The Bouncy Castle Crypto package is a C# implementation of cryptographic algorithms and protocols, it was developed by the Legion of the Bouncy Castle, a registered Australian Charity, with a little help! The Legion, and the latest goings on with this package, can be found at [http://www.bouncycastle.org](http://www.bouncycastle.org). In addition to providing basic cryptography algorithms, the package also provides support for CMS, TSP, X.509 certificate generation and a variety of other standar
BouncyCastle is deprecated — find an alternative
Update to >= 2.3.1 to fix known vulnerabilities
| Severity | ID | Summary | Fixed in |
|---|---|---|---|
| medium | CVE-2024-29857 | Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation. | 2.3.1 |
| medium | CVE-2024-30172 | Bouncy Castle crafted signature and public key can be used to trigger an infinite loop | 2.3.1 |
| medium | CVE-2024-30171 | Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack") | 2.3.1 |
Get this data programmatically — free, no authentication.
curl https://depscope.dev/api/check/nuget/BouncyCastleLast updated · 2021-01-05T08:23:30.19+00:00