25.0.1

What's Changed

• Update Non-FIPS OCKC binaries to v20250823_8.9.14 by @jasonkatonica in #773
• Assign parent Jenkins node to be none by @jasonkatonica in #777
• Enable PQC algorithms on Mac OS x86 platform by @jasonkatonica in #784
• Check NoWhitespaceAfter and NoWhitespaceBefore by @jasonkatonica in #789
• PQC memory leak fixes by @johnpeck-us-ibm in #795
• Update github action OCKC compilation to v8.9.14 by @jasonkatonica in #799
• Fix typos in PQC related changes by @KostasTsiounis in #804
• Add support for exporting TLS Keying Material by @JinhangZhang in #807
• Fix KEM to follow the SPI and the Java Docs by @johnpeck-us-ibm in #811
• Make use of API to fetch Java 25 by @jasonkatonica in #818
• Always store human readable alg name in PQC keys by @jasonkatonica in #819

Full Changelog: 25...25.0.1

21.0.9

What's Changed

• Add additional test exports for standalone profile by @jasonkatonica in #674
• Update doc for install and PQC by @jasonkatonica in #687
• Allow OpenJCEPlus to run in developer mode by @jasonkatonica in #692
• Remove unnecessary change of interop for z/OS by @KostasTsiounis in #699
• Update configuration doc for OpenJCEPlusFIPS by @jasonkatonica in #704
• Remove com.ibm.crypto.provider.restrictRSAExponent by @taoliult in #709
• Implement thread safety for SecureRandom engine by @dev-koan in #714
• Update hashCode() and equals() in keys to match OpenJDK's version by @KostasTsiounis in #719
• Support engineGetParameters in RSASignature by @JinhangZhang in #733
• Remove commons-lang3-3.17.0.jar dependency by @taoliult in #728
• Throw exception in case of incorrect EC key size by @KostasTsiounis in #743
• Add AESWrap for FIPS and non-FIPS based on Oracle Alaises by @johnpeck-us-ibm in #758
• Ignore case for X25519 and X448 curve names by @gin-nader in #755
• Change DSA signature verify exception cause to EOFException by @gin-nader in #769
• Update Non-FIPS OCKC binaries to v20250823_8.9.14 by @jasonkatonica in #774
• Assign parent Jenkins node to be none by @jasonkatonica in #778
• Enable PQC algorithms on Mac OS x86 platform by @jasonkatonica in #785
• Check NoWhitespaceAfter and NoWhitespaceBefore by @jasonkatonica in #790
• PQC memory leak fixes by @johnpeck-us-ibm in #796
• Update github action OCKC compilation to v8.9.14 by @jasonkatonica in #800
• Fix typos in PQC related changes by @KostasTsiounis in #805
• Fix KEM to follow the SPI and the Java Docs by @johnpeck-us-ibm in #812
• Always store human readable alg name in PQC keys by @jasonkatonica in #820

Full Changelog: 21.0.8...21.0.9

17.0.17

What's Changed

• Add additional test exports for standalone profile by @jasonkatonica in #675
• Update doc for install and PQC by @jasonkatonica in #688
• Allow OpenJCEPlus to run in developer mode by @jasonkatonica in #693
• Remove unnecessary change of interop for z/OS by @KostasTsiounis in #700
• Update configuration doc for OpenJCEPlusFIPS by @jasonkatonica in #705
• Remove com.ibm.crypto.provider.restrictRSAExponent by @taoliult in #710
• Implement thread safety for SecureRandom engine by @dev-koan in #715
• Update hashCode() and equals() in keys to match OpenJDK's version by @KostasTsiounis in #720
• Support engineGetParameters in RSASignature by @JinhangZhang in #735
• Remove commons-lang3-3.17.0.jar dependency by @taoliult in #727
• Throw exception in case of incorrect EC key size by @KostasTsiounis in #744
• Add AESWrap for FIPS and non-FIPS based on Oracle Alaises by @johnpeck-us-ibm in #753
• Ignore case for X25519 and X448 curve names by @gin-nader in #756
• Change DSA signature verify exception cause to EOFException by @gin-nader in #770
• Update Non-FIPS OCKC binaries to v20250823_8.9.14 by @jasonkatonica in #775
• Assign parent Jenkins node to be none by @jasonkatonica in #779
• Enable PQC algorithms on Mac OS x86 platform by @jasonkatonica in #786
• Check NoWhitespaceAfter and NoWhitespaceBefore by @jasonkatonica in #791
• PQC memory leak fixes by @johnpeck-us-ibm in #797
• Update github action OCKC compilation to v8.9.14 by @jasonkatonica in #801
• Fix typos in PQC related changes by @KostasTsiounis in #806
• Fix KEM to follow the SPI and the Java Docs by @johnpeck-us-ibm in #813
• Always store human readable alg name in PQC keys by @jasonkatonica in #821

Full Changelog: 17.0.16...17.0.17

11.0.29

What's Changed

• Add additional test exports for standalone profile by @jasonkatonica in #676
• Update doc for install by @jasonkatonica in #689
• Allow OpenJCEPlus to run in developer mode by @jasonkatonica in #694
• Remove unnecessary change of interop for z/OS by @KostasTsiounis in #701
• Update configuration doc for OpenJCEPlusFIPS by @jasonkatonica in #706
• Remove com.ibm.crypto.provider.restrictRSAExponent by @taoliult in #711
• Implement thread safety for SecureRandom engine by @dev-koan in #716
• Update hashCode() and equals() in keys to match OpenJDK's version by @KostasTsiounis in #721
• Support engineGetParameters in RSASignature by @JinhangZhang in #736
• Remove commons-lang3-3.17.0.jar dependency by @taoliult in #726
• Throw exception in case of incorrect EC key size by @KostasTsiounis in #745
• Add AESWrap for FIPS and non-FIPS based on Oracle Alaises by @johnpeck-us-ibm in #766
• Ignore case for X25519 and X448 curve names by @gin-nader in #757
• Change DSA signature verify exception cause to EOFException by @gin-nader in #771
• Update Non-FIPS OCKC binaries to v20250823_8.9.14 by @jasonkatonica in #776
• Assign parent Jenkins node to be none by @jasonkatonica in #780
• Check NoWhitespaceAfter and NoWhitespaceBefore by @jasonkatonica in #792
• Update github action OCKC compilation to v8.9.14 by @jasonkatonica in #802

Full Changelog: 11.0.28...11.0.29

21.0.8

What's Changed

• Potential multithreading issues related to static variables by @taoliult in #510
• Remove local copies of NamedCurve and CurveDB by @KostasTsiounis in #505
• Modify Jenkins pipeline machine tags by @jasonkatonica in #520
• Update DSAParameters engineToString to match OpenJDK's version by @taoliult in #532
• Update PSSParameters's engineToString to match OpenJDK's version by @KostasTsiounis in #524
• Tolerate empty message EdDSA by @jasonkatonica in #528
• Less instantiation of cipher objects in AES tests by @jasonkatonica in #537
• Update ChaCha20 and ChaCha20Poly1305 cipher to match expected Cipher behaviour by @KostasTsiounis in #542
• Check PSSParameterSpec with different message digest by @JinhangZhang in #550
• Throw InvalidKeyException when XDH small order by @jasonkatonica in #556
• Fix the comment in RSAPSSSignature by @JinhangZhang in #562
• Test and change user supplied random generation by @jasonkatonica in #546
• Optimize SecureRandom usage in various services by @jasonkatonica in #566
• Add check for unsupported EdDSA signature algorithms by @taoliult in #570
• Throw exception for negative digest len or offset by @jasonkatonica in #580
• Update loading encoded OAEPParameters by @KostasTsiounis in #584
• Guard against short buffer within ECDHKeyAgreement by @jasonkatonica in #590
• Update maven dependencies by @jasonkatonica in #595
• Check for acceptable values in NamedParameterSpec by @KostasTsiounis in #601
• Accept spec using a lowercase x448 curve name by @taoliult in #608
• Check for appropriate curve before matching algorithm by @KostasTsiounis in #611
• Update Jacoco plugin version by @KostasTsiounis in #618
• Do not be default run build or test logic by @jasonkatonica in #633
• Add test for key encodings by @jasonkatonica in #624
• Migrate to latest OCKC version by @jasonkatonica in #629
• Remove commons-beanutils-1.9.4.jar dependency due to vulnerability by @taoliult in #639
• Update Maven to 3.9.10 by @jasonkatonica in #645
• Add PBKDF2 multithreaded tests by @jasonkatonica in #649
• Add test case for accepting spec with lowercase X448 curve name by @taoliult in #654
• Add ML-KEM and ML-DSA Algorithms (PQC) by @johnpeck-us-ibm in #658
• Update OCKC to version 8.9.11 by @jasonkatonica in #664

Full Changelog: 21.0.7...21.0.8

17.0.16

What's Changed

• Potential multithreading issues related to static variables by @taoliult in #509
• Remove local copies of NamedCurve and CurveDB by @KostasTsiounis in #506
• Modify Jenkins pipeline machine tags by @jasonkatonica in #521
• Update DSAParameters engineToString to match OpenJDK's version by @taoliult in #533
• Update PSSParameters's engineToString to match OpenJDK's version by @KostasTsiounis in #525
• Tolerate empty message EdDSA by @jasonkatonica in #527
• Less instantiation of cipher objects in AES tests by @jasonkatonica in #538
• Update ChaCha20 and ChaCha20Poly1305 cipher to match expected Cipher behaviour by @KostasTsiounis in #543
• Check PSSParameterSpec with different message digest by @JinhangZhang in #553
• Throw InvalidKeyException when XDH small order by @jasonkatonica in #557
• Fix the comment in RSAPSSSignature by @JinhangZhang in #563
• Test and change user supplied random generation by @jasonkatonica in #547
• Optimize SecureRandom usage in various services by @jasonkatonica in #567
• Add check for unsupported EdDSA signature algorithms by @taoliult in #571
• Throw exception for negative digest len or offset by @jasonkatonica in #581
• Guard against short buffer within ECDHKeyAgreement by @jasonkatonica in #589
• Update maven dependencies by @jasonkatonica in #596
• Check for acceptable values in NamedParameterSpec by @KostasTsiounis in #602
• Accept spec using a lowercase x448 curve name by @taoliult in #607
• Check for appropriate curve before matching algorithm by @KostasTsiounis in #612
• Update Jacoco plugin version by @KostasTsiounis in #619
• Do not be default run build or test logic by @jasonkatonica in #634
• Add test for key encodings by @jasonkatonica in #625
• Migrate to latest OCKC version by @jasonkatonica in #630
• Remove commons-beanutils-1.9.4.jar dependency due to vulnerability by @taoliult in #640
• Update Maven to 3.9.10 by @jasonkatonica in #646
• Add PBKDF2 multithreaded tests by @jasonkatonica in #650
• Add test case for accepting spec with lowercase X448 curve name by @taoliult in #653
• Add ML-KEM and ML-DSA Algorithms (PQC) by @johnpeck-us-ibm in #659
• Update OCKC to version 8.9.11 by @jasonkatonica in #665

Full Changelog: 17.0.15...17.0.16

11.0.28

What's Changed

• Potential multithreading issues related to static variables by @taoliult in #508
• Remove local copies of NamedCurve and CurveDB by @KostasTsiounis in #507
• Modify Jenkins pipeline machine tags by @jasonkatonica in #522
• Update DSAParameters engineToString to match OpenJDK's version by @taoliult in #534
• Update PSSParameters's engineToString to match OpenJDK's version by @KostasTsiounis in #526
• Less instantiation of cipher objects in AES tests by @jasonkatonica in #539
• Update ChaCha20 and ChaCha20Poly1305 cipher to match expected Cipher behaviour by @KostasTsiounis in #544
• Check PSSParameterSpec with different message digest by @JinhangZhang in #554
• Throw InvalidKeyException when XDH small order by @jasonkatonica in #558
• Test and change user supplied random generation by @jasonkatonica in #548
• Optimize SecureRandom usage in various services by @jasonkatonica in #568
• Throw exception for negative digest len or offset by @jasonkatonica in #582
• Guard against short buffer within ECDHKeyAgreement by @jasonkatonica in #588
• Update maven dependencies by @jasonkatonica in #597
• Check for acceptable values in NamedParameterSpec by @KostasTsiounis in #603
• Accept spec using a lowercase x448 curve name by @taoliult in #606
• Check for appropriate curve before matching algorithm by @KostasTsiounis in #613
• Update Jacoco plugin version by @KostasTsiounis in #620
• Do not be default run build or test logic by @jasonkatonica in #635
• Add test for key encodings by @jasonkatonica in #626
• Migrate to latest OCKC version by @jasonkatonica in #631
• Remove commons-beanutils-1.9.4.jar dependency due to vulnerability by @taoliult in #641
• Update Maven to 3.9.10 by @jasonkatonica in #647
• Add PBKDF2 multithreaded tests by @jasonkatonica in #651
• Add test case for accepting spec with lowercase X448 curve name by @taoliult in #652
• Update OCKC to version 8.9.11 by @jasonkatonica in #666

Full Changelog: 11.0.27...11.0.28

21.0.7

What's Changed

• Update tests to use Junit 5 by @jasonkatonica in #381
• Fix Digest clone memory leak by @jasonkatonica in #390
• Update the README.md file for the use of AI generated code. by @johnpeck-us-ibm in #396
• Add int declaration to rc variable in Utils.c by @gin-nader in #406
• Fix memory leak in HDKF derive function by @jasonkatonica in #401
• Fix memory leak computing ECDH secrets by @jasonkatonica in #413
• Format all C source code using clang-format by @jasonkatonica in #420
• Implement calculatePublicKey() in classes that extend PKCS8Key by @KostasTsiounis in #429
• Update the DH key size check to include the exponent size check by @taoliult in #426
• Eliminate older junit dependency by @jasonkatonica in #436
• Initialize FastJNIBuffer only when use_z_fast_command is set to true by @taoliult in #455
• Add the DHUtils class to verify the DH key size by @taoliult in #461
• Always save all output from build pipeline execution by @jasonkatonica in #465
• Update ECDSASignature to match expected behaviour by @KostasTsiounis in #439
• Add support for PBKDF2 algorithms by @jasonkatonica in #471
• Update Jenkinsfile to use cygpath by @KostasTsiounis in #477
• Migrate to GPLv2 license by @jasonkatonica in #481
• Upgrade Maven from 3.9.6 to 3.9.9 by @jasonkatonica in #490
• Update to use latest maven dependencies by @jasonkatonica in #494
• Enhancements to AES-GCM Tests and Cipher Initialization by @taoliult in #499

Full Changelog: 21.0.6...21.0.7

17.0.15

What's Changed

• Update tests to use Junit 5 by @jasonkatonica in #382
• Fix Digest clone memory leak by @jasonkatonica in #391
• Update the README.md file for the use of AI generated code. by @johnpeck-us-ibm in #395
• Add int declaration to rc variable in Utils.c by @gin-nader in #407
• Fix memory leak in HDKF derive function by @jasonkatonica in #402
• Fix memory leak computing ECDH secrets by @jasonkatonica in #412
• Format all C source code using clang-format by @jasonkatonica in #419
• Update the DH key size check to include the exponent size check by @taoliult in #427
• Eliminate older junit dependency by @jasonkatonica in #435
• Initialize FastJNIBuffer only when use_z_fast_command is set to true by @taoliult in #456
• Add the DHUtils class to verify the DH key size by @taoliult in #460
• Always save all output from build pipeline execution by @jasonkatonica in #466
• Update ECDSASignature to match expected behaviour by @KostasTsiounis in #440
• Add support for PBKDF2 algorithms by @jasonkatonica in #470
• Update Jenkinsfile to use cygpath by @KostasTsiounis in #478
• Migrate to GPLv2 license by @jasonkatonica in #482
• Upgrade Maven from 3.9.6 to 3.9.9 by @jasonkatonica in #491
• Update to use latest maven dependencies by @jasonkatonica in #495
• Enhancements to AES-GCM Tests and Cipher Initialization by @taoliult in #498

Full Changelog: 17.0.14...17.0.15

11.0.27

What's Changed

• Update tests to use Junit 5 by @jasonkatonica in #383
• Fix Digest clone memory leak by @jasonkatonica in #392
• Update the README.md file for the use of AI generated code. by @johnpeck-us-ibm in #394
• Add int declaration to rc variable in Utils.c by @gin-nader in #408
• Fix memory leak in HDKF derive function by @jasonkatonica in #403
• Fix memory leak computing ECDH secrets by @jasonkatonica in #411
• Format all C source code using clang-format by @jasonkatonica in #422
• Update the DH key size check to include the exponent size check by @taoliult in #428
• Eliminate older junit dependency by @jasonkatonica in #434
• Initialize FastJNIBuffer only when use_z_fast_command is set to true by @taoliult in #457
• Add the DHUtils class to verify the DH key size by @taoliult in #459
• Always save all output from build pipeline execution by @jasonkatonica in #467
• Update ECDSASignature to match expected behaviour by @KostasTsiounis in #441
• Add support for PBKDF2 algorithms by @jasonkatonica in #469
• Update Jenkinsfile to use cygpath by @KostasTsiounis in #479
• Migrate to GPLv2 license by @jasonkatonica in #483
• Upgrade Maven from 3.9.6 to 3.9.9 by @jasonkatonica in #492
• Update to use latest maven dependencies by @jasonkatonica in #496
• Enhancements to AES-GCM Tests and Cipher Initialization by @taoliult in #497

Full Changelog: 11.0.26...11.0.27