Deflating news: Bouncy Castle BKS-V1 keystore files not adequately protected

https://www.scmagazine.com/deflatin...iles-not-adequately-protected/article/751885/

 

Not surprised. Cryptographer Bruce Schneier said a few years ago about crypto in general, the math is good but the code is being subverted.

 

@Stefan Froberg remember that conversation we had about OpenKeyChain and the bouncy castle java class? the jcajce provider ?
I bet it's the same one look at this thread from 5 years ago, a few posts down.
http://bouncy-castle.1462172.n4.nab...mpatible-BKS-KeyStore-versions-td4655683.html

 

You are right... org.bouncycastle.jcajce

 

Yes, makes you wonder doesn't it...