

We are using jasypt v1.9.2 for the encryption.Ĭode: StandardPBEStringEncryptor encryptor = new StandardPBEStringEncryptor() TLDR my question is is Bounc圜astle now included in Java8? We have removed the provider from curity and the bcprov.jar from the /ext directory and it is still working. Yet it is working WITHOUT and Bounc圜astleProvider on the server. I worry that these changes will eventually break and our encryption will start to fail. Yet it is working WITHOUT and Bounc圜astleProvider on the server.I have checked the release notes and not found anything mentioning it. I have checked the release notes and not found anything mentioning it.

We even removed the bcprov-*.jar from the jre/lib/ext directory, restarted tomcat, rebooted the entire server, and STILL it works. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 and up.
#JAVA PACKAGE BOUNCY CASTLE UPDATE#
We did NOT update the new curity file with the Bounc圜astleProvider, however, yet the encryption in our application, which uses the Bounc圜astleProvider, did NOT break. The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms.

The package is organised so that it contains a light-weight API suitable for use in any environment (including the newly released J2ME) with the additional infrastructure to conform the algorithms to the JCE framework.
