplementation("org.bouncycastle:bcpkix-jdk18on:1.81")
testImplementation("org.bouncycastle:bcpkix-jdk18on:1.84")
testImplementation(platform("org.junit:junit-bom:5.10.2"))
testImplementation 'org.junit.jupiter:junit-jupiter'