Deprecated API

Contents

• Interfaces
• Classes
• Fields
• Methods
• Constructors

Deprecated Interfaces

Interface	Description
org.bouncycastle.jce.interfaces.ElGamalPublicKey	just use DHPublicKey.

Deprecated Classes

Class	Description
org.bouncycastle.asn1.OIDTokenizer	Will be removed
org.bouncycastle.jcajce.provider.util.SecretKeyUtil	class appears to be no longer in use, maybe getting imported by others though.
org.bouncycastle.jce.PKCS12Util	Replaced by invalid reference org.bouncycastle.pkcs.util.PKCS12Util ; this class does not understand RFC 9579 PBMAC1-protected PKCS#12 files (it throws UnsupportedOperationException for them) and will be removed in a future release.
org.bouncycastle.jce.provider.JDKPKCS12StoreParameter	use org.bouncycastle.jcajce.config.PKCS12StoreParameter
org.bouncycastle.jce.provider.X509CertificateObject	Do not use this class directly - either use org.bouncycastle.cert (bcpkix) or CertificateFactory.
org.bouncycastle.jce.provider.X509CRLObject	Do not use this class directly - either use org.bouncycastle.cert (bcpkix) or CertificateFactory.
org.bouncycastle.pqc.crypto.mldsa.HashMLDSASigner	use org.bouncycastle.crypto.signers.HashMLDSASigner
org.bouncycastle.pqc.crypto.mldsa.MLDSAKeyGenerationParameters	use org.bouncycastle.crypto.params.MLDSAKeyGenerationParameters
org.bouncycastle.pqc.crypto.mldsa.MLDSAKeyPairGenerator	use org.bouncycastle.crypto.generators.MLDSAKeyPairGenerator
org.bouncycastle.pqc.crypto.mldsa.MLDSAKeyParameters	use org.bouncycastle.crypto.params.MLDSAKeyParameters
org.bouncycastle.pqc.crypto.mldsa.MLDSAParameters	use org.bouncycastle.crypto.params.MLDSAParameters
org.bouncycastle.pqc.crypto.mldsa.MLDSAPrivateKeyParameters	use org.bouncycastle.crypto.params.MLDSAPrivateKeyParameters
org.bouncycastle.pqc.crypto.mldsa.MLDSAPublicKeyParameters	use org.bouncycastle.crypto.params.MLDSAPublicKeyParameters
org.bouncycastle.pqc.crypto.mldsa.MLDSASigner	use org.bouncycastle.crypto.signers.MLDSASigner
org.bouncycastle.pqc.crypto.mlkem.MLKEMExtractor	use org.bouncycastle.crypto.kems.MLKEMExtractor
org.bouncycastle.pqc.crypto.mlkem.MLKEMGenerator	use org.bouncycastle.crypto.kems.MLKEMGenerator
org.bouncycastle.pqc.crypto.mlkem.MLKEMKeyGenerationParameters	use org.bouncycastle.crypto.params.MLKEMKeyGenerationParameters
org.bouncycastle.pqc.crypto.mlkem.MLKEMKeyPairGenerator	use org.bouncycastle.crypto.generators.MLKEMKeyPairGenerator
org.bouncycastle.pqc.crypto.mlkem.MLKEMKeyParameters	use org.bouncycastle.crypto.params.MLKEMKeyParameters
org.bouncycastle.pqc.crypto.mlkem.MLKEMParameters	use org.bouncycastle.crypto.params.MLKEMParameters
org.bouncycastle.pqc.crypto.mlkem.MLKEMPrivateKeyParameters	use org.bouncycastle.crypto.params.MLKEMKeyPrivateKeyParameters
org.bouncycastle.pqc.crypto.mlkem.MLKEMPublicKeyParameters	use org.bouncycastle.crypto.params.MLKEMKeyPublicKeyParameters
org.bouncycastle.pqc.crypto.slhdsa.HashSLHDSASigner	use org.bouncycastle.crypto.signers.HashSLHDSASigner
org.bouncycastle.pqc.crypto.slhdsa.SLHDSAEngine	use org.bouncycastle.crypto.signers.slhdsa.SLHDSASigner
org.bouncycastle.pqc.crypto.slhdsa.SLHDSAKeyGenerationParameters	use org.bouncycastle.crypto.params.SLHDSAKeyGenerationParameters
org.bouncycastle.pqc.crypto.slhdsa.SLHDSAKeyPairGenerator	use org.bouncycastle.crypto.generators.SLHDSAKeyPairGenerator
org.bouncycastle.pqc.crypto.slhdsa.SLHDSAKeyParameters	use org.bouncycastle.crypto.params.SLHDSAKeyParameters
org.bouncycastle.pqc.crypto.slhdsa.SLHDSAPrivateKeyParameters	use org.bouncycastle.crypto.params.SLHDSAPrivateKeyParameters
org.bouncycastle.pqc.crypto.slhdsa.SLHDSAPublicKeyParameters	use org.bouncycastle.crypto.params.SLHDSAPublicKeyParameters
org.bouncycastle.pqc.crypto.slhdsa.SLHDSASigner	use org.bouncycastle.crypto.signers.SLHDSASigner
org.bouncycastle.pqc.jcajce.provider.util.SpecUtil	use org.bouncycastle.jcajce.util.SpecUtil

Deprecated Fields

Field	Description
org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers.id_aa_commitmentType	use id_aa_ets_commitmentType instead
org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers.id_aa_otherSigCert	use id_aa_ets_otherSigCert instead
org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers.id_aa_signerLocation	use id_aa_ets_signerLocation instead
org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers.id_aa_sigPolicyId	use id_aa_ets_sigPolicyId instead
org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers.id_alg	use smime_alg instead
org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers.id_spq	use id_spq_oid instead
org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers.pbewithSHAAnd40BitRC2_CBC	use pbeWithSHAAnd40BitRC2_CBC
org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers.x509certType	use x509Certificate instead
org.bouncycastle.asn1.x500.style.BCStyle.SN	use SERIALNUMBER or SURNAME
org.bouncycastle.asn1.x509.X509AttributeIdentifiers.id_at_privateKeyStatement	use statementOfPossession
org.bouncycastle.asn1.x509.X509AttributeIdentifiers.RoleSyntax	use id_at_role
org.bouncycastle.asn1.x509.X509ObjectIdentifiers.id_PasswordBasedMac	Use CRMFObjectIdentifiers.passwordBasedMac instead
org.bouncycastle.crypto.encodings.PKCS1Encoding.STRICT_LENGTH_ENABLED_PROPERTY	use NOT_STRICT_LENGTH_ENABLED_PROPERTY
org.bouncycastle.crypto.engines.Salsa20Engine.sigma
org.bouncycastle.crypto.engines.Salsa20Engine.tau
org.bouncycastle.crypto.hpke.HPKE.kem_P384_SHA348	use kem_P384_SHA384
org.bouncycastle.crypto.signers.ISO9796d2PSSSigner.TRAILER_IMPLICIT	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2PSSSigner.TRAILER_RIPEMD128	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2PSSSigner.TRAILER_RIPEMD160	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2PSSSigner.TRAILER_SHA1	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2PSSSigner.TRAILER_SHA256	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2PSSSigner.TRAILER_SHA384	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2PSSSigner.TRAILER_SHA512	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2PSSSigner.TRAILER_WHIRLPOOL	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2Signer.TRAILER_IMPLICIT	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2Signer.TRAILER_RIPEMD128	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2Signer.TRAILER_RIPEMD160	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2Signer.TRAILER_SHA1	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2Signer.TRAILER_SHA256	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2Signer.TRAILER_SHA384	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2Signer.TRAILER_SHA512	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2Signer.TRAILER_WHIRLPOOL	use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_IMPLICIT	use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_RIPEMD128	use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_RIPEMD160	use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_SHA1	use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_SHA224	use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_SHA256	use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_SHA384	use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_SHA512	use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_WHIRLPOOL	use ISOTrailers

Deprecated Methods

Method	Description
org.bouncycastle.asn1.ASN1BitString.getBytes(int)	Will be removed
org.bouncycastle.asn1.ASN1BitString.getPadBits(int)	Will be removed
org.bouncycastle.asn1.ASN1InputStream.readFully(byte[])	No longer used; will be removed
org.bouncycastle.asn1.ASN1InputStream.readLength()	No longer used; will be removed
org.bouncycastle.asn1.bc.ExternalValue.getHashVal()	use getHash(), the internal encoding is now an OCTET STRING
org.bouncycastle.asn1.x509.AuthorityKeyIdentifier.getKeyIdentifier()	Use AuthorityKeyIdentifier.getKeyIdentifierOctets() instead.
org.bouncycastle.asn1.x509.DeltaCertificateDescriptor.getValidity()	Use getValidityObject instead.
org.bouncycastle.asn1.x509.DeltaCertificateDescriptor.trimTo(TBSCertificate, Extensions)	Use DeltaCertificateTool#trimDeltaCertificateDescriptor instead.
org.bouncycastle.asn1.x509.ExtensionsGenerator.addExtension(Extensions)	Use addExtensions instead.
org.bouncycastle.crypto.agreement.ECVKOAgreement.getFieldSize()	Will be removed
org.bouncycastle.crypto.CryptoServicesRegistrar.isPacketCipherEnabled()
org.bouncycastle.crypto.CryptoServicesRegistrar.setPacketCipherEnabled(boolean)
org.bouncycastle.crypto.generators.BCrypt.generate(byte[], byte[], int)	as a direct replacement use BCrypt.generate(byte[], byte[], int, boolean) so the terminator choice is explicit at the call site — pass true to have the spec-required 0x00 terminator appended (equivalent to feeding pwInput through BCrypt.passwordToByteArray(char[])), false when the supplied bytes already include it. For general password hashing prefer OpenBSDBCrypt, which handles termination, salt formatting and the modular crypt output line; this raw primitive remains available for test-vector validation and interop with implementations that emit the 24-byte hash directly (issue #1741).
org.bouncycastle.crypto.kems.MLKEMGenerator.internalGenerateEncapsulated(AsymmetricKeyParameter, byte[])	Use MLKEMGenerator.internalGenerateEncapsulated(MLKEMPublicKeyParameters, byte[]) instead.
org.bouncycastle.crypto.params.MLDSAPrivateKeyParameters.getPrivateKey()	Use MLDSAPrivateKeyParameters.getEncoded() instead.
org.bouncycastle.crypto.params.MLKEMPrivateKeyParameters.getParametersWithFormat(int)	Use MLKEMPrivateKeyParameters.withPreferredFormat(int) instead.
org.bouncycastle.crypto.signers.RSADigestSigner.getAlgorithmName()
org.bouncycastle.jcajce.PKIXExtendedParameters.getDate()	Use 'getValidityDate' instead (which can return null).
org.bouncycastle.jcajce.provider.asymmetric.dsa.DSASigner.engineGetParameter(String)
org.bouncycastle.jcajce.provider.asymmetric.dsa.DSASigner.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.jcajce.provider.asymmetric.dstu.SignatureSpi.engineGetParameter(String)
org.bouncycastle.jcajce.provider.asymmetric.dstu.SignatureSpi.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.jcajce.provider.asymmetric.ecgost.SignatureSpi.engineGetParameter(String)
org.bouncycastle.jcajce.provider.asymmetric.ecgost.SignatureSpi.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.jcajce.provider.asymmetric.ecgost12.ECGOST2012SignatureSpi256.engineGetParameter(String)
org.bouncycastle.jcajce.provider.asymmetric.ecgost12.ECGOST2012SignatureSpi256.engineSetParameter(String, Object)	replaced with "#engineSetParameter(java.security.spec.AlgorithmParameterSpec)"
org.bouncycastle.jcajce.provider.asymmetric.ecgost12.ECGOST2012SignatureSpi512.engineGetParameter(String)
org.bouncycastle.jcajce.provider.asymmetric.ecgost12.ECGOST2012SignatureSpi512.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.jcajce.provider.asymmetric.gost.SignatureSpi.engineGetParameter(String)
org.bouncycastle.jcajce.provider.asymmetric.gost.SignatureSpi.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.jcajce.provider.asymmetric.rsa.DigestSignatureSpi.engineGetParameter(String)
org.bouncycastle.jcajce.provider.asymmetric.rsa.DigestSignatureSpi.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.jcajce.provider.asymmetric.rsa.ISOSignatureSpi.engineGetParameter(String)
org.bouncycastle.jcajce.provider.asymmetric.rsa.ISOSignatureSpi.engineSetParameter(String, Object)	replaced with engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.jcajce.provider.asymmetric.rsa.PSSSignatureSpi.engineSetParameter(String, Object)	replaced with engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.jcajce.provider.asymmetric.rsa.X931SignatureSpi.engineGetParameter(String)
org.bouncycastle.jcajce.provider.asymmetric.rsa.X931SignatureSpi.engineSetParameter(String, Object)	replaced with engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.jcajce.provider.asymmetric.util.BaseDeterministicOrRandomSignature.engineGetParameter(String)	replaced with engineGetParameters()
org.bouncycastle.jcajce.provider.asymmetric.util.BaseDeterministicOrRandomSignature.engineSetParameter(String, Object)	replaced with engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.jcajce.provider.asymmetric.util.DSABase.engineGetParameter(String)
org.bouncycastle.jcajce.provider.asymmetric.util.DSABase.engineSetParameter(String, Object)	replaced with "#engineSetParameter(java.security.spec.AlgorithmParameterSpec)"
org.bouncycastle.jcajce.spec.GOST28147ParameterSpec.getSbox()	use getSBox()
org.bouncycastle.jcajce.util.JcaJceUtils.extractParameters(AlgorithmParameters)	use AlgorithmParametersUtils.extractParameters(AlgorithmParameters params)
org.bouncycastle.jcajce.util.JcaJceUtils.getDigestAlgName(ASN1ObjectIdentifier)	use MessageDigestUtils,getDigestName()
org.bouncycastle.jcajce.util.JcaJceUtils.loadParameters(AlgorithmParameters, ASN1Encodable)	use AlgorithmParametersUtils.loadParameters(AlgorithmParameters params, ASN1Encodable sParams)
org.bouncycastle.jcajce.util.NamedJcaJceHelper.createDigest(String)	Use createMessageDigest instead
org.bouncycastle.jcajce.util.ProviderJcaJceHelper.createDigest(String)	Use createMessageDigest instead
org.bouncycastle.math.ec.rfc7748.X25519Field.decode(byte[], int[])	Use X25519Field.decode255(byte[], int[]) instead.
org.bouncycastle.math.ec.rfc7748.X25519Field.decode(byte[], int, int[])	Use X25519Field.decode255(byte[], int, int[], int) instead.
org.bouncycastle.math.ec.rfc7748.X25519Field.decode(byte[], int, int[], int)	Use X25519Field.decode255(byte[], int, int[], int) instead.
org.bouncycastle.math.ec.rfc7748.X25519Field.decode(int[], int, int[])	Use X25519Field.decode255(int[], int, int[], int) instead.
org.bouncycastle.math.ec.rfc7748.X448Field.decode(byte[], int[])	Use X448Field.decode448(byte[], int[]) instead.
org.bouncycastle.math.ec.rfc7748.X448Field.decode(byte[], int, int[])	Use X448Field.decode448(byte[], int, int[], int) instead.
org.bouncycastle.math.ec.rfc7748.X448Field.decode(byte[], int, int[], int)	Use X448Field.decode448(byte[], int, int[], int) instead.
org.bouncycastle.math.ec.rfc7748.X448Field.decode(int[], int, int[])	Use X448Field.decode448(int[], int, int[], int) instead.
org.bouncycastle.pqc.crypto.mldsa.MLDSAPrivateKeyParameters.getPrivateKey()	Use MLDSAPrivateKeyParameters.getEncoded() instead.
org.bouncycastle.pqc.crypto.mlkem.MLKEMGenerator.internalGenerateEncapsulated(AsymmetricKeyParameter, byte[])	Use MLKEMGenerator.internalGenerateEncapsulated(MLKEMPublicKeyParameters, byte[]) instead.
org.bouncycastle.pqc.crypto.mlkem.MLKEMKeyPairGenerator.internalGenerateKeyPair(byte[], byte[])	will be removed.
org.bouncycastle.pqc.crypto.mlkem.MLKEMPrivateKeyParameters.getParametersWithFormat(int)	Use MLKEMPrivateKeyParameters.withPreferredFormat(int) instead.
org.bouncycastle.pqc.jcajce.provider.lms.LMSSignatureSpi.engineGetParameter(String)
org.bouncycastle.pqc.jcajce.provider.lms.LMSSignatureSpi.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.util.Longs.xorTo(int, long[], int, long[], int)	Use Nat.xorTo64(int, long[], int, long[], int) instead.

Deprecated Constructors

Constructor	Description
org.bouncycastle.asn1.DERExternal(ASN1EncodableVector)	Use DERExternal.fromVector(ASN1EncodableVector) instead.
org.bouncycastle.asn1.DERExternal(DERSequence)	Use DERExternal.fromSequence(ASN1Sequence) instead.
org.bouncycastle.asn1.DLExternal(ASN1EncodableVector)	Use DLExternal.fromVector(ASN1EncodableVector) instead.
org.bouncycastle.asn1.DLExternal(DLSequence)	Use DLExternal.fromSequence(ASN1Sequence) instead.
org.bouncycastle.asn1.x500.X500Name(X500NameStyle, X500Name)	use the getInstance() method that takes a style.
org.bouncycastle.asn1.x509.AuthorityKeyIdentifier(SubjectPublicKeyInfo)	create the extension using org.bouncycastle.cert.X509ExtensionUtils
org.bouncycastle.asn1.x509.AuthorityKeyIdentifier(SubjectPublicKeyInfo, GeneralNames, BigInteger)	create the extension using org.bouncycastle.cert.X509ExtensionUtils
org.bouncycastle.asn1.x509.ExtendedKeyUsage(Vector)	use KeyPurposeId[] constructor.
org.bouncycastle.asn1.x509.PolicyMappings(Hashtable)	use CertPolicyId constructors.
org.bouncycastle.asn1.x509.PolicyQualifierInfo(ASN1Sequence)	use PolicyQualifierInfo.getInstance()
org.bouncycastle.asn1.x509.SubjectPublicKeyInfo(ASN1Sequence)	use getInstance() will be removed.
org.bouncycastle.crypto.AsymmetricCipherKeyPair(CipherParameters, CipherParameters)	use AsymmetricKeyParameter
org.bouncycastle.crypto.engines.AESEngine()	use AESEngine.newInstance()
org.bouncycastle.crypto.modes.CBCBlockCipher(BlockCipher)	use the CBCBlockCipher.newInstance() static method.
org.bouncycastle.crypto.modes.CCMBlockCipher(BlockCipher)	use the CCMBlockCipher.newInstance() static method.
org.bouncycastle.crypto.modes.GCMBlockCipher(BlockCipher)	use the GCMBlockCipher.newInstance() static method.
org.bouncycastle.crypto.modes.GCMBlockCipher(BlockCipher, GCMMultiplier)	use the CBCBlockCipher.newInstance() static method.
org.bouncycastle.crypto.modes.SICBlockCipher(BlockCipher)	use newInstance() method.
org.bouncycastle.math.ec.ECCurve.F2m(int, int, int, int, BigInteger, BigInteger)	use constructor taking order/cofactor
org.bouncycastle.math.ec.ECCurve.F2m(int, int, BigInteger, BigInteger)	use constructor taking order/cofactor
org.bouncycastle.math.ec.ECCurve.Fp(BigInteger, BigInteger, BigInteger)	use constructor taking order/cofactor