Deprecated API

Contents

• Interfaces
• Classes
• Fields
• Methods
• Constructors

Deprecated Interfaces

Interface	Description
org.bouncycastle.crypto.KeyEncapsulation	use EncapsulatedSecretGenerator and EncapsulatedSecretExtractor
org.bouncycastle.jcajce.provider.asymmetric.util.DSAEncoder	No longer used
org.bouncycastle.jce.interfaces.ElGamalPublicKey	just use DHPublicKey.
org.bouncycastle.jce.interfaces.MQVPrivateKey	use MQVParameterSpec for passing the ephemeral key.
org.bouncycastle.jce.interfaces.MQVPublicKey	use MQVParameterSpec for passing the ephemeral key.
org.bouncycastle.pqc.crypto.xmss.XMSSStoreableObjectInterface	use Encodable
org.bouncycastle.pqc.jcajce.interfaces.CMCEKey	the standardised Classic McEliece KEM (ISO/IEC 18033-2:2006/Amd 2:2026) is now provided under org.bouncycastle.crypto and org.bouncycastle.jcajce (see org.bouncycastle.crypto.params.CMCEParameters and org.bouncycastle.jcajce.spec.CMCEParameterSpec). This is the legacy NIST round 3 (non-pc, incl. mceliece348864) implementation, retained for backwards compatibility.
org.bouncycastle.pqc.jcajce.interfaces.DilithiumKey	to be deleted - use ML-DSA instead.
org.bouncycastle.pqc.jcajce.interfaces.DilithiumPrivateKey	to be deleted - use ML-DSA instead.
org.bouncycastle.pqc.jcajce.interfaces.DilithiumPublicKey	to be deleted - use ML-DSA instead.
org.bouncycastle.pqc.jcajce.interfaces.FrodoKey	the standardised FrodoKEM (ISO/IEC 18033-2:2006/Amd 2:2026) is now provided under org.bouncycastle.crypto and org.bouncycastle.jcajce (see FrodoKEMParameters / FrodoKEMParameterSpec). This is the legacy NIST round 3 (unsalted, eFrodoKEM) implementation, retained for backwards compatibility.
org.bouncycastle.pqc.jcajce.interfaces.SPHINCSPlusKey	to be deleted - use SLH-DSA instead.
org.bouncycastle.pqc.jcajce.interfaces.SPHINCSPlusPrivateKey	to be deleted - use SLH-DSA instead.
org.bouncycastle.pqc.jcajce.interfaces.SPHINCSPlusPublicKey	to be deleted - use SLH-DSA instead.
org.bouncycastle.pqc.jcajce.interfaces.StateAwareSignature	it's better to avoid this and use extractKeyShard methods where possible.

Deprecated Classes

Class	Description
org.bouncycastle.asn1.OIDTokenizer	Will be removed
org.bouncycastle.asn1.pkcs.RSAPrivateKeyStructure	use RSAPrivateKey
org.bouncycastle.asn1.sec.ECPrivateKeyStructure	use ECPrivateKey
org.bouncycastle.asn1.util.DERDump	use ASN1Dump.
org.bouncycastle.asn1.x509.PrivateKeyStatement	use PrivateKeyPossessionStatement
org.bouncycastle.asn1.x509.RSAPublicKeyStructure	use org.bouncycastle.asn1.pkcs.RSAPublicKey
org.bouncycastle.asn1.x509.TBSCertificateStructure	use TBSCertificate
org.bouncycastle.asn1.x509.X509CertificateStructure	use org.bouncycastle.asn1.x509.Certificate
org.bouncycastle.asn1.x509.X509Extension	use Extension
org.bouncycastle.asn1.x509.X509Extensions	use Extension and Extensions
org.bouncycastle.asn1.x509.X509ExtensionsGenerator	use org.bouncycastle.asn1.x509.ExtensionsGenerator
org.bouncycastle.asn1.x509.X509Name	use org.bouncycastle.asn1.x500.X500Name.
org.bouncycastle.asn1.x509.X509NameTokenizer	use X500NameTokenizer
org.bouncycastle.asn1.x9.DHDomainParameters	use DomainParameters
org.bouncycastle.asn1.x9.DHValidationParms	use ValidationParams
org.bouncycastle.crypto.digests.AsconDigest	use Ascon Hash 256 Digest
org.bouncycastle.crypto.digests.AsconXof	Now superseded - please use AsconXof128
org.bouncycastle.crypto.engines.AESFastEngine	unfortunately this class is has a few side channel issues. In an environment where encryption/decryption may be closely observed it should not be used.
org.bouncycastle.crypto.engines.AsconEngine	Now superseded. Please refer to AsconAEAD128Engine for future implementations.
org.bouncycastle.crypto.kems.ECIESKeyEncapsulation	use ECIESKEMGenerator, ECIESKEMExtractor
org.bouncycastle.crypto.kems.RSAKeyEncapsulation	use RSAKEMGenerator, RSAKEMExtractor
org.bouncycastle.crypto.modes.PaddedBlockCipher	use org.bouncycastle.crypto.paddings.PaddedBufferedBlockCipher instead.
org.bouncycastle.crypto.params.CCMParameters	use AEADParameters
org.bouncycastle.crypto.signers.ECGOST3410_2012Signer	Use ECGOST3410Signer instead.
org.bouncycastle.crypto.util.Pack	use org.bouncycastle.util.pack
org.bouncycastle.jcajce.BCFKSStoreParameter	This class does not support configuration on creation, use BCFKSLoadStoreParameter for best results.
org.bouncycastle.jcajce.provider.config.PKCS12StoreParameter	use org.bouncycastle.jcajce.PKCS12StoreParameter
org.bouncycastle.jcajce.provider.util.SecretKeyUtil	class appears to be no longer in use, maybe getting imported by others though.
org.bouncycastle.jcajce.spec.KEMParameterSpec	use KTSParameterSpec
org.bouncycastle.jce.PKCS10CertificationRequest	use classes in org.bouncycastle.pkcs.
org.bouncycastle.jce.PKCS12Util	Replaced by invalid reference org.bouncycastle.pkcs.util.PKCS12Util ; this class does not understand RFC 9579 PBMAC1-protected PKCS#12 files (it throws UnsupportedOperationException for them) and will be removed in a future release.
org.bouncycastle.jce.provider.JDKPKCS12StoreParameter	use org.bouncycastle.jcajce.config.PKCS12StoreParameter
org.bouncycastle.jce.provider.X509CertificateObject	Do not use this class directly - either use org.bouncycastle.cert (bcpkix) or CertificateFactory.
org.bouncycastle.jce.provider.X509CertParser	use CertificateFactory or the PEMParser in the openssl package (pkix jar).
org.bouncycastle.jce.provider.X509CRLObject	Do not use this class directly - either use org.bouncycastle.cert (bcpkix) or CertificateFactory.
org.bouncycastle.jce.spec.GOST28147ParameterSpec	use org.bouncycastle.jcajce.spec.GOST28147ParameterSpec
org.bouncycastle.jce.spec.RepeatedSecretKeySpec	use super class org.bouncycastle.jcajce.spec.RepeatedSecretKeySpec
org.bouncycastle.jce.X509Principal	use the X500Name class.
org.bouncycastle.pqc.crypto.cmce.CMCEKEMExtractor	the standardised Classic McEliece KEM (ISO/IEC 18033-2:2006/Amd 2:2026) is now provided under org.bouncycastle.crypto and org.bouncycastle.jcajce (see org.bouncycastle.crypto.params.CMCEParameters and org.bouncycastle.jcajce.spec.CMCEParameterSpec). This is the legacy NIST round 3 (non-pc, incl. mceliece348864) implementation, retained for backwards compatibility.
org.bouncycastle.pqc.crypto.cmce.CMCEKEMGenerator	the standardised Classic McEliece KEM (ISO/IEC 18033-2:2006/Amd 2:2026) is now provided under org.bouncycastle.crypto and org.bouncycastle.jcajce (see org.bouncycastle.crypto.params.CMCEParameters and org.bouncycastle.jcajce.spec.CMCEParameterSpec). This is the legacy NIST round 3 (non-pc, incl. mceliece348864) implementation, retained for backwards compatibility.
org.bouncycastle.pqc.crypto.cmce.CMCEKeyGenerationParameters	the standardised Classic McEliece KEM (ISO/IEC 18033-2:2006/Amd 2:2026) is now provided under org.bouncycastle.crypto and org.bouncycastle.jcajce (see org.bouncycastle.crypto.params.CMCEParameters and org.bouncycastle.jcajce.spec.CMCEParameterSpec). This is the legacy NIST round 3 (non-pc, incl. mceliece348864) implementation, retained for backwards compatibility.
org.bouncycastle.pqc.crypto.cmce.CMCEKeyPairGenerator	the standardised Classic McEliece KEM (ISO/IEC 18033-2:2006/Amd 2:2026) is now provided under org.bouncycastle.crypto and org.bouncycastle.jcajce (see org.bouncycastle.crypto.params.CMCEParameters and org.bouncycastle.jcajce.spec.CMCEParameterSpec). This is the legacy NIST round 3 (non-pc, incl. mceliece348864) implementation, retained for backwards compatibility.
org.bouncycastle.pqc.crypto.cmce.CMCEKeyParameters	the standardised Classic McEliece KEM (ISO/IEC 18033-2:2006/Amd 2:2026) is now provided under org.bouncycastle.crypto and org.bouncycastle.jcajce (see org.bouncycastle.crypto.params.CMCEParameters and org.bouncycastle.jcajce.spec.CMCEParameterSpec). This is the legacy NIST round 3 (non-pc, incl. mceliece348864) implementation, retained for backwards compatibility.
org.bouncycastle.pqc.crypto.cmce.CMCEParameters	the standardised Classic McEliece KEM (ISO/IEC 18033-2:2006/Amd 2:2026) is now provided under org.bouncycastle.crypto and org.bouncycastle.jcajce (see org.bouncycastle.crypto.params.CMCEParameters and org.bouncycastle.jcajce.spec.CMCEParameterSpec). This is the legacy NIST round 3 (non-pc, incl. mceliece348864) implementation, retained for backwards compatibility.
org.bouncycastle.pqc.crypto.cmce.CMCEPrivateKeyParameters	the standardised Classic McEliece KEM (ISO/IEC 18033-2:2006/Amd 2:2026) is now provided under org.bouncycastle.crypto and org.bouncycastle.jcajce (see org.bouncycastle.crypto.params.CMCEParameters and org.bouncycastle.jcajce.spec.CMCEParameterSpec). This is the legacy NIST round 3 (non-pc, incl. mceliece348864) implementation, retained for backwards compatibility.
org.bouncycastle.pqc.crypto.cmce.CMCEPublicKeyParameters	the standardised Classic McEliece KEM (ISO/IEC 18033-2:2006/Amd 2:2026) is now provided under org.bouncycastle.crypto and org.bouncycastle.jcajce (see org.bouncycastle.crypto.params.CMCEParameters and org.bouncycastle.jcajce.spec.CMCEParameterSpec). This is the legacy NIST round 3 (non-pc, incl. mceliece348864) implementation, retained for backwards compatibility.
org.bouncycastle.pqc.crypto.frodo.FrodoKEMExtractor	the standardised FrodoKEM (ISO/IEC 18033-2:2006/Amd 2:2026) is now provided under org.bouncycastle.crypto and org.bouncycastle.jcajce (see FrodoKEMParameters / FrodoKEMParameterSpec). This is the legacy NIST round 3 (unsalted, eFrodoKEM) implementation, retained for backwards compatibility.
org.bouncycastle.pqc.crypto.frodo.FrodoKEMGenerator	the standardised FrodoKEM (ISO/IEC 18033-2:2006/Amd 2:2026) is now provided under org.bouncycastle.crypto and org.bouncycastle.jcajce (see FrodoKEMParameters / FrodoKEMParameterSpec). This is the legacy NIST round 3 (unsalted, eFrodoKEM) implementation, retained for backwards compatibility.
org.bouncycastle.pqc.crypto.frodo.FrodoKeyGenerationParameters	the standardised FrodoKEM (ISO/IEC 18033-2:2006/Amd 2:2026) is now provided under org.bouncycastle.crypto and org.bouncycastle.jcajce (see FrodoKEMParameters / FrodoKEMParameterSpec). This is the legacy NIST round 3 (unsalted, eFrodoKEM) implementation, retained for backwards compatibility.
org.bouncycastle.pqc.crypto.frodo.FrodoKeyPairGenerator	the standardised FrodoKEM (ISO/IEC 18033-2:2006/Amd 2:2026) is now provided under org.bouncycastle.crypto and org.bouncycastle.jcajce (see FrodoKEMParameters / FrodoKEMParameterSpec). This is the legacy NIST round 3 (unsalted, eFrodoKEM) implementation, retained for backwards compatibility.
org.bouncycastle.pqc.crypto.frodo.FrodoKeyParameters	the standardised FrodoKEM (ISO/IEC 18033-2:2006/Amd 2:2026) is now provided under org.bouncycastle.crypto and org.bouncycastle.jcajce (see FrodoKEMParameters / FrodoKEMParameterSpec). This is the legacy NIST round 3 (unsalted, eFrodoKEM) implementation, retained for backwards compatibility.
org.bouncycastle.pqc.crypto.frodo.FrodoParameters	the standardised FrodoKEM (ISO/IEC 18033-2:2006/Amd 2:2026) is now provided under org.bouncycastle.crypto and org.bouncycastle.jcajce (see FrodoKEMParameters / FrodoKEMParameterSpec). This is the legacy NIST round 3 (unsalted, eFrodoKEM) implementation, retained for backwards compatibility.
org.bouncycastle.pqc.crypto.frodo.FrodoPrivateKeyParameters	the standardised FrodoKEM (ISO/IEC 18033-2:2006/Amd 2:2026) is now provided under org.bouncycastle.crypto and org.bouncycastle.jcajce (see FrodoKEMParameters / FrodoKEMParameterSpec). This is the legacy NIST round 3 (unsalted, eFrodoKEM) implementation, retained for backwards compatibility.
org.bouncycastle.pqc.crypto.frodo.FrodoPublicKeyParameters	the standardised FrodoKEM (ISO/IEC 18033-2:2006/Amd 2:2026) is now provided under org.bouncycastle.crypto and org.bouncycastle.jcajce (see FrodoKEMParameters / FrodoKEMParameterSpec). This is the legacy NIST round 3 (unsalted, eFrodoKEM) implementation, retained for backwards compatibility.
org.bouncycastle.pqc.crypto.mldsa.HashMLDSASigner	use org.bouncycastle.crypto.signers.HashMLDSASigner
org.bouncycastle.pqc.crypto.mldsa.MLDSAKeyGenerationParameters	use org.bouncycastle.crypto.params.MLDSAKeyGenerationParameters
org.bouncycastle.pqc.crypto.mldsa.MLDSAKeyPairGenerator	use org.bouncycastle.crypto.generators.MLDSAKeyPairGenerator
org.bouncycastle.pqc.crypto.mldsa.MLDSAKeyParameters	use org.bouncycastle.crypto.params.MLDSAKeyParameters
org.bouncycastle.pqc.crypto.mldsa.MLDSAParameters	use org.bouncycastle.crypto.params.MLDSAParameters
org.bouncycastle.pqc.crypto.mldsa.MLDSAPrivateKeyParameters	use org.bouncycastle.crypto.params.MLDSAPrivateKeyParameters
org.bouncycastle.pqc.crypto.mldsa.MLDSAPublicKeyParameters	use org.bouncycastle.crypto.params.MLDSAPublicKeyParameters
org.bouncycastle.pqc.crypto.mldsa.MLDSASigner	use org.bouncycastle.crypto.signers.MLDSASigner
org.bouncycastle.pqc.crypto.mlkem.MLKEMExtractor	use org.bouncycastle.crypto.kems.MLKEMExtractor
org.bouncycastle.pqc.crypto.mlkem.MLKEMGenerator	use org.bouncycastle.crypto.kems.MLKEMGenerator
org.bouncycastle.pqc.crypto.mlkem.MLKEMKeyGenerationParameters	use org.bouncycastle.crypto.params.MLKEMKeyGenerationParameters
org.bouncycastle.pqc.crypto.mlkem.MLKEMKeyPairGenerator	use org.bouncycastle.crypto.generators.MLKEMKeyPairGenerator
org.bouncycastle.pqc.crypto.mlkem.MLKEMKeyParameters	use org.bouncycastle.crypto.params.MLKEMKeyParameters
org.bouncycastle.pqc.crypto.mlkem.MLKEMParameters	use org.bouncycastle.crypto.params.MLKEMParameters
org.bouncycastle.pqc.crypto.mlkem.MLKEMPrivateKeyParameters	use org.bouncycastle.crypto.params.MLKEMKeyPrivateKeyParameters
org.bouncycastle.pqc.crypto.mlkem.MLKEMPublicKeyParameters	use org.bouncycastle.crypto.params.MLKEMKeyPublicKeyParameters
org.bouncycastle.pqc.crypto.slhdsa.HashSLHDSASigner	use org.bouncycastle.crypto.signers.HashSLHDSASigner
org.bouncycastle.pqc.crypto.slhdsa.SLHDSAEngine	use org.bouncycastle.crypto.signers.slhdsa.SLHDSASigner
org.bouncycastle.pqc.crypto.slhdsa.SLHDSAKeyGenerationParameters	use org.bouncycastle.crypto.params.SLHDSAKeyGenerationParameters
org.bouncycastle.pqc.crypto.slhdsa.SLHDSAKeyPairGenerator	use org.bouncycastle.crypto.generators.SLHDSAKeyPairGenerator
org.bouncycastle.pqc.crypto.slhdsa.SLHDSAKeyParameters	use org.bouncycastle.crypto.params.SLHDSAKeyParameters
org.bouncycastle.pqc.crypto.slhdsa.SLHDSAParameters	use org.bouncycastle.crypto.params.SLHDSAParameters
org.bouncycastle.pqc.crypto.slhdsa.SLHDSAPrivateKeyParameters	use org.bouncycastle.crypto.params.SLHDSAPrivateKeyParameters
org.bouncycastle.pqc.crypto.slhdsa.SLHDSAPublicKeyParameters	use org.bouncycastle.crypto.params.SLHDSAPublicKeyParameters
org.bouncycastle.pqc.crypto.slhdsa.SLHDSASigner	use org.bouncycastle.crypto.signers.SLHDSASigner
org.bouncycastle.pqc.jcajce.provider.CMCE	the standardised Classic McEliece KEM (ISO/IEC 18033-2:2006/Amd 2:2026) is now provided under org.bouncycastle.crypto and org.bouncycastle.jcajce (see org.bouncycastle.crypto.params.CMCEParameters and org.bouncycastle.jcajce.spec.CMCEParameterSpec). This is the legacy NIST round 3 (non-pc, incl. mceliece348864) implementation, retained for backwards compatibility.
org.bouncycastle.pqc.jcajce.provider.cmce.BCCMCEPrivateKey	the standardised Classic McEliece KEM (ISO/IEC 18033-2:2006/Amd 2:2026) is now provided under org.bouncycastle.crypto and org.bouncycastle.jcajce (see org.bouncycastle.crypto.params.CMCEParameters and org.bouncycastle.jcajce.spec.CMCEParameterSpec). This is the legacy NIST round 3 (non-pc, incl. mceliece348864) implementation, retained for backwards compatibility.
org.bouncycastle.pqc.jcajce.provider.cmce.BCCMCEPublicKey	the standardised Classic McEliece KEM (ISO/IEC 18033-2:2006/Amd 2:2026) is now provided under org.bouncycastle.crypto and org.bouncycastle.jcajce (see org.bouncycastle.crypto.params.CMCEParameters and org.bouncycastle.jcajce.spec.CMCEParameterSpec). This is the legacy NIST round 3 (non-pc, incl. mceliece348864) implementation, retained for backwards compatibility.
org.bouncycastle.pqc.jcajce.provider.cmce.CMCEKeyFactorySpi	the standardised Classic McEliece KEM (ISO/IEC 18033-2:2006/Amd 2:2026) is now provided under org.bouncycastle.crypto and org.bouncycastle.jcajce (see org.bouncycastle.crypto.params.CMCEParameters and org.bouncycastle.jcajce.spec.CMCEParameterSpec). This is the legacy NIST round 3 (non-pc, incl. mceliece348864) implementation, retained for backwards compatibility.
org.bouncycastle.pqc.jcajce.provider.cmce.CMCEKeyGeneratorSpi	the standardised Classic McEliece KEM (ISO/IEC 18033-2:2006/Amd 2:2026) is now provided under org.bouncycastle.crypto and org.bouncycastle.jcajce (see org.bouncycastle.crypto.params.CMCEParameters and org.bouncycastle.jcajce.spec.CMCEParameterSpec). This is the legacy NIST round 3 (non-pc, incl. mceliece348864) implementation, retained for backwards compatibility.
org.bouncycastle.pqc.jcajce.provider.cmce.CMCEKeyPairGeneratorSpi	the standardised Classic McEliece KEM (ISO/IEC 18033-2:2006/Amd 2:2026) is now provided under org.bouncycastle.crypto and org.bouncycastle.jcajce (see org.bouncycastle.crypto.params.CMCEParameters and org.bouncycastle.jcajce.spec.CMCEParameterSpec). This is the legacy NIST round 3 (non-pc, incl. mceliece348864) implementation, retained for backwards compatibility.
org.bouncycastle.pqc.jcajce.provider.Frodo	the standardised FrodoKEM (ISO/IEC 18033-2:2006/Amd 2:2026) is now provided under org.bouncycastle.crypto and org.bouncycastle.jcajce (see FrodoKEMParameters / FrodoKEMParameterSpec). This is the legacy NIST round 3 (unsalted, eFrodoKEM) implementation, retained for backwards compatibility.
org.bouncycastle.pqc.jcajce.provider.frodo.BCFrodoPrivateKey	the standardised FrodoKEM (ISO/IEC 18033-2:2006/Amd 2:2026) is now provided under org.bouncycastle.crypto and org.bouncycastle.jcajce (see FrodoKEMParameters / FrodoKEMParameterSpec). This is the legacy NIST round 3 (unsalted, eFrodoKEM) implementation, retained for backwards compatibility.
org.bouncycastle.pqc.jcajce.provider.frodo.BCFrodoPublicKey	the standardised FrodoKEM (ISO/IEC 18033-2:2006/Amd 2:2026) is now provided under org.bouncycastle.crypto and org.bouncycastle.jcajce (see FrodoKEMParameters / FrodoKEMParameterSpec). This is the legacy NIST round 3 (unsalted, eFrodoKEM) implementation, retained for backwards compatibility.
org.bouncycastle.pqc.jcajce.provider.frodo.FrodoKeyFactorySpi	the standardised FrodoKEM (ISO/IEC 18033-2:2006/Amd 2:2026) is now provided under org.bouncycastle.crypto and org.bouncycastle.jcajce (see FrodoKEMParameters / FrodoKEMParameterSpec). This is the legacy NIST round 3 (unsalted, eFrodoKEM) implementation, retained for backwards compatibility.
org.bouncycastle.pqc.jcajce.provider.frodo.FrodoKeyGeneratorSpi	the standardised FrodoKEM (ISO/IEC 18033-2:2006/Amd 2:2026) is now provided under org.bouncycastle.crypto and org.bouncycastle.jcajce (see FrodoKEMParameters / FrodoKEMParameterSpec). This is the legacy NIST round 3 (unsalted, eFrodoKEM) implementation, retained for backwards compatibility.
org.bouncycastle.pqc.jcajce.provider.frodo.FrodoKeyPairGeneratorSpi	the standardised FrodoKEM (ISO/IEC 18033-2:2006/Amd 2:2026) is now provided under org.bouncycastle.crypto and org.bouncycastle.jcajce (see FrodoKEMParameters / FrodoKEMParameterSpec). This is the legacy NIST round 3 (unsalted, eFrodoKEM) implementation, retained for backwards compatibility.
org.bouncycastle.pqc.jcajce.provider.util.SpecUtil	use org.bouncycastle.jcajce.util.SpecUtil
org.bouncycastle.pqc.jcajce.spec.CMCEParameterSpec	the standardised Classic McEliece KEM (ISO/IEC 18033-2:2006/Amd 2:2026) is now provided under org.bouncycastle.crypto and org.bouncycastle.jcajce (see org.bouncycastle.crypto.params.CMCEParameters and org.bouncycastle.jcajce.spec.CMCEParameterSpec). This is the legacy NIST round 3 (non-pc, incl. mceliece348864) implementation, retained for backwards compatibility.
org.bouncycastle.pqc.jcajce.spec.FrodoParameterSpec	the standardised FrodoKEM (ISO/IEC 18033-2:2006/Amd 2:2026) is now provided under org.bouncycastle.crypto and org.bouncycastle.jcajce (see FrodoKEMParameters / FrodoKEMParameterSpec). This is the legacy NIST round 3 (unsalted, eFrodoKEM) implementation, retained for backwards compatibility.
org.bouncycastle.pqc.jcajce.spec.LMSHSSParameterSpec	use LMSKeyGenParameterSpec
org.bouncycastle.pqc.jcajce.spec.LMSParameterSpec	use LMSKeyGenParameterSpec
org.bouncycastle.util.GF16	moved to GF16; this type now delegates there and will be removed in a future release.

Deprecated Fields

Field	Description
org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers.id_aa_commitmentType	use id_aa_ets_commitmentType instead
org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers.id_aa_otherSigCert	use id_aa_ets_otherSigCert instead
org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers.id_aa_signerLocation	use id_aa_ets_signerLocation instead
org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers.id_aa_sigPolicyId	use id_aa_ets_sigPolicyId instead
org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers.id_alg	use smime_alg instead
org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers.id_spq	use id_spq_oid instead
org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers.pbewithSHAAnd40BitRC2_CBC	use pbeWithSHAAnd40BitRC2_CBC
org.bouncycastle.asn1.pkcs.PKCSObjectIdentifiers.x509certType	use x509Certificate instead
org.bouncycastle.asn1.x500.style.BCStyle.SN	use SERIALNUMBER or SURNAME
org.bouncycastle.asn1.x509.CRLReason.AA_COMPROMISE	use lower case version
org.bouncycastle.asn1.x509.CRLReason.AFFILIATION_CHANGED	use lower case version
org.bouncycastle.asn1.x509.CRLReason.CA_COMPROMISE	use lower case version
org.bouncycastle.asn1.x509.CRLReason.CERTIFICATE_HOLD	use lower case version
org.bouncycastle.asn1.x509.CRLReason.CESSATION_OF_OPERATION	use lower case version
org.bouncycastle.asn1.x509.CRLReason.KEY_COMPROMISE	use lower case version
org.bouncycastle.asn1.x509.CRLReason.PRIVILEGE_WITHDRAWN	use lower case version
org.bouncycastle.asn1.x509.CRLReason.REMOVE_FROM_CRL	use lower case version
org.bouncycastle.asn1.x509.CRLReason.SUPERSEDED	use lower case version
org.bouncycastle.asn1.x509.CRLReason.UNSPECIFIED	use lower case version
org.bouncycastle.asn1.x509.ReasonFlags.AA_COMPROMISE	use lower case version
org.bouncycastle.asn1.x509.ReasonFlags.AFFILIATION_CHANGED	use lower case version
org.bouncycastle.asn1.x509.ReasonFlags.CA_COMPROMISE	use lower case version
org.bouncycastle.asn1.x509.ReasonFlags.CERTIFICATE_HOLD	use lower case version
org.bouncycastle.asn1.x509.ReasonFlags.CESSATION_OF_OPERATION	use lower case version
org.bouncycastle.asn1.x509.ReasonFlags.KEY_COMPROMISE	use lower case version
org.bouncycastle.asn1.x509.ReasonFlags.PRIVILEGE_WITHDRAWN	use lower case version
org.bouncycastle.asn1.x509.ReasonFlags.SUPERSEDED	use lower case version
org.bouncycastle.asn1.x509.ReasonFlags.UNUSED	use lower case version
org.bouncycastle.asn1.x509.X509AttributeIdentifiers.id_at_privateKeyStatement	use statementOfPossession
org.bouncycastle.asn1.x509.X509AttributeIdentifiers.RoleSyntax	use id_at_role
org.bouncycastle.asn1.x509.X509Extensions.AuditIdentity	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.AuthorityInfoAccess	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.AuthorityKeyIdentifier	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.BasicConstraints	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.BiometricInfo	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.CertificateIssuer	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.CertificatePolicies	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.CRLDistributionPoints	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.CRLNumber	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.DeltaCRLIndicator	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.ExtendedKeyUsage	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.FreshestCRL	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.InhibitAnyPolicy	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.InstructionCode	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.InvalidityDate	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.IssuerAlternativeName	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.IssuingDistributionPoint	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.KeyUsage	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.LogoType	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.NameConstraints	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.NoRevAvail	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.PolicyConstraints	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.PolicyMappings	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.PrivateKeyUsagePeriod	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.QCStatements	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.ReasonCode	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.SubjectAlternativeName	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.SubjectDirectoryAttributes	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.SubjectInfoAccess	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.SubjectKeyIdentifier	use X509Extension value.
org.bouncycastle.asn1.x509.X509Extensions.TargetInformation	use X509Extension value.
org.bouncycastle.asn1.x509.X509Name.C	use a X500NameStyle
org.bouncycastle.asn1.x509.X509Name.CN	use a X500NameStyle
org.bouncycastle.asn1.x509.X509Name.EmailAddress	use a X500NameStyle
org.bouncycastle.asn1.x509.X509Name.O	use a X500NameStyle
org.bouncycastle.asn1.x509.X509Name.OIDLookUp	use DefaultSymbols
org.bouncycastle.asn1.x509.X509Name.OU	use a X500NameStyle
org.bouncycastle.asn1.x509.X509Name.SymbolLookUp	use DefaultLookUp
org.bouncycastle.asn1.x509.X509Name.T	use a X500NameStyle
org.bouncycastle.asn1.x509.X509ObjectIdentifiers.id_PasswordBasedMac	Use CRMFObjectIdentifiers.passwordBasedMac instead
org.bouncycastle.crypto.encodings.PKCS1Encoding.STRICT_LENGTH_ENABLED_PROPERTY	use NOT_STRICT_LENGTH_ENABLED_PROPERTY
org.bouncycastle.crypto.engines.Salsa20Engine.sigma
org.bouncycastle.crypto.engines.Salsa20Engine.tau
org.bouncycastle.crypto.hpke.HPKE.kem_P384_SHA348	use kem_P384_SHA384
org.bouncycastle.crypto.signers.ISO9796d2PSSSigner.TRAILER_IMPLICIT	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2PSSSigner.TRAILER_RIPEMD128	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2PSSSigner.TRAILER_RIPEMD160	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2PSSSigner.TRAILER_SHA1	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2PSSSigner.TRAILER_SHA256	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2PSSSigner.TRAILER_SHA384	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2PSSSigner.TRAILER_SHA512	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2PSSSigner.TRAILER_WHIRLPOOL	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2Signer.TRAILER_IMPLICIT	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2Signer.TRAILER_RIPEMD128	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2Signer.TRAILER_RIPEMD160	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2Signer.TRAILER_SHA1	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2Signer.TRAILER_SHA256	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2Signer.TRAILER_SHA384	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2Signer.TRAILER_SHA512	use ISOTrailers
org.bouncycastle.crypto.signers.ISO9796d2Signer.TRAILER_WHIRLPOOL	use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_IMPLICIT	use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_RIPEMD128	use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_RIPEMD160	use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_SHA1	use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_SHA224	use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_SHA256	use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_SHA384	use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_SHA512	use ISOTrailers
org.bouncycastle.crypto.signers.X931Signer.TRAILER_WHIRLPOOL	use ISOTrailers
org.bouncycastle.pqc.asn1.PQCObjectIdentifiers.xmss_mt_with_SHA256	use xmss_mt_SHA256ph
org.bouncycastle.pqc.asn1.PQCObjectIdentifiers.xmss_mt_with_SHA512	use xmss_mt_SHA512ph
org.bouncycastle.pqc.asn1.PQCObjectIdentifiers.xmss_mt_with_SHAKE128	use xmss_mt_SHAKE128ph
org.bouncycastle.pqc.asn1.PQCObjectIdentifiers.xmss_mt_with_SHAKE256	use xmss_mt_SHAKE256ph
org.bouncycastle.pqc.asn1.PQCObjectIdentifiers.xmss_with_SHA256	use xmss_SHA256ph
org.bouncycastle.pqc.asn1.PQCObjectIdentifiers.xmss_with_SHA512	use xmss_SHA512ph
org.bouncycastle.pqc.asn1.PQCObjectIdentifiers.xmss_with_SHAKE128	use xmss_SHAKE128ph
org.bouncycastle.pqc.asn1.PQCObjectIdentifiers.xmss_with_SHAKE256	use xmss_SHAKE256ph
org.bouncycastle.pqc.legacy.sphincsplus.SPHINCSPlusParameters.haraka_128f	obsolete to be removed
org.bouncycastle.pqc.legacy.sphincsplus.SPHINCSPlusParameters.haraka_128s
org.bouncycastle.pqc.legacy.sphincsplus.SPHINCSPlusParameters.haraka_192f
org.bouncycastle.pqc.legacy.sphincsplus.SPHINCSPlusParameters.haraka_192s
org.bouncycastle.pqc.legacy.sphincsplus.SPHINCSPlusParameters.haraka_256f
org.bouncycastle.pqc.legacy.sphincsplus.SPHINCSPlusParameters.haraka_256s

Deprecated Methods

Method	Description
org.bouncycastle.asn1.ASN1BitString.getBytes(int)	Will be removed
org.bouncycastle.asn1.ASN1BitString.getPadBits(int)	Will be removed
org.bouncycastle.asn1.ASN1InputStream.readFully(byte[])	No longer used; will be removed
org.bouncycastle.asn1.ASN1InputStream.readLength()	No longer used; will be removed
org.bouncycastle.asn1.bc.ExternalValue.getHashVal()	use getHash(), the internal encoding is now an OCTET STRING
org.bouncycastle.asn1.cryptopro.GOST3410ParamSetParameters.getLKeySize()	use getKeySize
org.bouncycastle.asn1.ocsp.CrlID.getCrlUrl()	Use CrlID.getCrlUrlIA5() instead.
org.bouncycastle.asn1.x509.AuthorityKeyIdentifier.getKeyIdentifier()	Use AuthorityKeyIdentifier.getKeyIdentifierOctets() instead.
org.bouncycastle.asn1.x509.DeltaCertificateDescriptor.getValidity()	Use getValidityObject instead.
org.bouncycastle.asn1.x509.DeltaCertificateDescriptor.trimTo(TBSCertificate, Extensions)	Use DeltaCertificateTool#trimDeltaCertificateDescriptor instead.
org.bouncycastle.asn1.x509.ExtensionsGenerator.addExtension(Extensions)	Use addExtensions instead.
org.bouncycastle.asn1.x509.qualified.BiometricData.getSourceDataUri()	Use BiometricData.getSourceDataUriIA5() instead.
org.bouncycastle.asn1.x509.SubjectPublicKeyInfo.getAlgorithmId()	use getAlgorithm()
org.bouncycastle.asn1.x509.SubjectPublicKeyInfo.getPublicKey()	use parsePublicKey
org.bouncycastle.asn1.x509.V1TBSCertificateGenerator.setIssuer(X509Name)	use X500Name method
org.bouncycastle.asn1.x509.V1TBSCertificateGenerator.setSubject(X509Name)	use X500Name method
org.bouncycastle.asn1.x509.V2AttributeCertificateInfoGenerator.setExtensions(X509Extensions)	use method taking Extensions
org.bouncycastle.asn1.x509.V2TBSCertListGenerator.setExtensions(X509Extensions)	use the method taking Extensions
org.bouncycastle.asn1.x509.V2TBSCertListGenerator.setIssuer(X509Name)	use X500Name method
org.bouncycastle.asn1.x509.V3TBSCertificateGenerator.setExtensions(X509Extensions)	use method taking Extensions
org.bouncycastle.asn1.x509.V3TBSCertificateGenerator.setIssuer(X509Name)	use X500Name method
org.bouncycastle.asn1.x509.V3TBSCertificateGenerator.setSubject(X509Name)	use X500Name method
org.bouncycastle.crypto.agreement.ECVKOAgreement.getFieldSize()	Will be removed
org.bouncycastle.crypto.agreement.jpake.JPAKEUtil.calculateS(char[])	Use version including the modulus instead.
org.bouncycastle.crypto.engines.ThreefishEngine.bytesToWord(byte[], int)	Will be removed
org.bouncycastle.crypto.engines.ThreefishEngine.wordToBytes(long, byte[], int)	Will be removed
org.bouncycastle.crypto.generators.BCrypt.generate(byte[], byte[], int)	as a direct replacement use BCrypt.generate(byte[], byte[], int, boolean) so the terminator choice is explicit at the call site — pass true to have the spec-required 0x00 terminator appended (equivalent to feeding pwInput through BCrypt.passwordToByteArray(char[])), false when the supplied bytes already include it. For general password hashing prefer OpenBSDBCrypt, which handles termination, salt formatting and the modular crypt output line; this raw primitive remains available for test-vector validation and interop with implementations that emit the 24-byte hash directly (issue #1741).
org.bouncycastle.crypto.kems.ECIESKeyEncapsulation.decrypt(byte[], int)	use ECIESKEMExtractor
org.bouncycastle.crypto.kems.ECIESKeyEncapsulation.decrypt(byte[], int, int, int)	use ECIESKEMExtractor
org.bouncycastle.crypto.kems.ECIESKeyEncapsulation.encrypt(byte[], int)	use ECIESKEMGenerator
org.bouncycastle.crypto.kems.ECIESKeyEncapsulation.encrypt(byte[], int, int)	use ECIESKEMGenerator
org.bouncycastle.crypto.kems.MLKEMGenerator.internalGenerateEncapsulated(AsymmetricKeyParameter, byte[])	Use MLKEMGenerator.internalGenerateEncapsulated(MLKEMPublicKeyParameters, byte[]) instead.
org.bouncycastle.crypto.params.Ed25519PrivateKeyParameters.sign(int, Ed25519PublicKeyParameters, byte[], byte[], int, int, byte[], int)	use overload that doesn't take a public key
org.bouncycastle.crypto.params.Ed448PrivateKeyParameters.sign(int, Ed448PublicKeyParameters, byte[], byte[], int, int, byte[], int)	use overload that doesn't take a public key
org.bouncycastle.crypto.params.MLDSAPrivateKeyParameters.getPrivateKey()	Use MLDSAPrivateKeyParameters.getEncoded() instead.
org.bouncycastle.crypto.params.MLKEMPrivateKeyParameters.getParametersWithFormat(int)	Use MLKEMPrivateKeyParameters.withPreferredFormat(int) instead.
org.bouncycastle.crypto.signers.RSADigestSigner.getAlgorithmName()
org.bouncycastle.jcajce.PKIXExtendedParameters.getDate()	Use 'getValidityDate' instead (which can return null).
org.bouncycastle.jcajce.provider.asymmetric.dsa.DSASigner.engineGetParameter(String)
org.bouncycastle.jcajce.provider.asymmetric.dsa.DSASigner.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.jcajce.provider.asymmetric.dstu.SignatureSpi.engineGetParameter(String)
org.bouncycastle.jcajce.provider.asymmetric.dstu.SignatureSpi.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.jcajce.provider.asymmetric.ecgost.SignatureSpi.engineGetParameter(String)
org.bouncycastle.jcajce.provider.asymmetric.ecgost.SignatureSpi.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.jcajce.provider.asymmetric.ecgost12.ECGOST2012SignatureSpi256.engineGetParameter(String)
org.bouncycastle.jcajce.provider.asymmetric.ecgost12.ECGOST2012SignatureSpi256.engineSetParameter(String, Object)	replaced with "#engineSetParameter(java.security.spec.AlgorithmParameterSpec)"
org.bouncycastle.jcajce.provider.asymmetric.ecgost12.ECGOST2012SignatureSpi512.engineGetParameter(String)
org.bouncycastle.jcajce.provider.asymmetric.ecgost12.ECGOST2012SignatureSpi512.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.jcajce.provider.asymmetric.gost.SignatureSpi.engineGetParameter(String)
org.bouncycastle.jcajce.provider.asymmetric.gost.SignatureSpi.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.jcajce.provider.asymmetric.rsa.DigestSignatureSpi.engineGetParameter(String)
org.bouncycastle.jcajce.provider.asymmetric.rsa.DigestSignatureSpi.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.jcajce.provider.asymmetric.rsa.ISOSignatureSpi.engineGetParameter(String)
org.bouncycastle.jcajce.provider.asymmetric.rsa.ISOSignatureSpi.engineSetParameter(String, Object)	replaced with engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.jcajce.provider.asymmetric.rsa.PSSSignatureSpi.engineSetParameter(String, Object)	replaced with engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.jcajce.provider.asymmetric.rsa.X931SignatureSpi.engineGetParameter(String)
org.bouncycastle.jcajce.provider.asymmetric.rsa.X931SignatureSpi.engineSetParameter(String, Object)	replaced with engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.jcajce.provider.asymmetric.util.BaseDeterministicOrRandomSignature.engineGetParameter(String)	replaced with engineGetParameters()
org.bouncycastle.jcajce.provider.asymmetric.util.BaseDeterministicOrRandomSignature.engineSetParameter(String, Object)	replaced with engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.jcajce.provider.asymmetric.util.DSABase.engineGetParameter(String)
org.bouncycastle.jcajce.provider.asymmetric.util.DSABase.engineSetParameter(String, Object)	replaced with "#engineSetParameter(java.security.spec.AlgorithmParameterSpec)"
org.bouncycastle.jcajce.spec.GOST28147ParameterSpec.getSbox()	use getSBox()
org.bouncycastle.jcajce.util.DefaultJcaJceHelper.createDigest(String)	Use createMessageDigest instead
org.bouncycastle.jcajce.util.JcaJceHelper.createDigest(String)	Use createMessageDigest instead
org.bouncycastle.jcajce.util.JcaJceUtils.extractParameters(AlgorithmParameters)	use AlgorithmParametersUtils.extractParameters(AlgorithmParameters params)
org.bouncycastle.jcajce.util.JcaJceUtils.getDigestAlgName(ASN1ObjectIdentifier)	use MessageDigestUtils,getDigestName()
org.bouncycastle.jcajce.util.JcaJceUtils.loadParameters(AlgorithmParameters, ASN1Encodable)	use AlgorithmParametersUtils.loadParameters(AlgorithmParameters params, ASN1Encodable sParams)
org.bouncycastle.jcajce.util.NamedJcaJceHelper.createDigest(String)	Use createMessageDigest instead
org.bouncycastle.jcajce.util.ProviderJcaJceHelper.createDigest(String)	Use createMessageDigest instead
org.bouncycastle.math.ec.rfc7748.X25519Field.decode(byte[], int[])	Use X25519Field.decode255(byte[], int[]) instead.
org.bouncycastle.math.ec.rfc7748.X25519Field.decode(byte[], int, int[])	Use X25519Field.decode255(byte[], int, int[], int) instead.
org.bouncycastle.math.ec.rfc7748.X25519Field.decode(byte[], int, int[], int)	Use X25519Field.decode255(byte[], int, int[], int) instead.
org.bouncycastle.math.ec.rfc7748.X25519Field.decode(int[], int, int[])	Use X25519Field.decode255(int[], int, int[], int) instead.
org.bouncycastle.math.ec.rfc7748.X448Field.decode(byte[], int[])	Use X448Field.decode448(byte[], int[]) instead.
org.bouncycastle.math.ec.rfc7748.X448Field.decode(byte[], int, int[])	Use X448Field.decode448(byte[], int, int[], int) instead.
org.bouncycastle.math.ec.rfc7748.X448Field.decode(byte[], int, int[], int)	Use X448Field.decode448(byte[], int, int[], int) instead.
org.bouncycastle.math.ec.rfc7748.X448Field.decode(int[], int, int[])	Use X448Field.decode448(int[], int, int[], int) instead.
org.bouncycastle.pqc.crypto.crystals.dilithium.DilithiumPrivateKeyParameters.getPrivateKey()	Use DilithiumPrivateKeyParameters.getEncoded() instead.
org.bouncycastle.pqc.crypto.mldsa.MLDSAPrivateKeyParameters.getPrivateKey()	Use MLDSAPrivateKeyParameters.getEncoded() instead.
org.bouncycastle.pqc.crypto.mlkem.MLKEMGenerator.internalGenerateEncapsulated(AsymmetricKeyParameter, byte[])	Use MLKEMGenerator.internalGenerateEncapsulated(MLKEMPublicKeyParameters, byte[]) instead.
org.bouncycastle.pqc.crypto.mlkem.MLKEMPrivateKeyParameters.getParametersWithFormat(int)	Use MLKEMPrivateKeyParameters.withPreferredFormat(int) instead.
org.bouncycastle.pqc.crypto.xmss.XMSSMTPrivateKeyParameters.toByteArray()	use getEncoded() - this method will become private.
org.bouncycastle.pqc.crypto.xmss.XMSSMTPublicKeyParameters.toByteArray()	use getEncoded() - this method will become private.
org.bouncycastle.pqc.crypto.xmss.XMSSPrivateKeyParameters.toByteArray()	use getEncoded() - this method will become private.
org.bouncycastle.pqc.crypto.xmss.XMSSPublicKeyParameters.toByteArray()	use getEncoded() - this method will become private.
org.bouncycastle.pqc.crypto.xmss.XMSSSignature.toByteArray()	use getEncoded() this method will become private.
org.bouncycastle.pqc.jcajce.provider.aimer.SignatureSpi.engineGetParameter(String)
org.bouncycastle.pqc.jcajce.provider.aimer.SignatureSpi.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.pqc.jcajce.provider.dilithium.SignatureSpi.engineGetParameter(String)
org.bouncycastle.pqc.jcajce.provider.dilithium.SignatureSpi.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.pqc.jcajce.provider.faest.SignatureSpi.engineGetParameter(String)
org.bouncycastle.pqc.jcajce.provider.faest.SignatureSpi.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.pqc.jcajce.provider.falcon.SignatureSpi.engineGetParameter(String)
org.bouncycastle.pqc.jcajce.provider.falcon.SignatureSpi.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.pqc.jcajce.provider.haetae.SignatureSpi.engineGetParameter(String)
org.bouncycastle.pqc.jcajce.provider.haetae.SignatureSpi.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.pqc.jcajce.provider.hawk.SignatureSpi.engineGetParameter(String)
org.bouncycastle.pqc.jcajce.provider.hawk.SignatureSpi.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.pqc.jcajce.provider.lms.LMSSignatureSpi.engineGetParameter(String)
org.bouncycastle.pqc.jcajce.provider.lms.LMSSignatureSpi.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.pqc.jcajce.provider.mayo.SignatureSpi.engineGetParameter(String)
org.bouncycastle.pqc.jcajce.provider.mayo.SignatureSpi.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.pqc.jcajce.provider.mqom.SignatureSpi.engineGetParameter(String)
org.bouncycastle.pqc.jcajce.provider.mqom.SignatureSpi.engineSetParameter(String, Object)	replaced with engineSetParameter(AlgorithmParameterSpec)
org.bouncycastle.pqc.jcajce.provider.picnic.SignatureSpi.engineGetParameter(String)
org.bouncycastle.pqc.jcajce.provider.picnic.SignatureSpi.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.pqc.jcajce.provider.qruov.SignatureSpi.engineGetParameter(String)
org.bouncycastle.pqc.jcajce.provider.qruov.SignatureSpi.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.pqc.jcajce.provider.sdith.SignatureSpi.engineGetParameter(String)
org.bouncycastle.pqc.jcajce.provider.sdith.SignatureSpi.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.pqc.jcajce.provider.snova.SignatureSpi.engineGetParameter(String)
org.bouncycastle.pqc.jcajce.provider.snova.SignatureSpi.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.pqc.jcajce.provider.sphincs.SignatureSpi.engineGetParameter(String)
org.bouncycastle.pqc.jcajce.provider.sphincs.SignatureSpi.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.pqc.jcajce.provider.sphincsplus.SignatureSpi.engineGetParameter(String)
org.bouncycastle.pqc.jcajce.provider.sphincsplus.SignatureSpi.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.pqc.jcajce.provider.sqisign.SignatureSpi.engineGetParameter(String)
org.bouncycastle.pqc.jcajce.provider.sqisign.SignatureSpi.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.pqc.jcajce.provider.uov.SignatureSpi.engineGetParameter(String)	replaced with SignatureSpi.engineGetParameters().
org.bouncycastle.pqc.jcajce.provider.uov.SignatureSpi.engineSetParameter(String, Object)	replaced with SignatureSpi.engineSetParameter(AlgorithmParameterSpec).
org.bouncycastle.pqc.jcajce.provider.xmss.XMSSMTSignatureSpi.engineGetParameter(String)
org.bouncycastle.pqc.jcajce.provider.xmss.XMSSMTSignatureSpi.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.pqc.jcajce.provider.xmss.XMSSSignatureSpi.engineGetParameter(String)
org.bouncycastle.pqc.jcajce.provider.xmss.XMSSSignatureSpi.engineSetParameter(String, Object)	replaced with #engineSetParameter(java.security.spec.AlgorithmParameterSpec)
org.bouncycastle.pqc.legacy.sphincsplus.SPHINCSPlusParameters.getID(SPHINCSPlusParameters)	Use SPHINCSPlusParameters.getID() instead
org.bouncycastle.util.Fingerprint.calculateFingerprintSHA512_160(byte[])	use the SHAKE based version.
org.bouncycastle.util.GF16.decode(byte[], byte[], int)	use GF16.decode(byte[], byte[], int).
org.bouncycastle.util.GF16.decode(byte[], int, byte[], int, int)	use GF16.decode(byte[], int, byte[], int, int).
org.bouncycastle.util.GF16.encode(byte[], byte[], int)	use GF16.encode(byte[], byte[], int).
org.bouncycastle.util.GF16.encode(byte[], byte[], int, int)	use GF16.encode(byte[], byte[], int, int).
org.bouncycastle.util.GF16.innerProduct(byte[], int, byte[], int, int)	use GF16.innerProduct(byte[], int, byte[], int, int).
org.bouncycastle.util.GF16.inv(byte)	use GF16.inv(byte).
org.bouncycastle.util.GF16.mul(byte, byte)	use GF16.mul(byte, byte).
org.bouncycastle.util.GF16.mul(int, int)	use GF16.mul(int, int).
org.bouncycastle.util.Longs.xorTo(int, long[], int, long[], int)	Use Nat.xorTo64(int, long[], int, long[], int) instead.

Deprecated Constructors

Constructor	Description
org.bouncycastle.asn1.DERExternal(ASN1EncodableVector)	Use DERExternal.fromVector(ASN1EncodableVector) instead.
org.bouncycastle.asn1.DERExternal(DERSequence)	Use DERExternal.fromSequence(ASN1Sequence) instead.
org.bouncycastle.asn1.DLExternal(ASN1EncodableVector)	Use DLExternal.fromVector(ASN1EncodableVector) instead.
org.bouncycastle.asn1.DLExternal(DLSequence)	Use DLExternal.fromSequence(ASN1Sequence) instead.
org.bouncycastle.asn1.ocsp.ResponseData(ResponderID, ASN1GeneralizedTime, ASN1Sequence, X509Extensions)	use method taking Extensions
org.bouncycastle.asn1.ocsp.SingleResponse(CertID, CertStatus, ASN1GeneralizedTime, ASN1GeneralizedTime, X509Extensions)	use method taking ASN1GeneralizedTime and Extensions
org.bouncycastle.asn1.ocsp.TBSRequest(GeneralName, ASN1Sequence, X509Extensions)	use method taking Extensions
org.bouncycastle.asn1.pkcs.CertificationRequest(ASN1Sequence)	use getInstance()
org.bouncycastle.asn1.pkcs.CertificationRequestInfo(X509Name, SubjectPublicKeyInfo, ASN1Set)	use X500Name method.
org.bouncycastle.asn1.x500.X500Name(X500NameStyle, X500Name)	use the getInstance() method that takes a style.
org.bouncycastle.asn1.x509.AuthorityKeyIdentifier(SubjectPublicKeyInfo)	create the extension using org.bouncycastle.cert.X509ExtensionUtils
org.bouncycastle.asn1.x509.AuthorityKeyIdentifier(SubjectPublicKeyInfo, GeneralNames, BigInteger)	create the extension using org.bouncycastle.cert.X509ExtensionUtils
org.bouncycastle.asn1.x509.ExtendedKeyUsage(Vector)	use KeyPurposeId[] constructor.
org.bouncycastle.asn1.x509.GeneralName(X509Name)	use X500Name constructor.
org.bouncycastle.asn1.x509.PolicyMappings(Hashtable)	use CertPolicyId constructors.
org.bouncycastle.asn1.x509.PolicyQualifierInfo(ASN1Sequence)	use PolicyQualifierInfo.getInstance()
org.bouncycastle.asn1.x509.SubjectPublicKeyInfo(ASN1Sequence)	use SubjectPublicKeyInfo.getInstance()
org.bouncycastle.asn1.x509.X509Extensions(Vector, Hashtable)	use Extensions
org.bouncycastle.asn1.x509.X509Extensions(Vector, Vector)	use Extensions
org.bouncycastle.asn1.x509.X509Name(boolean, String)	use X500Name, X500NameBuilder
org.bouncycastle.asn1.x509.X509Name(boolean, String, X509NameEntryConverter)	use X500Name, X500NameBuilder
org.bouncycastle.asn1.x509.X509Name(boolean, Hashtable, String)	use X500Name, X500NameBuilder
org.bouncycastle.asn1.x509.X509Name(String)	use X500Name, X500NameBuilder
org.bouncycastle.asn1.x509.X509Name(String, X509NameEntryConverter)	use X500Name, X500NameBuilder
org.bouncycastle.asn1.x509.X509Name(Hashtable)	use an ordered constructor! The hashtable ordering is rarely correct
org.bouncycastle.asn1.x509.X509Name(Vector, Hashtable, X509NameEntryConverter)	use X500Name, X500NameBuilder
org.bouncycastle.asn1.x509.X509Name(Vector, Vector)	use X500Name, X500NameBuilder
org.bouncycastle.asn1.x509.X509Name(Vector, Vector, X509NameEntryConverter)	use X500Name, X500NameBuilder
org.bouncycastle.asn1.x509.X509Name(ASN1Sequence)	use X500Name.getInstance()
org.bouncycastle.crypto.AsymmetricCipherKeyPair(CipherParameters, CipherParameters)	use AsymmetricKeyParameter
org.bouncycastle.crypto.BufferedBlockCipher(BlockCipher)	use the constructor on DefaultBufferedBlockCipher.
org.bouncycastle.crypto.engines.AESEngine()	use AESEngine.newInstance()
org.bouncycastle.crypto.macs.BlockCipherMac(BlockCipher)	use CBCBlockCipherMac
org.bouncycastle.crypto.macs.BlockCipherMac(BlockCipher, int)	use CBCBlockCipherMac
org.bouncycastle.crypto.macs.OldHMac(Digest)	uses incorrect pad for SHA-512 and SHA-384 use HMac.
org.bouncycastle.crypto.modes.CBCBlockCipher(BlockCipher)	use the CBCBlockCipher.newInstance() static method.
org.bouncycastle.crypto.modes.CCMBlockCipher(BlockCipher)	use the CCMBlockCipher.newInstance() static method.
org.bouncycastle.crypto.modes.CFBBlockCipher(BlockCipher, int)	use the equivalent CFBBlockCipher.newInstance() static method.
org.bouncycastle.crypto.modes.GCMBlockCipher(BlockCipher)	use the GCMBlockCipher.newInstance() static method.
org.bouncycastle.crypto.modes.GCMBlockCipher(BlockCipher, GCMMultiplier)	use the CBCBlockCipher.newInstance() static method.
org.bouncycastle.crypto.modes.SICBlockCipher(BlockCipher)	use newInstance() method.
org.bouncycastle.jce.spec.GOST28147ParameterSpec(byte[])
org.bouncycastle.jce.spec.GOST28147ParameterSpec(byte[], byte[])
org.bouncycastle.jce.spec.GOST28147ParameterSpec(String)
org.bouncycastle.jce.spec.GOST28147ParameterSpec(String, byte[])
org.bouncycastle.math.ec.ECCurve.F2m(int, int, int, int, BigInteger, BigInteger)	use constructor taking order/cofactor
org.bouncycastle.math.ec.ECCurve.F2m(int, int, BigInteger, BigInteger)	use constructor taking order/cofactor
org.bouncycastle.math.ec.ECCurve.Fp(BigInteger, BigInteger, BigInteger)	use constructor taking order/cofactor
org.bouncycastle.pqc.asn1.CMCEPublicKey(ASN1Sequence)	use getInstance()
org.bouncycastle.pqc.asn1.FalconPublicKey(ASN1Sequence)	use getInstance()
org.bouncycastle.pqc.asn1.SPHINCSPLUSPrivateKey(ASN1Sequence)	use getInstance()
org.bouncycastle.pqc.asn1.SPHINCSPLUSPublicKey(ASN1Sequence)	use getInstance()
org.bouncycastle.pqc.crypto.xwing.XWingPrivateKeyParameters(byte[], MLKEMPrivateKeyParameters, X25519PrivateKeyParameters, MLKEMPublicKeyParameters, X25519PublicKeyParameters)	use the constructor taking org.bouncycastle.crypto.params.MLKEMKeyPublicKeyParameters
org.bouncycastle.util.Fingerprint(byte[], boolean)	use the SHAKE only version.