Deprecated API

Contents

• Interfaces
• Classes
• Fields
• Methods
• Constructors

Interfaces

Interface	Description
org.bouncycastle.asn1.ASN1ApplicationSpecificParser	Test for ASN1TaggedObjectParser with tag class of BERTags.APPLICATION instead.
org.bouncycastle.crypto.KeyEncapsulation	use EncapsulatedSecretGenerator and EncapsulatedSecretExtractor
org.bouncycastle.jcajce.provider.asymmetric.util.DSAEncoder	No longer used
org.bouncycastle.jce.interfaces.MQVPrivateKey	use MQVParameterSpec for passing the ephemeral key.
org.bouncycastle.jce.interfaces.MQVPublicKey	use MQVParameterSpec for passing the ephemeral key.
org.bouncycastle.pqc.jcajce.interfaces.StateAwareSignature	it's better to avoid this and use extractKeyShard methods where possible.
org.bouncycastle.x509.X509AttributeCertificate	use X509CertificateHolder class in the PKIX package.

Classes

Class	Description
org.bouncycastle.asn1.ASN1ApplicationSpecific	Will be removed. Change application code to handle as ASN1TaggedObject only, testing for the expected tag class of BERTags.APPLICATION in relevant objects before using. If using a stream parser, handle application-tagged objects using ASN1TaggedObjectParser in the usual way, again testing for a tag class of BERTags.APPLICATION.
org.bouncycastle.asn1.BERApplicationSpecific	Will be removed. See comments for ASN1ApplicationSpecific.
org.bouncycastle.asn1.BERApplicationSpecificParser	Test for ASN1TaggedObjectParser with tag class of BERTags.APPLICATION instead.
org.bouncycastle.asn1.BERTaggedObjectParser	Will be made non-public. Test for and use only ASN1TaggedObjectParser.
org.bouncycastle.asn1.DERApplicationSpecific	Will be removed. See comments for ASN1ApplicationSpecific.
org.bouncycastle.asn1.DLApplicationSpecific	Will be removed. See comments for ASN1ApplicationSpecific.
org.bouncycastle.asn1.pkcs.RSAPrivateKeyStructure	use RSAPrivateKey
org.bouncycastle.asn1.sec.ECPrivateKeyStructure	use ECPrivateKey
org.bouncycastle.asn1.util.DERDump	use ASN1Dump.
org.bouncycastle.asn1.x509.RSAPublicKeyStructure	use org.bouncycastle.asn1.pkcs.RSAPublicKey
org.bouncycastle.asn1.x509.TBSCertificateStructure	use TBSCertificate
org.bouncycastle.asn1.x509.X509CertificateStructure	use org.bouncycastle.asn1.x509.Certificate
org.bouncycastle.asn1.x509.X509Extension	use Extension
org.bouncycastle.asn1.x509.X509Extensions	use Extension and Extensions
org.bouncycastle.asn1.x509.X509ExtensionsGenerator	use org.bouncycastle.asn1.x509.ExtensionsGenerator
org.bouncycastle.asn1.x509.X509Name	use org.bouncycastle.asn1.x500.X500Name.
org.bouncycastle.asn1.x509.X509NameTokenizer	use X500NameTokenizer
org.bouncycastle.asn1.x9.DHDomainParameters	use DomainParameters
org.bouncycastle.asn1.x9.DHValidationParms	use ValidationParams
org.bouncycastle.crypto.engines.AESFastEngine	unfortunately this class is has a few side channel issues. In an environment where encryption/decryption may be closely observed it should not be used.
org.bouncycastle.crypto.kems.ECIESKeyEncapsulation	use ECIESKEMGenerator, ECIESKEMExtractor
org.bouncycastle.crypto.kems.RSAKeyEncapsulation	use RSAKEMGenerator, RSAKEMExtractor
org.bouncycastle.crypto.modes.PaddedBlockCipher	use org.bouncycastle.crypto.paddings.PaddedBufferedBlockCipher instead.
org.bouncycastle.crypto.params.CCMParameters	use AEADParameters
org.bouncycastle.crypto.signers.ECGOST3410_2012Signer	Use ECGOST3410Signer instead.
org.bouncycastle.crypto.util.Pack	use org.bouncycastle.util.pack
org.bouncycastle.jcajce.spec.KEMParameterSpec	use KTSParameterSpec
org.bouncycastle.jce.PKCS10CertificationRequest	use classes in org.bouncycastle.pkcs.
org.bouncycastle.jce.provider.X509CertificateObject	Do not use this class directly - either use org.bouncycastle.cert (bcpkix) or CertificateFactory.
org.bouncycastle.jce.provider.X509CertParser	use CertificateFactory or the PEMParser in the openssl package (pkix jar).
org.bouncycastle.jce.provider.X509CRLObject	Do not use this class directly - either use org.bouncycastle.cert (bcpkix) or CertificateFactory.
org.bouncycastle.jce.spec.GOST28147ParameterSpec	use org.bouncycastle.jcajce.spec.GOST28147ParameterSpec
org.bouncycastle.jce.spec.RepeatedSecretKeySpec	use super class org.bouncycastle.jcajce.spec.RepeatedSecretKeySpec
org.bouncycastle.jce.X509Principal	use the X500Name class.
org.bouncycastle.pqc.legacy.math.linearalgebra.ByteUtils	use org.bouncycastle.util.Arrays.
org.bouncycastle.x509.AttributeCertificateHolder	use org.bouncycastle.cert.AttributeCertificateHolder
org.bouncycastle.x509.AttributeCertificateIssuer	use org.bouncycastle.cert.AttributeCertificateIssuer
org.bouncycastle.x509.ExtendedPKIXBuilderParameters	use PKIXExtendedBuilderParameters
org.bouncycastle.x509.ExtendedPKIXParameters	use PKIXExtendedParameters
org.bouncycastle.x509.extension.AuthorityKeyIdentifierStructure	use JcaX509ExtensionUtils and AuthorityKeyIdentifier.getInstance()
org.bouncycastle.x509.extension.X509ExtensionUtil	use org.bouncycastle.cert.jcajce.JcaX509ExtensionUtils
org.bouncycastle.x509.PKIXCertPathReviewer	use org.bouncycastle.pkix.jcajce.PKIXCertPathReviewer in the bcpkix package
org.bouncycastle.x509.X509Attribute	see X509CertificateHolder class in the PKIX package.
org.bouncycastle.x509.X509AttributeCertStoreSelector	use org.bouncycastle.cert.X509AttributeCertificateSelector and org.bouncycastle.cert.X509AttributeCertificateSelectorBuilder.
org.bouncycastle.x509.X509Store	use CollectionStore - this class will be removed.
org.bouncycastle.x509.X509V1CertificateGenerator	use org.bouncycastle.cert.X509v1CertificateBuilder.
org.bouncycastle.x509.X509V2AttributeCertificate	use org.bouncycastle.cert.X509AttributeCertificateHolder
org.bouncycastle.x509.X509V2CRLGenerator	use org.bouncycastle.cert.X509v2CRLBuilder.
org.bouncycastle.x509.X509V3CertificateGenerator	use org.bouncycastle.cert.X509v3CertificateBuilder.

Fields

Field	Description
org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers.id_aa_commitmentType	use id_aa_ets_commitmentType instead
org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers.id_aa_otherSigCert	use id_aa_ets_otherSigCert instead
org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers.id_aa_signerLocation	use id_aa_ets_signerLocation instead
org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers.id_aa_sigPolicyId	use id_aa_ets_sigPolicyId instead
org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers.pbewithSHAAnd40BitRC2_CBC	use pbeWithSHAAnd40BitRC2_CBC
org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers.x509certType	use x509Certificate instead
org.bouncycastle.asn1.x500.style.BCStyle.SN	use SERIALNUMBER or SURNAME
org.bouncycastle.asn1.x509.CRLReason.AA_COMPROMISE	use lower case version
org.bouncycastle.asn1.x509.CRLReason.AFFILIATION_CHANGED	use lower case version
org.bouncycastle.asn1.x509.CRLReason.CA_COMPROMISE	use lower case version
org.bouncycastle.asn1.x509.CRLReason.CERTIFICATE_HOLD	use lower case version
org.bouncycastle.asn1.x509.CRLReason.CESSATION_OF_OPERATION	use lower case version
org.bouncycastle.asn1.x509.CRLReason.KEY_COMPROMISE	use lower case version
org.bouncycastle.asn1.x509.CRLReason.PRIVILEGE_WITHDRAWN	use lower case version
org.bouncycastle.asn1.x509.CRLReason.REMOVE_FROM_CRL	use lower case version
org.bouncycastle.asn1.x509.CRLReason.SUPERSEDED	use lower case version
org.bouncycastle.asn1.x509.CRLReason.UNSPECIFIED	use lower case version
org.bouncycastle.asn1.x509.ReasonFlags.AA_COMPROMISE	use lower case version
org.bouncycastle.asn1.x509.ReasonFlags.AFFILIATION_CHANGED	use lower case version
org.bouncycastle.asn1.x509.ReasonFlags.CA_COMPROMISE	use lower case version
org.bouncycastle.asn1.x509.ReasonFlags.CERTIFICATE_HOLD	use lower case version
org.bouncycastle.asn1.x509.ReasonFlags.CESSATION_OF_OPERATION	use lower case version
org.bouncycastle.asn1.x509.ReasonFlags.KEY_COMPROMISE	use lower case version
org.bouncycastle.asn1.x509.ReasonFlags.PRIVILEGE_WITHDRAWN	use lower case version
org.bouncycastle.asn1.x509.ReasonFlags.SUPERSEDED	use lower case version
org.bouncycastle.asn1.x509.ReasonFlags.UNUSED	use lower case version
org.bouncycastle.asn1.x509.X509AttributeIdentifiers.RoleSyntax	use id_at_role
org.bouncycastle.asn1.x509.X509Extensions.AuditIdentity	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.AuthorityInfoAccess	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.AuthorityKeyIdentifier	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.BasicConstraints	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.BiometricInfo	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.CertificateIssuer	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.CertificatePolicies	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.CRLDistributionPoints	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.CRLNumber	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.DeltaCRLIndicator	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.ExtendedKeyUsage	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.FreshestCRL	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.InhibitAnyPolicy	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.InstructionCode	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.InvalidityDate	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.IssuerAlternativeName	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.IssuingDistributionPoint	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.KeyUsage	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.LogoType	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.NameConstraints	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.NoRevAvail	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.PolicyConstraints	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.PolicyMappings	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.PrivateKeyUsagePeriod	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.QCStatements	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.ReasonCode	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.SubjectAlternativeName	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.SubjectDirectoryAttributes	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.SubjectInfoAccess	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.SubjectKeyIdentifier	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.TargetInformation	use X509Extension value.
org.bouncycastle.asn1.x509.X509Name.C	use a X500NameStyle
org.bouncycastle.asn1.x509.X509Name.CN	use a X500NameStyle
org.bouncycastle.asn1.x509.X509Name.EmailAddress	use a X500NameStyle
org.bouncycastle.asn1.x509.X509Name.O	use a X500NameStyle
org.bouncycastle.asn1.x509.X509Name.OIDLookUp	use DefaultSymbols
org.bouncycastle.asn1.x509.X509Name.OU	use a X500NameStyle
org.bouncycastle.asn1.x509.X509Name.SymbolLookUp	use DefaultLookUp
org.bouncycastle.asn1.x509.X509Name.T	use a X500NameStyle
org.bouncycastle.crypto.encodings.PKCS1Encoding.STRICT_LENGTH_ENABLED_PROPERTY	use NOT_STRICT_LENGTH_ENABLED_PROPERTY
org.bouncycastle.crypto.engines.Salsa20Engine.sigma
org.bouncycastle.crypto.engines.Salsa20Engine.tau
org.bouncycastle.crypto.signers.ISO9796d2PSSSigner.TRAILER_IMPLICIT	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2PSSSigner.TRAILER_RIPEMD128	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2PSSSigner.TRAILER_RIPEMD160	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2PSSSigner.TRAILER_SHA1	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2PSSSigner.TRAILER_SHA256	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2PSSSigner.TRAILER_SHA384	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2PSSSigner.TRAILER_SHA512	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2PSSSigner.TRAILER_WHIRLPOOL	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2Signer.TRAILER_IMPLICIT	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2Signer.TRAILER_RIPEMD128	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2Signer.TRAILER_RIPEMD160	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2Signer.TRAILER_SHA1	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2Signer.TRAILER_SHA256	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2Signer.TRAILER_SHA384	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2Signer.TRAILER_SHA512	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2Signer.TRAILER_WHIRLPOOL	use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_IMPLICIT	use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_RIPEMD128	use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_RIPEMD160	use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_SHA1	use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_SHA224	use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_SHA256	use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_SHA384	use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_SHA512	use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_WHIRLPOOL	use ISOTrailers
org.bouncycastle.pqc.asn1.PQCObjectIdentifiers.xmss_mt_with_SHA256	use xmss_mt_SHA256ph
org.bouncycastle.pqc.asn1.PQCObjectIdentifiers.xmss_mt_with_SHA512	use xmss_mt_SHA512ph
org.bouncycastle.pqc.asn1.PQCObjectIdentifiers.xmss_mt_with_SHAKE128	use xmss_mt_SHAKE128ph
org.bouncycastle.pqc.asn1.PQCObjectIdentifiers.xmss_mt_with_SHAKE256	use xmss_mt_SHAKE256ph
org.bouncycastle.pqc.asn1.PQCObjectIdentifiers.xmss_with_SHA256	use xmss_SHA256ph
org.bouncycastle.pqc.asn1.PQCObjectIdentifiers.xmss_with_SHA512	use xmss_SHA512ph
org.bouncycastle.pqc.asn1.PQCObjectIdentifiers.xmss_with_SHAKE128	use xmss_SHAKE128ph
org.bouncycastle.pqc.asn1.PQCObjectIdentifiers.xmss_with_SHAKE256	use xmss_SHAKE256ph

Methods

Method	Description
org.bouncycastle.asn1.ASN1TaggedObject.getObject()	Tagged objects now include the tag class. This method will raise an exception if it is not BERTags.CONTEXT_SPECIFIC. Use ASN1TaggedObject.getBaseUniversal(boolean, int) only after confirming the expected tag class.
org.bouncycastle.asn1.ASN1TaggedObject.getObjectParser(int, boolean)	See ASN1TaggedObjectParser.getObjectParser(int, boolean).
org.bouncycastle.asn1.ASN1TaggedObjectParser.getObjectParser(int, boolean)	This parser now includes the tag class. This method will raise an exception if it is not BERTags.CONTEXT_SPECIFIC. Use ASN1Util.parseBaseUniversal(ASN1TaggedObjectParser, int, int, boolean, int) as a direct replacement, or use ASN1TaggedObjectParser.parseBaseUniversal(boolean, int) only after confirming the expected tag class (e.g. ASN1Util.tryParseContextBaseUniversal(ASN1TaggedObjectParser, int, boolean, int).
org.bouncycastle.asn1.BEROctetString.getObjects()	Will be removed.
org.bouncycastle.asn1.BERTaggedObjectParser.getObjectParser(int, boolean)	See ASN1TaggedObjectParser.getObjectParser(int, boolean).
org.bouncycastle.asn1.cryptopro.GOST3410ParamSetParameters.getLKeySize()	use getKeySize
org.bouncycastle.asn1.mozilla.PublicKeyAndChallenge.getChallenge()	Use PublicKeyAndChallenge.getChallengeIA5() instead.
org.bouncycastle.asn1.ocsp.CrlID.getCrlUrl()	Use CrlID.getCrlUrlIA5() instead.
org.bouncycastle.asn1.sec.ECPrivateKey.getParameters()	Use ECPrivateKey.getParametersObject() instead and getInstance methods or similar to get the object at the desired type.
org.bouncycastle.asn1.x509.qualified.BiometricData.getSourceDataUri()	Use BiometricData.getSourceDataUriIA5() instead.
org.bouncycastle.asn1.x509.SubjectPublicKeyInfo.getAlgorithmId()	use getAlgorithm()
org.bouncycastle.asn1.x509.SubjectPublicKeyInfo.getPublicKey()	use parsePublicKey
org.bouncycastle.asn1.x509.V1TBSCertificateGenerator.setIssuer(X509Name)	use X500Name method
org.bouncycastle.asn1.x509.V1TBSCertificateGenerator.setSubject(X509Name)	use X500Name method
org.bouncycastle.asn1.x509.V2AttributeCertificateInfoGenerator.setExtensions(X509Extensions)	use method taking Extensions
org.bouncycastle.asn1.x509.V2TBSCertListGenerator.setIssuer(X509Name)	use X500Name method
org.bouncycastle.asn1.x509.V3TBSCertificateGenerator.setExtensions(X509Extensions)	use method taking Extensions
org.bouncycastle.asn1.x509.V3TBSCertificateGenerator.setIssuer(X509Name)	use X500Name method
org.bouncycastle.asn1.x509.V3TBSCertificateGenerator.setSubject(X509Name)	use X500Name method
org.bouncycastle.crypto.agreement.ECVKOAgreement.getFieldSize()	Will be removed
org.bouncycastle.crypto.agreement.jpake.JPAKEUtil.calculateS(char[])	Use version including the modulus instead.
org.bouncycastle.crypto.engines.ThreefishEngine.bytesToWord(byte[], int)	Will be removed
org.bouncycastle.crypto.engines.ThreefishEngine.wordToBytes(long, byte[], int)	Will be removed
org.bouncycastle.crypto.kems.ECIESKeyEncapsulation.decrypt(byte[], int, int, int)	use ECIESKEMExtractor
org.bouncycastle.crypto.kems.ECIESKeyEncapsulation.encrypt(byte[], int, int)	use ECIESKEMGenerator
org.bouncycastle.crypto.params.Ed25519PrivateKeyParameters.sign(int, Ed25519PublicKeyParameters, byte[], byte[], int, int, byte[], int)	use overload that doesn't take a public key
org.bouncycastle.crypto.params.Ed448PrivateKeyParameters.sign(int, Ed448PublicKeyParameters, byte[], byte[], int, int, byte[], int)	use overload that doesn't take a public key
org.bouncycastle.crypto.signers.RSADigestSigner.getAlgorithmName()
org.bouncycastle.jcajce.PKIXExtendedParameters.getDate()	Use 'getValidityDate' instead (which can return null).
org.bouncycastle.jcajce.provider.asymmetric.dsa.DSASigner.engineGetParameter(String)
org.bouncycastle.jcajce.provider.asymmetric.dsa.DSASigner.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.jcajce.provider.asymmetric.ecgost.SignatureSpi.engineGetParameter(String)
org.bouncycastle.jcajce.provider.asymmetric.ecgost.SignatureSpi.engineSetParameter(String, Object)	replaced with
org.bouncycastle.jcajce.provider.asymmetric.gost.SignatureSpi.engineGetParameter(String)
org.bouncycastle.jcajce.provider.asymmetric.gost.SignatureSpi.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.jcajce.provider.asymmetric.rsa.DigestSignatureSpi.engineGetParameter(String)
org.bouncycastle.jcajce.provider.asymmetric.rsa.DigestSignatureSpi.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.jcajce.provider.asymmetric.rsa.ISOSignatureSpi.engineGetParameter(String)
org.bouncycastle.jcajce.provider.asymmetric.rsa.ISOSignatureSpi.engineSetParameter(String, Object)	replaced with engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.jcajce.provider.asymmetric.rsa.PSSSignatureSpi.engineSetParameter(String, Object)	replaced with
org.bouncycastle.jcajce.provider.asymmetric.rsa.X931SignatureSpi.engineGetParameter(String)
org.bouncycastle.jcajce.provider.asymmetric.rsa.X931SignatureSpi.engineSetParameter(String, Object)	replaced with engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.jcajce.provider.asymmetric.util.DSABase.engineGetParameter(String)
org.bouncycastle.jcajce.provider.asymmetric.util.DSABase.engineSetParameter(String, Object)	replaced with
org.bouncycastle.jcajce.spec.GOST28147ParameterSpec.getSbox()	use getSBox()
org.bouncycastle.jcajce.util.DefaultJcaJceHelper.createDigest(String)	Use createMessageDigest instead
org.bouncycastle.jcajce.util.JcaJceHelper.createDigest(String)	Use createMessageDigest instead
org.bouncycastle.jcajce.util.JcaJceUtils.extractParameters(AlgorithmParameters)	use AlgorithmParametersUtils.extractParameters(AlgorithmParameters params)
org.bouncycastle.jcajce.util.JcaJceUtils.getDigestAlgName(ASN1ObjectIdentifier)	use MessageDigestUtils,getDigestName()
org.bouncycastle.jcajce.util.JcaJceUtils.loadParameters(AlgorithmParameters, ASN1Encodable)	use AlgorithmParametersUtils.loadParameters(AlgorithmParameters params, ASN1Encodable sParams)
org.bouncycastle.jcajce.util.NamedJcaJceHelper.createDigest(String)	Use createMessageDigest instead
org.bouncycastle.jcajce.util.ProviderJcaJceHelper.createDigest(String)	Use createMessageDigest instead
org.bouncycastle.jce.interfaces.ECKey.getParams()	this method vanises in JDK 1.5. Use getParameters().
org.bouncycastle.pqc.crypto.crystals.dilithium.DilithiumPrivateKeyParameters.getPrivateKey()	Use DilithiumPrivateKeyParameters.getEncoded() instead.
org.bouncycastle.pqc.crypto.crystals.kyber.KyberPrivateKeyParameters.getPrivateKey()	Use KyberPrivateKeyParameters.getEncoded() instead.
org.bouncycastle.pqc.crypto.crystals.kyber.KyberPublicKeyParameters.getPublicKey()	Use KyberPublicKeyParameters.getEncoded() instead.
org.bouncycastle.pqc.crypto.sphincsplus.SPHINCSPlusParameters.getID(SPHINCSPlusParameters)	Use SPHINCSPlusParameters.getID() instead
org.bouncycastle.pqc.jcajce.provider.dilithium.SignatureSpi.engineGetParameter(String)
org.bouncycastle.pqc.jcajce.provider.dilithium.SignatureSpi.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.pqc.jcajce.provider.falcon.SignatureSpi.engineGetParameter(String)
org.bouncycastle.pqc.jcajce.provider.falcon.SignatureSpi.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.pqc.jcajce.provider.picnic.SignatureSpi.engineGetParameter(String)
org.bouncycastle.pqc.jcajce.provider.picnic.SignatureSpi.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.pqc.jcajce.provider.sphincs.SignatureSpi.engineGetParameter(String)
org.bouncycastle.pqc.jcajce.provider.sphincs.SignatureSpi.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.pqc.jcajce.provider.sphincsplus.SignatureSpi.engineGetParameter(String)
org.bouncycastle.pqc.jcajce.provider.sphincsplus.SignatureSpi.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.pqc.legacy.math.linearalgebra.IntegerFunctions.log(double)	use MathFunctions.log(double) instead
org.bouncycastle.util.Fingerprint.calculateFingerprintSHA512_160(byte[])	use the SHAKE based version.
org.bouncycastle.util.Pack.longToBigEndian(long, byte[], int, int)	Will be removed
org.bouncycastle.x509.ExtendedPKIXParameters.addAddionalStore(Store)
org.bouncycastle.x509.ExtendedPKIXParameters.addAdditionalStore(Store)	use addStore().
org.bouncycastle.x509.extension.X509ExtensionUtil.fromExtensionValue(byte[])	use org.bouncycastle.cert.jcajce.JcaX509ExtensionUtils.parseExtensionValue()
org.bouncycastle.x509.extension.X509ExtensionUtil.getIssuerAlternativeNames(X509Certificate)	use org.bouncycastle.cert.jcajce.JcaX509ExtensionUtils.getIssuerAlternativeNames()
org.bouncycastle.x509.extension.X509ExtensionUtil.getSubjectAlternativeNames(X509Certificate)	use org.bouncycastle.cert.jcajce.JcaX509ExtensionUtils.getSubjectAlternativeNames()
org.bouncycastle.x509.X509V1CertificateGenerator.generateX509Certificate(PrivateKey)	use generate(key, "BC")
org.bouncycastle.x509.X509V2CRLGenerator.generateX509CRL(PrivateKey)	use generate(key, "BC")
org.bouncycastle.x509.X509V3CertificateGenerator.generateX509Certificate(PrivateKey)	use generate(key, "BC")

Constructors

Constructor	Description
org.bouncycastle.asn1.BERTaggedObject(int)	Will be removed.
org.bouncycastle.asn1.DERExternal(ASN1EncodableVector)	Use DERExternal(DERSequence) instead.
org.bouncycastle.asn1.DLExternal(ASN1EncodableVector)	Use DLExternal(DLSequence) instead.
org.bouncycastle.asn1.ocsp.ResponseData(ResponderID, ASN1GeneralizedTime, ASN1Sequence, X509Extensions)	use method taking Extensions
org.bouncycastle.asn1.ocsp.SingleResponse(CertID, CertStatus, ASN1GeneralizedTime, ASN1GeneralizedTime, X509Extensions)	use method taking ASN1GeneralizedTime and Extensions
org.bouncycastle.asn1.ocsp.TBSRequest(GeneralName, ASN1Sequence, X509Extensions)	use method taking Extensions
org.bouncycastle.asn1.pkcs.CertificationRequest(ASN1Sequence)	use getInstance()
org.bouncycastle.asn1.pkcs.CertificationRequestInfo(X509Name, SubjectPublicKeyInfo, ASN1Set)	use X500Name method.
org.bouncycastle.asn1.sec.ECPrivateKey(BigInteger)	use constructor which takes orderBitLength to guarantee correct encoding.
org.bouncycastle.asn1.x500.X500Name(X500NameStyle, X500Name)	use the getInstance() method that takes a style.
org.bouncycastle.asn1.x509.AuthorityKeyIdentifier(SubjectPublicKeyInfo)	create the extension using org.bouncycastle.cert.X509ExtensionUtils
org.bouncycastle.asn1.x509.ExtendedKeyUsage(Vector)	use KeyPurposeId[] constructor.
org.bouncycastle.asn1.x509.GeneralName(X509Name)	use X500Name constructor.
org.bouncycastle.asn1.x509.PolicyMappings(Hashtable)	use CertPolicyId constructors.
org.bouncycastle.asn1.x509.PolicyQualifierInfo(ASN1Sequence)	use PolicyQualifierInfo.getInstance()
org.bouncycastle.asn1.x509.SubjectPublicKeyInfo(ASN1Sequence)	use SubjectPublicKeyInfo.getInstance()
org.bouncycastle.asn1.x509.X509Extensions(Vector, Hashtable)	use Extensions
org.bouncycastle.asn1.x509.X509Name(ASN1Sequence)	use X500Name.getInstance()
org.bouncycastle.crypto.AsymmetricCipherKeyPair(CipherParameters, CipherParameters)	use AsymmetricKeyParameter
org.bouncycastle.crypto.macs.BlockCipherMac(BlockCipher)	use CBCBlockCipherMac
org.bouncycastle.crypto.macs.OldHMac(Digest)	uses incorrect pad for SHA-512 and SHA-384 use HMac.
org.bouncycastle.jce.spec.GOST28147ParameterSpec(byte[])
org.bouncycastle.math.ec.ECCurve.F2m(int, int, BigInteger, BigInteger)	use constructor taking order/cofactor
org.bouncycastle.math.ec.ECCurve.Fp(BigInteger, BigInteger, BigInteger)	use constructor taking order/cofactor
org.bouncycastle.pqc.asn1.CMCEPublicKey(ASN1Sequence)	use getInstance()
org.bouncycastle.pqc.asn1.FalconPublicKey(ASN1Sequence)	use getInstance()
org.bouncycastle.pqc.asn1.KyberPublicKey(ASN1Sequence)	use getInstance()
org.bouncycastle.pqc.asn1.SPHINCSPLUSPrivateKey(ASN1Sequence)	use getInstance()
org.bouncycastle.pqc.asn1.SPHINCSPLUSPublicKey(ASN1Sequence)	use getInstance()
org.bouncycastle.util.Fingerprint(byte[], boolean)	use the SHAKE only version.
org.bouncycastle.x509.extension.AuthorityKeyIdentifierStructure(X509Extension)	use constructor that takes Extension