Deprecated API

Check for 'ASN1BitStringParser' instead

Check for 'ASN1SequenceParser' instead

Use DERExternal#DERExternal(DERSequence) instead.

Check for 'ASN1BitStringParser' instead

Check for 'ASN1SequenceParser' instead

use getHash(), the internal encoding is now an OCTET STRING

Use getStatusStringUTF8() instead.

Use getCommentUTF8() instead.

use getOtherCert and getOtherTag to make sure message is really what it should be.

use (type, otherCert) constructor

use lower case version

use lower case version

use lower case version

use lower case version

use lower case version

use lower case version

use lower case version

Use getStringAtUTF8(int) instead.

use getInstance() method.

use X500Name constructor

Use getFileNameUTF8() instead.

use version taking a SubjectKeyIdentifier

Use getPublicKeyData() instead.

use getCRL()

Use getDataUriIA5() instead.

use method taking Extensions

use getCountry()

Use getContentDescriptionUTF8() instead.

Use getCrlUrlIA5() instead.

use method taking ASN1GeneralizedTime and Extensions

use getInstance()

use id_aa_ets_commitmentType instead

use id_aa_ets_sigPolicyId instead

use smime_alg instead

use pbeWithSHAAnd40BitRC2_CBC

use RSAPrivateKey

use constructor which takes orderBitLength to guarantee correct encoding.

Use getParametersObject() instead and getInstance methods or similar to get the object at the desired type.

Use EncryptionInfo#getInstance(Object) instead.

use the getInstance() method that takes a style.

create the extension using org.bouncycastle.cert.X509ExtensionUtils

use lower case version

use lower case version

use lower case version

use lower case version

use lower case version

Use getValidityObject instead.

use KeyPurposeId[] constructor.

use X500Name constructor.

use PolicyQualifierInfo.getInstance()

use lower case version

use lower case version

use lower case version

use lower case version

use lower case version

use getAlgorithm()

use TBSCertificate

use X500Name method

use X500Name method

use X500Name method

use id_at_role

use Extension

use X509Extension value.

use X509Extension value.

use X509Extension value.

use X509Extension value.

use X509Extension value.

use X509Extension value.

use X509Extension value.

use X509Extension value.

use X509Extension value.

use X509Extension value.

use X509Extension value.

use X509Extension value.

use X509Extension value.

use X509Extension value.

use X509Extension value.

use X509Extension value.

use Extensions

use org.bouncycastle.asn1.x500.X500Name.

use a X500NameStyle

use a X500NameStyle

use a X500NameStyle

use a X500NameStyle

use an ordered constructor! The hashtable ordering is rarely correct

use X500Name, X500NameBuilder

use X500Name, X500NameBuilder

use X500Name, X500NameBuilder

use X500Name, X500NameBuilder

Use CRMFObjectIdentifiers.passwordBasedMac instead

use DomainParameters

use AEADUtils.getIVLength()

use appropriate methods in Builder instead

use Builder#clearHeaders() instead.

use skipMarkerAndPaddingPackets

non-standard

non-standard

non-standard

Will be removed

use EDDSA_LEGACY instead.

use RSA_GENERAL instead.

use versioned PublicKeyPacket(int, int, Date, BCPGKey) instead

use versioned PublicSubkeyPacket(int, int, Date, BCPGKey) instead

use SALTED_AND_ITERATED or ARGON_2 instead.

use createVersion1Packet()

Will be removed

Will be removed

use getVersionNumber

no longer required.

use the constructor on DefaultBufferedBlockCipher.

Will be removed

use Ascon Hash 256 Digest

use NOT_STRICT_LENGTH_ENABLED_PROPERTY

unfortunately this class is has a few side channel issues. In an environment where encryption/decryption may be closely observed it should not be used.

Will be removed

use ECIESKEMGenerator, ECIESKEMExtractor

use ECIESKEMExtractor

use ECIESKEMGenerator

use CBCBlockCipherMac

uses incorrect pad for SHA-512 and SHA-384 use HMac.

use the CCMBlockCipher.newInstance() static method.

use the GCMBlockCipher.newInstance() static method.

use org.bouncycastle.crypto.paddings.PaddedBufferedBlockCipher instead.

use AEADParameters

use overload that doesn't take a public key

use ISOTrailers

use ISOTrailers

use ISOTrailers

use ISOTrailers

use ISOTrailers

use ISOTrailers

use ISOTrailers

use ISOTrailers

use ISOTrailers

use ISOTrailers

use ISOTrailers

use ISOTrailers

use org.bouncycastle.util.pack

Use 'getValidityDate' instead (which can return null).

replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)

replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)

replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)

replaced with "#engineSetParameter(java.security.spec.AlgorithmParameterSpec)"

replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)

replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)

replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)

replaced with engineSetParameter(java.security.spec.AlgorithmParameterSpec)

replaced with engineGetParameters()

No longer used

use getSBox()

Use createMessageDigest instead

use AlgorithmParametersUtils.extractParameters(AlgorithmParameters params)

use AlgorithmParametersUtils.loadParameters(AlgorithmParameters params, ASN1Encodable sParams)

Use createMessageDigest instead

use the X500Name class.

use MQVParameterSpec for passing the ephemeral key.

use org.bouncycastle.jcajce.config.PKCS12StoreParameter

use CertificateFactory or the PEMParser in the openssl package (pkix jar).

use org.bouncycastle.jcajce.spec.GOST28147ParameterSpec

Use openStream(URL) instead

use constructor taking order/cofactor

use JcaSignedPublicKeyAndChallenge.getPublicKey()

use ContentVerifierProvider method

use getValidSeconds(): greater than version 3 keys may be valid for less than a day.

will be removed in 1.74, use PGPEncryptedDataList.extractSessionKeyEncryptedData() and then apply the dataDecryptorFactory.

use org.bouncycastle.gpg.SExprParser - it will also allow you to verify the protection checksum if it is available.

use PGPSignatureGenerator(PGPContentSignerBuilder, PGPPublicKey) instead.

use addEmbeddedSignature(boolean, PGPSignature) instead.

use addNotationData(boolean, boolean, String, String) instead.

the use of this subpacket is deprecated in LibrePGP

use addSignerUserID(boolean, String) instead.

use getNotationDataOccurrences()

unused

use recoverSessionData(PublicKeyEncSessionPacket, InputStreamPacket) instead.

use WILDCARD_KEYID

this class is no longer required and will be removed.

use versioned getPGPPublicKey(int, int, PublicKey, Date) instead.

use versioned JcaPGPKeyPair(int, int, PGPAlgorithmParameters, KeyPair, Date) instead

no longer used.

provide an AlgorithmIdentifier.

use getInstance()

use xmss_mt_SHA256ph

use xmss_mt_SHAKE128ph

use xmss_SHA256ph

use xmss_SHAKE128ph

use getInstance()

obsolete to be removed

obsolete to be removed

obsolete to be removed

obsolete to be removed

use getEncoded() - this method will become private.

use getEncoded() - this method will become private.

use getEncoded() this method will become private.

it's better to avoid this and use extractKeyShard methods where possible.

replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)

replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)

replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)

replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)

replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)

replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)

replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)

replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)

replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)

use LMSKeyGenParameterSpec

Remove when Post-Quantum Standardization project has finished and standard is published.

use MathFunctions.log(double) instead

use MathFunctions.logBKM(double) instead

Will be removed.

Use getVersion() instead.

Will be removed.

Experimental API (unstable): unofficial value from Open Quantum Safe project.

Use getContentLimit instead

Use getPRFAlgorithm() instead.

Use version without defaultValue instead

No longer called by the protocol classes. Can call TlsUtils#checkPeerSigAlgs(TlsContext, TlsCertificate[]) once a complete CertPath has been determined (i.e. as part of chain validation).

Use TlsUtils#generateEncryptedPreMasterSecret(TlsContext, TlsEncryptor, OutputStream) instead.

Will be removed

Use isValidVersionForCipherSuite(int, ProtocolVersion) instead.

Use version with extra 'nonceGeneratorFactory' parameter

Use constructor without 'publicKey' parameter.

use method taking ASN1ObjectIdentifier

use method taking ANS1ObjectIdentifier or AlgorithmIdentifier

use R_HUNDREDTHS_OF_SECONDS - this field will be deleted!!

use the SHAKE only version.

Will be removed

use org.bouncycastle.cert.AttributeCertificateIssuer

use PKIXExtendedParameters

use addStore().

see X509CertificateHolder class in the PKIX package.

use X509CertificateHolder class in the PKIX package.

use CollectionStore - this class will be removed.

use generate(key, "BC")

use generate()

use org.bouncycastle.cert.X509AttributeCertificateHolder

use generate(key, "BC")

use generate()

use org.bouncycastle.cert.X509v3CertificateBuilder.

use generate(key, random, "BC")

use generate()

use constructor that takes Extension

use org.bouncycastle.cert.jcajce.JcaX509ExtensionUtils.parseExtensionValue()

use org.bouncycastle.cert.jcajce.JcaX509ExtensionUtils.getSubjectAlternativeNames()