Bouncy Castle Java Distribution (Mirror)
This report summarizes scanner evidence for bcgit/bc-java, a Java project with 2,710 GitHub stars. SynthScan examined 1,676,114 lines of code across 8571 source files, recording 868 pattern matches distributed across 12 syntactic categories. The legacy adjusted pattern signal is 2.2 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 580 finding(s).
Are imports declared and package/API names verified? 287 finding(s).
Are wrappers, guards, and repeated structures necessary? 4 finding(s).
Which changes need focused human review? 868 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 868 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …rg/bouncycastle/openpgp/examples/ByteArrayHandler.java | 204 | System.out.println("\nencrypted data = '"+new String(org.bouncycastle.util.encoders.Hex.encode(encrypted))+"'"); | CODE |
| CRITICAL | …lants/examples/LandmarkRelativeCertificateExample.java | 80 | new org.bouncycastle.cert.plants.bc.BcSha256MerkleTreeHash(), | CODE |
| CRITICAL | …stle/jcajce/provider/test/CompositeSignaturesTest.java | 174 | new org.bouncycastle.jcajce.provider.asymmetric.compositesignatures.KeyFactorySpi(); | CODE |
| CRITICAL | …stle/jcajce/provider/test/CompositeSignaturesTest.java | 204 | new org.bouncycastle.jcajce.provider.asymmetric.compositesignatures.KeyFactorySpi(); | CODE |
| CRITICAL | …stle/jcajce/provider/test/CompositeSignaturesTest.java | 256 | new org.bouncycastle.jcajce.provider.asymmetric.compositesignatures.KeyFactorySpi(); | CODE |
| CRITICAL | …java/org/bouncycastle/jce/provider/test/DHIESTest.java | 88 | IESCipher c1 = new org.bouncycastle.jcajce.provider.asymmetric.dh.IESCipher.IES(); | CODE |
| CRITICAL | …java/org/bouncycastle/jce/provider/test/DHIESTest.java | 89 | IESCipher c2 = new org.bouncycastle.jcajce.provider.asymmetric.dh.IESCipher.IES(); | CODE |
| CRITICAL | …ava/org/bouncycastle/jce/provider/test/ECDSA5Test.java | 276 | byte[] enc2 = org.bouncycastle.jcajce.util.ECKeyUtil.createKeyWithCompression((ECPublicKey)kp.getPublic()).g | CODE |
| CRITICAL | …rg/bouncycastle/jce/provider/test/PKCS12StoreTest.java | 1870 | storeParam = new org.bouncycastle.jcajce.provider.config.PKCS12StoreParameter(bOut, passwd, true); | CODE |
| CRITICAL | …rg/bouncycastle/jce/provider/test/PKCS12StoreTest.java | 3032 | byte[] certEnc = org.bouncycastle.asn1.x509.Certificate.getInstance(new DERSequence(v)).getEncoded(); | CODE |
| CRITICAL | …/provider/test/HardwareKeyInvalidKeyExceptionTest.java | 74 | org.bouncycastle.jcajce.provider.asymmetric.util.DHUtil.generatePrivateKeyParameter(new OpaqueDHPrivateK | CODE |
| CRITICAL | …/provider/test/HardwareKeyInvalidKeyExceptionTest.java | 83 | org.bouncycastle.jce.provider.DHUtil.generatePrivateKeyParameter(new OpaqueDHPrivateKey()); | CODE |
| CRITICAL | …ncycastle/jce/provider/test/PKCS10CertRequestTest.java | 226 | X9ECParameters x9 = org.bouncycastle.asn1.x9.ECNamedCurveTable.getByName("secp521r1"); | CODE |
| CRITICAL | …ncycastle/jce/provider/test/PKCS10CertRequestTest.java | 494 | X9ECParameters x9 = org.bouncycastle.asn1.x9.ECNamedCurveTable.getByName("prime239v1"); | CODE |
| CRITICAL | …rg/bouncycastle/jce/provider/test/SM9EncodingTest.java | 206 | new org.bouncycastle.jcajce.provider.asymmetric.sm9.KeyFactorySpi().generatePublic(unaligned); | CODE |
| CRITICAL | …rg/bouncycastle/jce/provider/test/SM9EncodingTest.java | 616 | classFile = org.bouncycastle.util.io.Streams.readAll(in); | CODE |
| CRITICAL | …java/org/bouncycastle/jce/provider/test/ECIESTest.java | 82 | IESCipher c1 = new org.bouncycastle.jcajce.provider.asymmetric.ec.IESCipher.ECIES(); | CODE |
| CRITICAL | …java/org/bouncycastle/jce/provider/test/ECIESTest.java | 83 | IESCipher c2 = new org.bouncycastle.jcajce.provider.asymmetric.ec.IESCipher.ECIES(); | CODE |
| CRITICAL | …java/org/bouncycastle/jce/provider/test/ECIESTest.java | 95 | c1 = new org.bouncycastle.jcajce.provider.asymmetric.ec.IESCipher.ECIESwithAESCBC(); | CODE |
| CRITICAL | …java/org/bouncycastle/jce/provider/test/ECIESTest.java | 96 | c2 = new org.bouncycastle.jcajce.provider.asymmetric.ec.IESCipher.ECIESwithAESCBC(); | CODE |
| CRITICAL | …rg/bouncycastle/pqc/jcajce/provider/test/XMSSTest.java | 128 | AsymmetricKeyParameter key = org.bouncycastle.crypto.util.PrivateKeyFactory.createKey(testPrivKey); | CODE |
| CRITICAL | …/bouncycastle/pqc/jcajce/provider/test/XMSSMTTest.java | 123 | AsymmetricKeyParameter key = org.bouncycastle.crypto.util.PrivateKeyFactory.createKey(testPrivKey); | CODE |
| CRITICAL | …/bouncycastle/pqc/jcajce/provider/test/XMSSMTTest.java | 341 | new org.bouncycastle.crypto.params.XMSSMTPrivateKeyParameters.Builder(params) | CODE |
| CRITICAL | …g/bouncycastle/pqc/jcajce/provider/test/SDitHTest.java | 254 | org.bouncycastle.asn1.x509.SubjectPublicKeyInfo.getInstance(kp.getPublic().getEncoded()); | CODE |
| CRITICAL | …g/bouncycastle/pqc/jcajce/provider/test/SDitHTest.java | 256 | org.bouncycastle.asn1.pkcs.PrivateKeyInfo.getInstance(kp.getPrivate().getEncoded()); | CODE |
| CRITICAL | …g/bouncycastle/pqc/jcajce/provider/test/SDitHTest.java | 279 | org.bouncycastle.asn1.x509.SubjectPublicKeyInfo.getInstance(kp.getPublic().getEncoded()); | CODE |
| CRITICAL | …g/bouncycastle/pqc/jcajce/provider/test/SDitHTest.java | 281 | org.bouncycastle.asn1.pkcs.PrivateKeyInfo.getInstance(kp.getPrivate().getEncoded()); | CODE |
| CRITICAL | …k1.4/org/bouncycastle/jce/provider/test/ECIESTest.java | 78 | IESCipher c1 = new org.bouncycastle.jcajce.provider.asymmetric.ec.IESCipher.ECIES(); | CODE |
| CRITICAL | …k1.4/org/bouncycastle/jce/provider/test/ECIESTest.java | 79 | IESCipher c2 = new org.bouncycastle.jcajce.provider.asymmetric.ec.IESCipher.ECIES(); | CODE |
| CRITICAL | …k1.4/org/bouncycastle/jce/provider/test/ECIESTest.java | 91 | c1 = new org.bouncycastle.jcajce.provider.asymmetric.ec.IESCipher.ECIESwithAESCBC(); | CODE |
| CRITICAL | …k1.4/org/bouncycastle/jce/provider/test/ECIESTest.java | 92 | c2 = new org.bouncycastle.jcajce.provider.asymmetric.ec.IESCipher.ECIESwithAESCBC(); | CODE |
| CRITICAL | …dk1.1/org/bouncycastle/jce/provider/X509CRLObject.java | 497 | issuer = org.bouncycastle.asn1.x509.Certificate.getInstance(cert.getEncoded()).getIssuer(); | CODE |
| CRITICAL | …/java/org/bouncycastle/jcajce/CompositePrivateKey.java | 207 | else if (org.bouncycastle.jcajce.provider.asymmetric.compositekem.CompositeIndex.isCompositeKEMOID(keyInfoId | CODE |
| CRITICAL | …/java/org/bouncycastle/jcajce/CompositePrivateKey.java | 209 | keyInfoConverter = new org.bouncycastle.jcajce.provider.asymmetric.compositekem.KeyFactorySpi(); | CODE |
| CRITICAL | …/java/org/bouncycastle/jcajce/CompositePrivateKey.java | 267 | algorithmName = org.bouncycastle.jcajce.provider.asymmetric.compositekem.CompositeIndex.getAlgorithmName(alg | CODE |
| CRITICAL | …/java/org/bouncycastle/jcajce/CompositePrivateKey.java | 291 | if (org.bouncycastle.jcajce.provider.asymmetric.compositekem.CompositeIndex.isCompositeKEMOID(algOid)) | CODE |
| CRITICAL | …n/java/org/bouncycastle/jcajce/CompositePublicKey.java | 156 | else if (org.bouncycastle.jcajce.provider.asymmetric.compositekem.CompositeIndex.isCompositeKEMOID(keyInfoId | CODE |
| CRITICAL | …n/java/org/bouncycastle/jcajce/CompositePublicKey.java | 158 | keyInfoConverter = new org.bouncycastle.jcajce.provider.asymmetric.compositekem.KeyFactorySpi(); | CODE |
| CRITICAL | …n/java/org/bouncycastle/jcajce/CompositePublicKey.java | 247 | algorithmName = org.bouncycastle.jcajce.provider.asymmetric.compositekem.CompositeIndex.getAlgorithmName(alg | CODE |
| CRITICAL | …/provider/keystore/pkcs12/PKCS12PBMAC1KeyStoreSpi.java | 1385 | org.bouncycastle.asn1.pkcs.EncryptedPrivateKeyInfo eIn = org.bouncycastle.asn1.pkcs.EncryptedPrivateKeyInfo.getI | CODE |
| CRITICAL | …/provider/keystore/pkcs12/PKCS12PBMAC1KeyStoreSpi.java | 1464 | org.bouncycastle.asn1.pkcs.PrivateKeyInfo kInfo = org.bouncycastle.asn1.pkcs.PrivateKeyInfo.getInstance(b.getBag | CODE |
| CRITICAL | …/provider/keystore/pkcs12/PKCS12PBMAC1KeyStoreSpi.java | 1607 | org.bouncycastle.asn1.pkcs.EncryptedPrivateKeyInfo.getInstance(encInfoBytes); | CODE |
| CRITICAL | …/provider/keystore/pkcs12/PKCS12PBMAC1KeyStoreSpi.java | 1611 | org.bouncycastle.asn1.pkcs.PrivateKeyInfo.getInstance(pkiBytes); | CODE |
| CRITICAL | …jcajce/provider/keystore/pkcs12/PKCS12KeyStoreSpi.java | 1376 | org.bouncycastle.asn1.pkcs.EncryptedPrivateKeyInfo eIn = org.bouncycastle.asn1.pkcs.EncryptedPrivateKeyInfo.getI | CODE |
| CRITICAL | …jcajce/provider/keystore/pkcs12/PKCS12KeyStoreSpi.java | 1455 | org.bouncycastle.asn1.pkcs.PrivateKeyInfo kInfo = org.bouncycastle.asn1.pkcs.PrivateKeyInfo.getInstance(b.getBag | CODE |
| CRITICAL | …jcajce/provider/keystore/pkcs12/PKCS12KeyStoreSpi.java | 1619 | org.bouncycastle.asn1.pkcs.EncryptedPrivateKeyInfo.getInstance(encInfoBytes); | CODE |
| CRITICAL | …jcajce/provider/keystore/pkcs12/PKCS12KeyStoreSpi.java | 1623 | org.bouncycastle.asn1.pkcs.PrivateKeyInfo.getInstance(pkiBytes); | CODE |
| CRITICAL | …e/jcajce/provider/keystore/bcfks/BcFKSKeyStoreSpi.java | 340 | return certFact.generateCertificate(new ByteArrayInputStream(org.bouncycastle.asn1.x509.Certificate.getI | CODE |
| CRITICAL | …e/jcajce/provider/keystore/bcfks/BcFKSKeyStoreSpi.java | 353 | return certFact.generateCertificate(new ByteArrayInputStream(org.bouncycastle.asn1.x509.Certificate.getI | CODE |
| CRITICAL | …e/jcajce/provider/keystore/bcfks/BcFKSKeyStoreSpi.java | 626 | certChain[i] = org.bouncycastle.asn1.x509.Certificate.getInstance(chain[i].getEncoded()); | CODE |
| CRITICAL | …e/jcajce/provider/keystore/bcfks/BcFKSKeyStoreSpi.java | 1137 | certificates[i] = org.bouncycastle.asn1.x509.Certificate.getInstance(certs[i].getEncoded()); | CODE |
| CRITICAL⚡ | …g/bouncycastle/jcajce/provider/util/DigestFactory.java | 173 | return org.bouncycastle.crypto.util.DigestFactory.createSHA1(); | CODE |
| CRITICAL⚡ | …g/bouncycastle/jcajce/provider/util/DigestFactory.java | 177 | return org.bouncycastle.crypto.util.DigestFactory.createMD5(); | CODE |
| CRITICAL⚡ | …g/bouncycastle/jcajce/provider/util/DigestFactory.java | 181 | return org.bouncycastle.crypto.util.DigestFactory.createSHA224(); | CODE |
| CRITICAL⚡ | …g/bouncycastle/jcajce/provider/util/DigestFactory.java | 185 | return org.bouncycastle.crypto.util.DigestFactory.createSHA256(); | CODE |
| CRITICAL⚡ | …g/bouncycastle/jcajce/provider/util/DigestFactory.java | 189 | return org.bouncycastle.crypto.util.DigestFactory.createSHA384(); | CODE |
| CRITICAL⚡ | …g/bouncycastle/jcajce/provider/util/DigestFactory.java | 193 | return org.bouncycastle.crypto.util.DigestFactory.createSHA512(); | CODE |
| CRITICAL⚡ | …g/bouncycastle/jcajce/provider/util/DigestFactory.java | 197 | return org.bouncycastle.crypto.util.DigestFactory.createSHA512_224(); | CODE |
| CRITICAL⚡ | …g/bouncycastle/jcajce/provider/util/DigestFactory.java | 201 | return org.bouncycastle.crypto.util.DigestFactory.createSHA512_256(); | CODE |
| CRITICAL⚡ | …g/bouncycastle/jcajce/provider/util/DigestFactory.java | 206 | return org.bouncycastle.crypto.util.DigestFactory.createSHA3_224(); | CODE |
| 199 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .gitlab-ci.yml | 61 | # - "ecr_login" | COMMENT |
| LOW | …bouncycastle/mail/smime/examples/CreateSignedMail.java | 161 | new X500Name(signDN), origCert.getSerialNumber()); | COMMENT |
| LOW | …tle/mail/smime/examples/CreateSignedMultipartMail.java | 141 | new X500Name(signDN), origCert.getSerialNumber()); | COMMENT |
| LOW | …tle/mail/smime/examples/CreateSignedMultipartMail.java | 181 | // | COMMENT |
| LOW | …ycastle/mail/smime/examples/CreateLargeSignedMail.java | 141 | // normally this would be different from the signing certificate... | COMMENT |
| LOW | …uncycastle/pqc/jcajce/provider/test/NTRUKEM17Test.java | 41 | //// byte[] pk = Hex.decode("01031FE0C4328B956E9AFA7B5D86DE2CBF1F0728A1236F685DD2FD221ACDD05CAB64B01AF7A5F3C2837A | COMMENT |
| LOW | …uncycastle/pqc/jcajce/provider/test/NTRUKEM17Test.java | 61 | // byte[] em = enc.encapsulation(); | COMMENT |
| LOW | …dk1.1/org/bouncycastle/jce/provider/test/CertTest.java | 1061 | // System.out.println(cert); | COMMENT |
| LOW | …dk1.1/org/bouncycastle/jce/provider/test/CertTest.java | 1081 | // | COMMENT |
| LOW | …dk1.1/org/bouncycastle/jce/provider/test/CertTest.java | 1101 | // // | COMMENT |
| LOW | …dk1.1/org/bouncycastle/jce/provider/test/CertTest.java | 1121 | // certGen.setNotBefore(new Date(System.currentTimeMillis() - 50000)); | COMMENT |
| LOW | …dk1.1/org/bouncycastle/jce/provider/test/CertTest.java | 1141 | // cert.verify(cert.getPublicKey()); | COMMENT |
| LOW | …rg/bouncycastle/jcajce/provider/test/SP80038GTest.java | 261 | COMMENT | |
| LOW | …java/org/bouncycastle/jce/provider/test/DHIESTest.java | 201 | COMMENT | |
| LOW | …ncycastle/jce/provider/test/X509LDAPCertStoreTest.java | 61 | // Attribute[] attr1 = | COMMENT |
| LOW | …ncycastle/jce/provider/test/X509LDAPCertStoreTest.java | 141 | COMMENT | |
| LOW | …a/org/bouncycastle/jce/provider/test/GOST3410Test.java | 261 | fail("public parameters not deserialised properly"); | COMMENT |
| LOW | …a/org/bouncycastle/jce/provider/test/GOST3410Test.java | 801 | throws Exception | COMMENT |
| LOW | …/java/org/bouncycastle/jce/provider/test/XIESTest.java | 181 | // c1.init(Cipher.ENCRYPT_MODE, Pub, new SecureRandom()); | COMMENT |
| LOW | …rg/bouncycastle/jce/provider/test/ECIESVectorTest.java | 161 | doTestWithParams("ECIES with P-521 KP2 P21", keyPair, "ECIES", p521_2_eph, new IESParameterSpec(derivation2, enc | COMMENT |
| LOW | …rg/bouncycastle/jce/provider/test/ECIESVectorTest.java | 181 | // c1.init(Cipher.ENCRYPT_MODE, Pub, new FixedSecureRandom(ephPrivateValue)); | COMMENT |
| LOW | …java/org/bouncycastle/jce/provider/test/ECIESTest.java | 381 | // Null parameters no longer supported | COMMENT |
| LOW | …java/org/bouncycastle/jce/provider/test/ECIESTest.java | 421 | } | COMMENT |
| LOW | …/bouncycastle/pqc/jcajce/provider/test/SLHDSATest.java | 221 | fail("no exception"); | COMMENT |
| LOW | …/bouncycastle/pqc/jcajce/provider/test/SLHDSATest.java | 241 | // | COMMENT |
| LOW | …/bouncycastle/pqc/jcajce/provider/test/SLHDSATest.java | 321 | // KeyPair kp = kpg.generateKeyPair(); | COMMENT |
| LOW | …/bouncycastle/pqc/jcajce/provider/test/SLHDSATest.java | 341 | // SLHDSAKey priv2 = (SLHDSAKey)keyFact.generatePrivate(new PKCS8EncodedKeySpec(priv.getEncoded())); | COMMENT |
| LOW | …/bouncycastle/pqc/jcajce/provider/test/SLHDSATest.java | 361 | // assertTrue(Arrays.areEqual(expSha3Priv, priv.getKeyData())); | COMMENT |
| LOW | …/bouncycastle/pqc/jcajce/provider/test/SLHDSATest.java | 381 | // KeyPairGenerator kpg = KeyPairGenerator.getInstance("SLH-DSA", "BC"); | COMMENT |
| LOW | …/bouncycastle/pqc/jcajce/provider/test/SLHDSATest.java | 401 | // KeyPairGenerator kpg = KeyPairGenerator.getInstance("SLH-DSA", "BC"); | COMMENT |
| LOW | …g/bouncycastle/pqc/jcajce/provider/test/MLDSATest.java | 1001 | // byte[] msg = Hex.decode("D81C4D8D734FCBFBEADE3D3F8A039FAA2A2C9957E835AD55B22E75BF57BB556AC8"); | COMMENT |
| LOW | …g/bouncycastle/pqc/jcajce/provider/test/MLDSATest.java | 1021 | // assertTrue(Arrays.areEqual(ASN1OctetString.getInstance(ASN1Sequence.getInstance(seq.getOctets()).getObjectAt(0 | COMMENT |
| LOW | …g/bouncycastle/pqc/jcajce/provider/test/MLDSATest.java | 1041 | // // check randomisation | COMMENT |
| LOW | …g/bouncycastle/pqc/jcajce/provider/test/MLDSATest.java | 1061 | // assertTrue(null == algP); | COMMENT |
| LOW | …g/bouncycastle/pqc/jcajce/provider/test/MLDSATest.java | 1081 | // | COMMENT |
| LOW | …g/bouncycastle/pqc/jcajce/provider/test/MLDSATest.java | 1101 | // SecureRandom katRandom = new NISTSecureRandom(Hex.decode("061550234D158C5EC95595FE04EF7A25767F2E24CC2BC479D09D | COMMENT |
| LOW | …g/bouncycastle/pqc/jcajce/provider/test/MLDSATest.java | 1121 | // | COMMENT |
| LOW | …g/bouncycastle/pqc/jcajce/provider/test/MLDSATest.java | 1141 | // | COMMENT |
| LOW | …/test/jdk1.5/org/bouncycastle/test/JVMVersionTest.java | 21 | COMMENT | |
| LOW | …k1.4/org/bouncycastle/jce/provider/test/ECIESTest.java | 341 | Cipher c2 = Cipher.getInstance(cipher); | COMMENT |
| LOW | …k1.4/org/bouncycastle/jce/provider/test/ECIESTest.java | 381 | c2.doFinal(tmp, 0, tmp.length); | COMMENT |
| LOW | …k1.4/org/bouncycastle/jce/provider/test/ECIESTest.java | 401 | // | COMMENT |
| LOW | …/test/jdk1.4/org/bouncycastle/test/JVMVersionTest.java | 21 | // | COMMENT |
| LOW | …ncycastle/jce/provider/CertPathValidatorUtilities.java | 901 | // { | COMMENT |
| LOW | …ncycastle/jce/provider/CertPathValidatorUtilities.java | 921 | // new ASN1InputStream(((X509Principal) it.next()) | COMMENT |
| LOW | …ouncycastle/jce/provider/PKIXCertPathValidatorSpi.java | 841 | // i as defined in the algorithm description | COMMENT |
| LOW | …ouncycastle/jce/provider/RFC3280CertPathUtilities.java | 2361 | intersection = validPolicyTree; | COMMENT |
| LOW | …cajce/provider/asymmetric/xmss/XMSSMTSignatureSpi.java | 241 | public boolean isSigningCapable() | COMMENT |
| LOW | …/jcajce/provider/asymmetric/xmss/XMSSSignatureSpi.java | 241 | public boolean isSigningCapable() | COMMENT |
| LOW | …stle/jcajce/provider/asymmetric/ec/GMSignatureSpi.java | 161 | // { | COMMENT |
| LOW | …stle/jcajce/provider/asymmetric/ec/GMSignatureSpi.java | 181 | // { | COMMENT |
| LOW | …stle/jcajce/provider/asymmetric/ec/GMSignatureSpi.java | 201 | } | COMMENT |
| LOW | …ncycastle/jce/provider/PKIXCertPathValidatorSpi_8.java | 321 | // initialize CertPathChecker's | COMMENT |
| LOW | …ncycastle/jce/provider/CertPathValidatorUtilities.java | 721 | // TODO: is not found although this should correctly add the rel name. selector of Sun is buggy here or PKI test | COMMENT |
| LOW | …ncycastle/jce/provider/CertPathValidatorUtilities.java | 741 | // try | COMMENT |
| LOW | …ouncycastle/jce/provider/RFC3280CertPathUtilities.java | 2321 | validPolicyTree = CertPathValidatorUtilities.removeChildlessPolicyNodes(validPolicyTree, policyNodes, n) | COMMENT |
| LOW | …/pqc/jcajce/provider/xmss/XMSSKeyPairGeneratorSpi.java | 61 | // the name to OID and n table is DigestUtil's, shared with XMSSMTKeyPairGeneratorSpi, | COMMENT |
| LOW | …astle/pqc/jcajce/provider/xmss/XMSSMTSignatureSpi.java | 241 | // null exactly when there is nothing left to hand back - never initialised for signing, or | COMMENT |
| LOW | …ncycastle/jce/provider/CertPathValidatorUtilities.java | 741 | // if (dp.getDistributionPoint().getType() == DistributionPointName.NAME_RELATIVE_TO_CRL_ISSUER) | COMMENT |
| LOW | …ncycastle/jce/provider/CertPathValidatorUtilities.java | 761 | // } | COMMENT |
| 384 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | HOWTO.md | 61 | #### Step 1: Create a Native Image Feature | COMMENT |
| LOW | HOWTO.md | 84 | #### Step 2: Configure Dependencies and Build | COMMENT |
| LOW⚡ | …a/org/bouncycastle/crypto/kems/SAKKEKEMSGenerator.java | 140 | // Step 1: Compute A = hashfn(s) | COMMENT |
| LOW⚡ | …a/org/bouncycastle/crypto/kems/SAKKEKEMSGenerator.java | 144 | // Step 2: Initialize h_0 to all-zero bytes of hashlen size | COMMENT |
| LOW⚡ | …a/org/bouncycastle/crypto/kems/SAKKEKEMSGenerator.java | 147 | // Step 3: Compute l = Ceiling(lg(n)/hashlen) | COMMENT |
| LOW⚡ | …a/org/bouncycastle/crypto/kems/SAKKEKEMSGenerator.java | 154 | // Step 4: Compute h_i and v_i | COMMENT |
| LOW | …a/org/bouncycastle/crypto/kems/SAKKEKEMSGenerator.java | 167 | // Step 6: v = v' mod n | COMMENT |
| LOW⚡ | …va/org/bouncycastle/crypto/kems/SAKKEKEMExtractor.java | 102 | // Step 1: Parse Encapsulated Data (R_bS, H) | COMMENT |
| LOW⚡ | …va/org/bouncycastle/crypto/kems/SAKKEKEMExtractor.java | 106 | // Step 2: Compute w = <R_bS, K_bS> using pairing | COMMENT |
| LOW⚡ | …va/org/bouncycastle/crypto/kems/SAKKEKEMExtractor.java | 109 | // Step 3: Compute SSV = H XOR HashToIntegerRange(w, 2^n) | COMMENT |
| LOW⚡ | …va/org/bouncycastle/crypto/kems/SAKKEKEMExtractor.java | 114 | // Step 4: Compute r = HashToIntegerRange(SSV || b) | COMMENT |
| LOW⚡ | …va/org/bouncycastle/crypto/kems/SAKKEKEMExtractor.java | 118 | // Step 5: Validate R_bS = [r]([b]P + Z_S). Only r is secret (it derives from the | COMMENT |
| LOW | …java/org/bouncycastle/crypto/signers/BIP340Signer.java | 351 | // Step 1: P = lift_x(int(pk)). The key arrived through a validating decode, so just normalise parity. | COMMENT |
| LOW⚡ | …n/java/org/bouncycastle/pqc/crypto/faest/FaestAES.java | 85 | // Step 1: copy the key into the first keyWords columns of the schedule. | COMMENT |
| LOW⚡ | …n/java/org/bouncycastle/pqc/crypto/faest/FaestAES.java | 95 | // Step 2: extend. | COMMENT |
| LOW⚡ | …uncycastle/pqc/crypto/xwing/XWingKeyPairGenerator.java | 43 | // Step 2: Expand seed to 96 bytes using SHAKE256 | COMMENT |
| LOW⚡ | …uncycastle/pqc/crypto/xwing/XWingKeyPairGenerator.java | 49 | // Step 3: Split expanded bytes | COMMENT |
| LOW | …uncycastle/pqc/crypto/xwing/XWingKeyPairGenerator.java | 69 | // Step 5: Create X-Wing keys | COMMENT |
| LOW | …uncycastle/pqc/crypto/xwing/XWingKeyPairGenerator.java | 83 | // Step 1: Generate 32-byte random seed | COMMENT |
| LOW⚡ | …/java/org/bouncycastle/pqc/crypto/hqc/ReedSolomon.java | 56 | // Step 1: Compute syndromes | COMMENT |
| LOW⚡ | …/java/org/bouncycastle/pqc/crypto/hqc/ReedSolomon.java | 59 | // Step 2: Compute the error locator polynomial sigma | COMMENT |
| LOW⚡ | …/java/org/bouncycastle/pqc/crypto/hqc/ReedSolomon.java | 63 | // Step 3: Compute roots using FFT | COMMENT |
| LOW⚡ | …/java/org/bouncycastle/pqc/crypto/hqc/ReedSolomon.java | 69 | // Step 4: Compute z(x) | COMMENT |
| LOW⚡ | …/java/org/bouncycastle/pqc/crypto/hqc/ReedSolomon.java | 73 | // Step 5: Compute errors | COMMENT |
| LOW⚡ | …/java/org/bouncycastle/pqc/crypto/hqc/ReedSolomon.java | 77 | // Step 6: Correct errors | COMMENT |
| LOW⚡ | …/bouncycastle/pqc/crypto/hqc/FastFourierTransform.java | 18 | // Step 1: Compute betas | COMMENT |
| LOW⚡ | …/bouncycastle/pqc/crypto/hqc/FastFourierTransform.java | 25 | // Step 2: Compute radix | COMMENT |
| LOW⚡ | …/bouncycastle/pqc/crypto/hqc/FastFourierTransform.java | 28 | // Step 3: Compute deltas | COMMENT |
| LOW | …ava/org/bouncycastle/pqc/crypto/snova/SnovaSigner.java | 213 | // Step 1: Create signed hash | COMMENT |
| LOW | …ava/org/bouncycastle/pqc/crypto/snova/SnovaSigner.java | 383 | // Step 1: Regenerate signed hash using public key seed, digest and salt | COMMENT |
| LOW⚡ | …ava/org/bouncycastle/pqc/crypto/snova/SnovaSigner.java | 394 | // Step 2: Convert signature to GF16 matrices | COMMENT |
| LOW⚡ | …ava/org/bouncycastle/pqc/crypto/snova/SnovaSigner.java | 398 | // Step 3: Evaluate signature using public key | COMMENT |
| LOW⚡ | …ava/org/bouncycastle/pqc/crypto/snova/SnovaSigner.java | 406 | // Step 4: Compare hashes | COMMENT |
| LOW⚡ | …ouncycastle/pqc/crypto/sqisign/Dim2Id2IsoClapotis.java | 175 | // Step 3: theta = beta2 · conj(beta1) / lideal.norm. | COMMENT |
| LOW⚡ | …ouncycastle/pqc/crypto/sqisign/Dim2Id2IsoClapotis.java | 182 | // Step 4: build per-order curve & basis copies. | COMMENT |
| LOW⚡ | …ouncycastle/pqc/crypto/sqisign/Dim2Id2IsoClapotis.java | 224 | // Step 6: kernel point T_*.P1 := basU, curve E01.E1 := fuCodomain.E1. | COMMENT |
| LOW⚡ | …ouncycastle/pqc/crypto/sqisign/Dim2Id2IsoClapotis.java | 232 | // Step 7: fixed_degree_isogeny on (E2, bas2) with degree v. | COMMENT |
| LOW⚡ | …ouncycastle/pqc/crypto/sqisign/Dim2Id2IsoClapotis.java | 287 | // Step 10: kernel T_*.P2 := bas2; E01.E2 := fvCodomain.E1. | COMMENT |
| LOW⚡ | …ouncycastle/pqc/crypto/sqisign/Dim2Id2IsoClapotis.java | 293 | // Step 11: double ker down by (TORSION_EVEN_POWER - exp) iterations. | COMMENT |
| LOW⚡ | …ouncycastle/pqc/crypto/sqisign/Dim2Id2IsoClapotis.java | 308 | // Step 12: pushed_points := (basU, identity) ready for the chain. | COMMENT |
| LOW⚡ | …ouncycastle/pqc/crypto/sqisign/Dim2Id2IsoClapotis.java | 313 | // Step 13: run the (2,2)-isogeny chain (randomized variant). | COMMENT |
| LOW | …ouncycastle/pqc/crypto/sqisign/Dim2Id2IsoClapotis.java | 141 | // Step 1: find_uv across the standard order and all alternate orders. | COMMENT |
| LOW | …ouncycastle/pqc/crypto/sqisign/Dim2Id2IsoClapotis.java | 159 | // Step 2: strip the common 2-adic valuation from (u, v). | COMMENT |
| LOW | …ouncycastle/pqc/crypto/sqisign/Dim2Id2IsoClapotis.java | 194 | // Step 5: fixed_degree_isogeny on (E1, bas1) with degree u. | COMMENT |
| LOW | …ouncycastle/pqc/crypto/sqisign/Dim2Id2IsoClapotis.java | 254 | // Step 8: scale theta by 1 / (d1 · n(ACI[index_order2-1])) mod 2^TORSION_EVEN_POWER. | COMMENT |
| LOW | …ouncycastle/pqc/crypto/sqisign/Dim2Id2IsoClapotis.java | 276 | // Step 9: apply theta to bas2 on fvCodomain.E1. | COMMENT |
| LOW | …ouncycastle/pqc/crypto/sqisign/Dim2Id2IsoClapotis.java | 337 | // Step 14: select the codomain component via Weil pairing. | COMMENT |
| LOW | …ouncycastle/pqc/crypto/sqisign/Dim2Id2IsoClapotis.java | 360 | // Step 15: scale beta1 by (u · d1 · n(CONNECTING_IDEALS[index_order1]))^{-1} mod 2^TORSION_EVEN_POWER. | COMMENT |
| LOW | …ouncycastle/pqc/crypto/sqisign/Dim2Id2IsoClapotis.java | 381 | // Step 16: apply beta1 to the basis on codomain (using order index 0). | COMMENT |
| LOW | …org/bouncycastle/cert/plants/MerkleTreePrimitives.java | 147 | // Step 2: an empty subtree has an empty proof and the hash of the empty string. | COMMENT |
| LOW⚡ | …org/bouncycastle/cert/plants/MerkleTreePrimitives.java | 160 | // Step 3: end == n → subtree is directly contained | COMMENT |
| LOW⚡ | …org/bouncycastle/cert/plants/MerkleTreePrimitives.java | 170 | // Step 4: move up until fn == sn or LSB(sn) is not set | COMMENT |
| LOW | …cycastle/cert/plants/MTCSignatureVerifierProvider.java | 149 | // Step 1: the TBSCertificate's signature field is id-alg-mtcProof with absent parameters. | COMMENT |
| LOW | …cycastle/cert/plants/MTCSignatureVerifierProvider.java | 170 | // Step 2: decode the signatureValue as an MTCProof. | COMMENT |
| LOW | …castle/cert/plants/MerkleTreeCertificateValidator.java | 423 | // Step 1: signature algorithm must be id-alg-mtcProof with absent parameters. | COMMENT |
| LOW⚡ | …castle/cert/plants/MerkleTreeCertificateValidator.java | 436 | // Step 2: decode the signatureValue as an MTCProof. A BIT STRING with | COMMENT |
| LOW⚡ | …castle/cert/plants/MerkleTreeCertificateValidator.java | 444 | // Step 3: the serial number must be positive and fit in a uint64. | COMMENT |
| LOW | …castle/cert/plants/MerkleTreeCertificateValidator.java | 455 | // Step 4: reject serials in any revoked range (Section 7.5), checked | COMMENT |
| LOW | …castle/cert/plants/MerkleTreeCertificateValidator.java | 476 | // Step 5: decompose the serial number per Section 6.2 of the draft: | COMMENT |
| LOW | …castle/cert/plants/MerkleTreeCertificateValidator.java | 490 | // Step 10: evaluate the inclusion proof to recover the expected subtree hash. | COMMENT |
| 4 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …a/org/bouncycastle/crypto/kems/SAKKEKEMSGenerator.java | 140 | // Step 1: Compute A = hashfn(s) | COMMENT |
| LOW⚡ | …a/org/bouncycastle/crypto/kems/SAKKEKEMSGenerator.java | 144 | // Step 2: Initialize h_0 to all-zero bytes of hashlen size | COMMENT |
| LOW⚡ | …a/org/bouncycastle/crypto/kems/SAKKEKEMSGenerator.java | 147 | // Step 3: Compute l = Ceiling(lg(n)/hashlen) | COMMENT |
| LOW⚡ | …a/org/bouncycastle/crypto/kems/SAKKEKEMSGenerator.java | 154 | // Step 4: Compute h_i and v_i | COMMENT |
| LOW | …a/org/bouncycastle/crypto/kems/SAKKEKEMSGenerator.java | 167 | // Step 6: v = v' mod n | COMMENT |
| LOW⚡ | …va/org/bouncycastle/crypto/kems/SAKKEKEMExtractor.java | 102 | // Step 1: Parse Encapsulated Data (R_bS, H) | COMMENT |
| LOW⚡ | …va/org/bouncycastle/crypto/kems/SAKKEKEMExtractor.java | 106 | // Step 2: Compute w = <R_bS, K_bS> using pairing | COMMENT |
| LOW⚡ | …va/org/bouncycastle/crypto/kems/SAKKEKEMExtractor.java | 109 | // Step 3: Compute SSV = H XOR HashToIntegerRange(w, 2^n) | COMMENT |
| LOW⚡ | …va/org/bouncycastle/crypto/kems/SAKKEKEMExtractor.java | 114 | // Step 4: Compute r = HashToIntegerRange(SSV || b) | COMMENT |
| LOW⚡ | …va/org/bouncycastle/crypto/kems/SAKKEKEMExtractor.java | 118 | // Step 5: Validate R_bS = [r]([b]P + Z_S). Only r is secret (it derives from the | COMMENT |
| LOW | …java/org/bouncycastle/crypto/signers/BIP340Signer.java | 351 | // Step 1: P = lift_x(int(pk)). The key arrived through a validating decode, so just normalise parity. | COMMENT |
| LOW⚡ | …n/java/org/bouncycastle/pqc/crypto/faest/FaestAES.java | 85 | // Step 1: copy the key into the first keyWords columns of the schedule. | COMMENT |
| LOW⚡ | …n/java/org/bouncycastle/pqc/crypto/faest/FaestAES.java | 95 | // Step 2: extend. | COMMENT |
| LOW⚡ | …uncycastle/pqc/crypto/xwing/XWingKeyPairGenerator.java | 43 | // Step 2: Expand seed to 96 bytes using SHAKE256 | COMMENT |
| LOW⚡ | …uncycastle/pqc/crypto/xwing/XWingKeyPairGenerator.java | 49 | // Step 3: Split expanded bytes | COMMENT |
| LOW | …uncycastle/pqc/crypto/xwing/XWingKeyPairGenerator.java | 69 | // Step 5: Create X-Wing keys | COMMENT |
| LOW | …uncycastle/pqc/crypto/xwing/XWingKeyPairGenerator.java | 83 | // Step 1: Generate 32-byte random seed | COMMENT |
| LOW⚡ | …/java/org/bouncycastle/pqc/crypto/hqc/ReedSolomon.java | 56 | // Step 1: Compute syndromes | COMMENT |
| LOW⚡ | …/java/org/bouncycastle/pqc/crypto/hqc/ReedSolomon.java | 59 | // Step 2: Compute the error locator polynomial sigma | COMMENT |
| LOW⚡ | …/java/org/bouncycastle/pqc/crypto/hqc/ReedSolomon.java | 63 | // Step 3: Compute roots using FFT | COMMENT |
| LOW⚡ | …/java/org/bouncycastle/pqc/crypto/hqc/ReedSolomon.java | 69 | // Step 4: Compute z(x) | COMMENT |
| LOW⚡ | …/java/org/bouncycastle/pqc/crypto/hqc/ReedSolomon.java | 73 | // Step 5: Compute errors | COMMENT |
| LOW⚡ | …/java/org/bouncycastle/pqc/crypto/hqc/ReedSolomon.java | 77 | // Step 6: Correct errors | COMMENT |
| LOW⚡ | …/bouncycastle/pqc/crypto/hqc/FastFourierTransform.java | 18 | // Step 1: Compute betas | COMMENT |
| LOW⚡ | …/bouncycastle/pqc/crypto/hqc/FastFourierTransform.java | 25 | // Step 2: Compute radix | COMMENT |
| LOW⚡ | …/bouncycastle/pqc/crypto/hqc/FastFourierTransform.java | 28 | // Step 3: Compute deltas | COMMENT |
| LOW⚡ | …/bouncycastle/pqc/crypto/hqc/FastFourierTransform.java | 35 | // Step 5: | COMMENT |
| LOW | …ava/org/bouncycastle/pqc/crypto/snova/SnovaSigner.java | 213 | // Step 1: Create signed hash | COMMENT |
| LOW | …ava/org/bouncycastle/pqc/crypto/snova/SnovaSigner.java | 383 | // Step 1: Regenerate signed hash using public key seed, digest and salt | COMMENT |
| LOW⚡ | …ava/org/bouncycastle/pqc/crypto/snova/SnovaSigner.java | 394 | // Step 2: Convert signature to GF16 matrices | COMMENT |
| LOW⚡ | …ava/org/bouncycastle/pqc/crypto/snova/SnovaSigner.java | 398 | // Step 3: Evaluate signature using public key | COMMENT |
| LOW⚡ | …ava/org/bouncycastle/pqc/crypto/snova/SnovaSigner.java | 406 | // Step 4: Compare hashes | COMMENT |
| LOW⚡ | …ouncycastle/pqc/crypto/sqisign/Dim2Id2IsoClapotis.java | 175 | // Step 3: theta = beta2 · conj(beta1) / lideal.norm. | COMMENT |
| LOW⚡ | …ouncycastle/pqc/crypto/sqisign/Dim2Id2IsoClapotis.java | 182 | // Step 4: build per-order curve & basis copies. | COMMENT |
| LOW⚡ | …ouncycastle/pqc/crypto/sqisign/Dim2Id2IsoClapotis.java | 224 | // Step 6: kernel point T_*.P1 := basU, curve E01.E1 := fuCodomain.E1. | COMMENT |
| LOW⚡ | …ouncycastle/pqc/crypto/sqisign/Dim2Id2IsoClapotis.java | 232 | // Step 7: fixed_degree_isogeny on (E2, bas2) with degree v. | COMMENT |
| LOW⚡ | …ouncycastle/pqc/crypto/sqisign/Dim2Id2IsoClapotis.java | 287 | // Step 10: kernel T_*.P2 := bas2; E01.E2 := fvCodomain.E1. | COMMENT |
| LOW⚡ | …ouncycastle/pqc/crypto/sqisign/Dim2Id2IsoClapotis.java | 293 | // Step 11: double ker down by (TORSION_EVEN_POWER - exp) iterations. | COMMENT |
| LOW⚡ | …ouncycastle/pqc/crypto/sqisign/Dim2Id2IsoClapotis.java | 308 | // Step 12: pushed_points := (basU, identity) ready for the chain. | COMMENT |
| LOW⚡ | …ouncycastle/pqc/crypto/sqisign/Dim2Id2IsoClapotis.java | 313 | // Step 13: run the (2,2)-isogeny chain (randomized variant). | COMMENT |
| LOW | …ouncycastle/pqc/crypto/sqisign/Dim2Id2IsoClapotis.java | 141 | // Step 1: find_uv across the standard order and all alternate orders. | COMMENT |
| LOW | …ouncycastle/pqc/crypto/sqisign/Dim2Id2IsoClapotis.java | 159 | // Step 2: strip the common 2-adic valuation from (u, v). | COMMENT |
| LOW | …ouncycastle/pqc/crypto/sqisign/Dim2Id2IsoClapotis.java | 194 | // Step 5: fixed_degree_isogeny on (E1, bas1) with degree u. | COMMENT |
| LOW | …ouncycastle/pqc/crypto/sqisign/Dim2Id2IsoClapotis.java | 254 | // Step 8: scale theta by 1 / (d1 · n(ACI[index_order2-1])) mod 2^TORSION_EVEN_POWER. | COMMENT |
| LOW | …ouncycastle/pqc/crypto/sqisign/Dim2Id2IsoClapotis.java | 276 | // Step 9: apply theta to bas2 on fvCodomain.E1. | COMMENT |
| LOW | …ouncycastle/pqc/crypto/sqisign/Dim2Id2IsoClapotis.java | 337 | // Step 14: select the codomain component via Weil pairing. | COMMENT |
| LOW | …ouncycastle/pqc/crypto/sqisign/Dim2Id2IsoClapotis.java | 360 | // Step 15: scale beta1 by (u · d1 · n(CONNECTING_IDEALS[index_order1]))^{-1} mod 2^TORSION_EVEN_POWER. | COMMENT |
| LOW | …ouncycastle/pqc/crypto/sqisign/Dim2Id2IsoClapotis.java | 381 | // Step 16: apply beta1 to the basis on codomain (using order index 0). | COMMENT |
| LOW | …org/bouncycastle/cert/plants/MerkleTreePrimitives.java | 147 | // Step 2: an empty subtree has an empty proof and the hash of the empty string. | COMMENT |
| LOW⚡ | …org/bouncycastle/cert/plants/MerkleTreePrimitives.java | 160 | // Step 3: end == n → subtree is directly contained | COMMENT |
| LOW⚡ | …org/bouncycastle/cert/plants/MerkleTreePrimitives.java | 170 | // Step 4: move up until fn == sn or LSB(sn) is not set | COMMENT |
| LOW | …cycastle/cert/plants/MTCSignatureVerifierProvider.java | 149 | // Step 1: the TBSCertificate's signature field is id-alg-mtcProof with absent parameters. | COMMENT |
| LOW | …cycastle/cert/plants/MTCSignatureVerifierProvider.java | 170 | // Step 2: decode the signatureValue as an MTCProof. | COMMENT |
| LOW | …castle/cert/plants/MerkleTreeCertificateValidator.java | 423 | // Step 1: signature algorithm must be id-alg-mtcProof with absent parameters. | COMMENT |
| LOW⚡ | …castle/cert/plants/MerkleTreeCertificateValidator.java | 436 | // Step 2: decode the signatureValue as an MTCProof. A BIT STRING with | COMMENT |
| LOW⚡ | …castle/cert/plants/MerkleTreeCertificateValidator.java | 444 | // Step 3: the serial number must be positive and fit in a uint64. | COMMENT |
| LOW | …castle/cert/plants/MerkleTreeCertificateValidator.java | 455 | // Step 4: reject serials in any revoked range (Section 7.5), checked | COMMENT |
| LOW | …castle/cert/plants/MerkleTreeCertificateValidator.java | 476 | // Step 5: decompose the serial number per Section 6.2 of the draft: | COMMENT |
| LOW | …castle/cert/plants/MerkleTreeCertificateValidator.java | 490 | // Step 10: evaluate the inclusion proof to recover the expected subtree hash. | COMMENT |
| LOW | …castle/cert/plants/MerkleTreeCertificateValidator.java | 518 | // Step 11: if any trusted subtree matches (log_number, start, end), the | COMMENT |
| 1 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …bouncycastle/jce/provider/MultiValuedRDNEmailTest.java | 72 | new String[]{"John Doe", "multi@example.com"}); | CODE |
| LOW⚡ | …bouncycastle/jce/provider/MultiValuedRDNEmailTest.java | 80 | new String[]{"John Doe", "second@example.com"}); | CODE |
| LOW⚡ | …bouncycastle/jce/provider/MultiValuedRDNEmailTest.java | 86 | none.addRDN(BCStyle.CN, "John Doe"); | CODE |
| LOW | …bouncycastle/jce/provider/MultiValuedRDNEmailTest.java | 131 | intName, intKp.getPrivate(), multiValuedSubject("user@example.com"), "SHA256withRSA", | CODE |
| LOW | …bouncycastle/jce/provider/MultiValuedRDNEmailTest.java | 178 | new String[]{"John Doe", email}); | CODE |
| LOW⚡ | …ycastle/jce/provider/test/PKIXNameConstraintsTest.java | 42 | { "test@test.com", "test@test.com", "test@test.com", "test@abc.test.com", | CODE |
| LOW⚡ | …ycastle/jce/provider/test/PKIXNameConstraintsTest.java | 43 | "test@test.com", "test@test.com", ".test.com", ".test.com", | CODE |
| LOW⚡ | …ycastle/jce/provider/test/PKIXNameConstraintsTest.java | 48 | { "test@test.abc.com", "test@test.com", ".test.com", ".test.com", | CODE |
| LOW⚡ | …ycastle/jce/provider/test/PKIXNameConstraintsTest.java | 49 | "test.com", "test1.com", "test@test.com", ".test.com", | CODE |
| LOW⚡ | …ycastle/jce/provider/test/PKIXNameConstraintsTest.java | 54 | { null, "test@test.com", null, "test@abc.test.com", "test@test.com", null, | CODE |
| LOW⚡ | …ycastle/jce/provider/test/PKIXNameConstraintsTest.java | 60 | { "test@test.com", "test@test.abc.com" }, | CODE |
| LOW⚡ | …ycastle/jce/provider/test/PKIXNameConstraintsTest.java | 61 | { "test@test.com" }, | CODE |
| LOW⚡ | …ycastle/jce/provider/test/PKIXNameConstraintsTest.java | 62 | { "test@test.com", ".test.com" }, | CODE |
| LOW⚡ | …ycastle/jce/provider/test/PKIXNameConstraintsTest.java | 65 | { "test@test.com", "test1.com" }, | CODE |
| LOW⚡ | …ycastle/jce/provider/test/PKIXNameConstraintsTest.java | 66 | { ".test.com", "test@test.com" }, | CODE |
| LOW | …test/java/org/bouncycastle/asn1/test/X509NameTest.java | 152 | testEncodingIA5String(X509Name.EmailAddress, "test@test.com"); | CODE |
| LOW | …test/java/org/bouncycastle/asn1/test/X500NameTest.java | 226 | testEncodingIA5String(BCStyle.EmailAddress, "test@test.com"); | CODE |
| LOW | …ncycastle/mail/smime/test/SignedMailValidatorTest.java | 182 | validateEmailBinding(signDN, "ian@example.org").isValidSignature()); | CODE |
| LOW | …ncycastle/mail/smime/test/SignedMailValidatorTest.java | 193 | checkNonAsciiEmailRejected("Kate@example.org", "kate@example.org"); | CODE |
| LOW | …ncycastle/mail/smime/test/SignedMailValidatorTest.java | 194 | checkNonAsciiEmailRejected("İan@example.org", "ian@example.org"); | CODE |
| LOW | …src/test/java/org/bouncycastle/cert/test/DANETest.java | 60 | DANEEntry entry = daneEntryFactory.createEntry("test@test.com", new X509CertificateHolder(randomCert)); | CODE |
| LOW | …src/test/java/org/bouncycastle/cert/test/DANETest.java | 88 | DANEEntry entry = daneEntryFactory.createEntry("test@test.com", new X509CertificateHolder(randomCert)); | CODE |
| LOW | …src/test/java/org/bouncycastle/cert/test/DANETest.java | 164 | isEquals("9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15._smimecert.test.com", selectorFactory.createS | CODE |
| LOW | …src/test/java/org/bouncycastle/cert/test/DANETest.java | 174 | byte[] rdata = daneEntryFactory.createEntry("test@test.com", new X509CertificateHolder(randomCert)).getRDATA(); | CODE |
| LOW | …src/test/java/org/bouncycastle/cert/test/DANETest.java | 225 | records.add(daneEntryFactory.createEntry("test@test.com", DANEEntry.CERT_USAGE_ACCEPT, cert)); | CODE |
| LOW | …src/test/java/org/bouncycastle/cert/test/DANETest.java | 226 | records.add(daneEntryFactory.createEntry("test@test.com", DANEEntry.CERT_USAGE_PKIX_VALIDATE, cert)); | CODE |
| LOW | …src/test/java/org/bouncycastle/cert/test/DANETest.java | 257 | DANEEntrySelector selector = new DANEEntrySelectorFactory(new TruncatingDigestCalculator(new SHA256DigestCalcula | CODE |
| LOW | …src/test/java/org/bouncycastle/cert/test/DANETest.java | 263 | List certs = new DANECertificateFetcher(fetcherFactory, new TruncatingDigestCalculator(new SHA256DigestCalculato | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | test/cisco/createCA.sh | 62 | # Create a 3rd party (existing) CA certificate | COMMENT |
| MEDIUM | test/cisco/createCA.sh | 93 | # Create a certificate for our est server | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …n/java/org/bouncycastle/x509/PKIXCertPathReviewer.java | 245 | * Creates an empty PKIXCertPathReviewer. Don't forget to call init() to initialize the object. | COMMENT |
| LOW | …uncycastle/crypto/generators/Argon2BytesGenerator.java | 294 | /* Don't forget to generate the first block of addresses: */ | COMMENT |
| LOW | …org/bouncycastle/pkix/jcajce/PKIXCertPathReviewer.java | 247 | * Creates an empty PKIXCertPathReviewer. Don't forget to call init() to initialize the object. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …rg/bouncycastle/pqc/crypto/sqisign/Dim2Id2IsoLvl1.java | 49 | // action_gen2 row indicates the scaffold default). | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …test/java/org/bouncycastle/cert/cmp/test/AllTests.java | 509 | // ── NORMAL: legitimately signed with the private key ──────────────── | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ouncycastle/openpgp/api/OpenPGPMessageInputStream.java | 601 | private class LiteralDataHandler | CODE |
| LOW | …ouncycastle/openpgp/api/OpenPGPMessageInputStream.java | 653 | private class CompressedDataHandler | CODE |
| LOW | …ouncycastle/openpgp/api/OpenPGPMessageInputStream.java | 691 | private class EncryptedDataHandler | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …est/java/org/bouncycastle/tls/DTLS13KeyUpdateTest.java | 38 | /** {@link AbstractTlsPeer#getHandshakeResendTimeMillis()}, which the harness's peers do not override. */ | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .claude/skills/build-jdk13-docker/build-jdk13.sh | 8 | # Usage: | COMMENT |