25.0.2

What's Changed

• Add JMH performance benchmarks by @jasonkatonica in #822
• Support PBKDF2WithHmacSHA512/224 and PBKDF2WithHmacSHA512/256 by @dev-koan in #829
• Fix typos and whitespace issues by @KostasTsiounis in #835
• Modify PQC related alias names by @jasonkatonica in #841
• Allow mvn test execution for entire windows family by @jasonkatonica in #853
• Modify Jenkins pipelines discard policy by @jasonkatonica in #859
• Fix pipeline branch names for artifactory archival by @jasonkatonica in #863
• Migrate to use xlclang compiler for AIX platform by @jasonkatonica in #869
• Modify archive dir for build and perf pipelines by @jasonkatonica in #873
• Remove self integrity verification logic by @Mohit-Rajbhar100698 in #882
• Fixes for PQC test cases and Fix Serialization issues with keys. by @johnpeck-us-ibm in #846
• Add JMH ECSignature test by @jasonkatonica in #884
• Remove dummy closed_Utils_c.h file by @gin-nader in #889
• Implement cleaner to replace deprecated finalizers by @sabrinajlee in #890
• Update Java versions allowed by @KostasTsiounis in #896
• Set default keysize for ECKeyPairGenerator to match OpenJDK by @KostasTsiounis in #906
• Refactor ECPrivateKey and allow getting public key by @KostasTsiounis in #901
• Support for PBES2, PBEKeyfactory, PBEKey and PBEParameters by @dev-koan in #897
• Fix initialization issue with debug by @jasonkatonica in #913
• Allow command line arguments in Jenkins pipeline by @KostasTsiounis in #931
• Set private provider field based upon constructor by @jasonkatonica in #924
• Fix PQC signature context memory leak by @jasonkatonica in #928
• Restrict EC curves in computing shared secret by @JinhangZhang in #935
• Implement cleaner in key algorithms by @sabrinajlee in #939
• Fix unable to find enum PBKDF2WithHmacSHA1 by @dev-koan in #946
• Fixes to PQC test failures found on zOS by @johnpeck-us-ibm in #961
• Update GitHub Actions to use latest Temurin GA release by @dev-koan in #955
• Support OpenXL compiler for AIX by @jasonkatonica in #962
• Fix key compatibility problem in XDHKeyAgreement by @dev-koan in #950
• Implement cleaner in remaining algorithms by @sabrinajlee in #966
• Fix AESGCMCipher key cleanup action by @sabrinajlee in #972

Full Changelog: 25.0.1...25.0.2

21.0.10

What's Changed

• Add JMH performance benchmarks by @jasonkatonica in #823
• Support PBKDF2WithHmacSHA512/224 and PBKDF2WithHmacSHA512/256 by @dev-koan in #830
• Fix typos and whitespace issues by @KostasTsiounis in #836
• Modify PQC related alias names by @jasonkatonica in #842
• Allow mvn test execution for entire windows family by @jasonkatonica in #854
• Modify Jenkins pipelines discard policy by @jasonkatonica in #860
• Fix pipeline branch names for artifactory archival by @jasonkatonica in #864
• Migrate to use xlclang compiler for AIX platform by @jasonkatonica in #870
• Modify archive dir for build and perf pipelines by @jasonkatonica in #874
• Remove self integrity verification logic by @Mohit-Rajbhar100698 in #881
• Fixes for PQC test cases and Fix Serialization issues with keys. by @johnpeck-us-ibm in #847
• Add JMH ECSignature test by @jasonkatonica in #885
• Implement cleaner to replace deprecated finalizers by @sabrinajlee in #891
• Set default keysize for ECKeyPairGenerator to match OpenJDK by @KostasTsiounis in #907
• Refactor ECPrivateKey by @KostasTsiounis in #902
• Support for PBES2, PBEKeyfactory, PBEKey and PBEParameters by @dev-koan in #898
• Fix initialization issue with debug by @jasonkatonica in #914
• Allow command line arguments in Jenkins pipeline by @KostasTsiounis in #932
• Set private provider field based upon constructor by @jasonkatonica in #925
• Fix PQC signature context memory leak by @jasonkatonica in #929
• Restrict EC curves in computing shared secret by @JinhangZhang in #936
• Implement cleaner in key algorithms by @sabrinajlee in #940
• Fix unable to find enum PBKDF2WithHmacSHA1 by @dev-koan in #947
• Fixes to PQC test failures found on zOS by @johnpeck-us-ibm in #960
• Update GitHub Actions to use latest Temurin GA release by @dev-koan in #956
• Fix key compatibility problem in XDHKeyAgreement by @dev-koan in #951
• Implement cleaner in remaining algorithms by @sabrinajlee in #967
• Fix AESGCMCipher key cleanup action by @sabrinajlee in #973

Full Changelog: 21.0.9...21.0.10

17.0.18

What's Changed

• Add JMH performance benchmarks by @jasonkatonica in #824
• Fix typos and whitespace issues by @KostasTsiounis in #837
• Support PBKDF2WithHmacSHA512/224 and PBKDF2WithHmacSHA512/256 by @dev-koan in #831
• Modify PQC related alias names by @jasonkatonica in #843
• Allow mvn test execution for entire windows family by @jasonkatonica in #855
• Modify Jenkins pipelines discard policy by @jasonkatonica in #861
• Fix pipeline branch names for artifactory archival by @jasonkatonica in #865
• Migrate to use xlclang compiler for AIX platform by @jasonkatonica in #871
• Modify archive dir for build and perf pipelines by @jasonkatonica in #875
• Remove self integrity verification logic by @Mohit-Rajbhar100698 in #880
• Fixes for PQC test cases and Fix Serialization issues with keys. by @johnpeck-us-ibm in #849
• Add JMH ECSignature test by @jasonkatonica in #886
• Implement cleaner to replace deprecated finalizers by @sabrinajlee in #892
• Test default keysize for ECKeyPairGenerator by @KostasTsiounis in #908
• Refactor ECPrivateKey by @KostasTsiounis in #903
• Support for PBES2, PBEKeyfactory, PBEKey and PBEParameters by @dev-koan in #900
• Fix initialization issue with debug by @jasonkatonica in #915
• Allow command line arguments in Jenkins pipeline by @KostasTsiounis in #933
• Set private provider field based upon constructor by @jasonkatonica in #926
• Fix PQC signature context memory leak by @jasonkatonica in #930
• Restrict EC curves in computing shared secret by @JinhangZhang in #937
• Implement cleaner in key algorithms by @sabrinajlee in #941
• Fix unable to find enum PBKDF2WithHmacSHA1 by @dev-koan in #948
• Fixes to PQC test failures found on zOS by @johnpeck-us-ibm in #959
• Update GitHub Actions to use latest Temurin GA release by @dev-koan in #957
• Fix key compatibility problem in XDHKeyAgreement by @dev-koan in #952
• Implement cleaner in remaining algorithms by @sabrinajlee in #968
• Fix AESGCMCipher key cleanup action by @sabrinajlee in #974

Full Changelog: 17.0.17...17.0.18

11.0.30

What's Changed

• Add JMH performance benchmarks by @jasonkatonica in #825
• Support PBKDF2WithHmacSHA512/224 and PBKDF2WithHmacSHA512/256 by @dev-koan in #832
• Fix typos and whitespace issues by @KostasTsiounis in #838
• Allow mvn test execution for entire windows family by @jasonkatonica in #856
• Modify Jenkins pipelines discard policy by @jasonkatonica in #862
• Fix pipeline branch names for artifactory archival by @jasonkatonica in #866
• Migrate to use xlclang compiler for AIX platform by @jasonkatonica in #872
• Modify archive dir for build and perf pipelines by @jasonkatonica in #876
• Remove self integrity verification logic by @Mohit-Rajbhar100698 in #879
• Fixes for PQC test cases and Fix Serialization issues with keys. by @johnpeck-us-ibm in #850
• Add JMH ECSignature test by @jasonkatonica in #887
• Implement cleaner to replace deprecated finalizers by @sabrinajlee in #893
• Test default keysize for ECKeyPairGenerator by @KostasTsiounis in #909
• Refactor ECPrivateKey by @KostasTsiounis in #904
• Support for PBES2, PBEKeyfactory, PBEKey and PBEParameters by @dev-koan in #910
• Fix initialization issue with debug by @jasonkatonica in #916
• Allow command line arguments in Jenkins pipeline by @KostasTsiounis in #934
• Set private provider field based upon constructor by @jasonkatonica in #927
• Restrict EC curves in computing shared secret by @JinhangZhang in #938
• Implement cleaner in key algorithms by @sabrinajlee in #942
• Fix unable to find enum PBKDF2WithHmacSHA1 by @dev-koan in #949
• Update GitHub Actions to use latest Temurin GA release by @dev-koan in #958
• Fix key compatibility problem in XDHKeyAgreement by @dev-koan in #953
• Implement cleaner in remaining algorithms by @sabrinajlee in #969
• Fix AESGCMCipher key cleanup action by @sabrinajlee in #975

Full Changelog: 11.0.29...11.0.30

25.0.1

What's Changed

• Update Non-FIPS OCKC binaries to v20250823_8.9.14 by @jasonkatonica in #773
• Assign parent Jenkins node to be none by @jasonkatonica in #777
• Enable PQC algorithms on Mac OS x86 platform by @jasonkatonica in #784
• Check NoWhitespaceAfter and NoWhitespaceBefore by @jasonkatonica in #789
• PQC memory leak fixes by @johnpeck-us-ibm in #795
• Update github action OCKC compilation to v8.9.14 by @jasonkatonica in #799
• Fix typos in PQC related changes by @KostasTsiounis in #804
• Add support for exporting TLS Keying Material by @JinhangZhang in #807
• Fix KEM to follow the SPI and the Java Docs by @johnpeck-us-ibm in #811
• Make use of API to fetch Java 25 by @jasonkatonica in #818
• Always store human readable alg name in PQC keys by @jasonkatonica in #819

Full Changelog: 25...25.0.1

21.0.9

What's Changed

• Add additional test exports for standalone profile by @jasonkatonica in #674
• Update doc for install and PQC by @jasonkatonica in #687
• Allow OpenJCEPlus to run in developer mode by @jasonkatonica in #692
• Remove unnecessary change of interop for z/OS by @KostasTsiounis in #699
• Update configuration doc for OpenJCEPlusFIPS by @jasonkatonica in #704
• Remove com.ibm.crypto.provider.restrictRSAExponent by @taoliult in #709
• Implement thread safety for SecureRandom engine by @dev-koan in #714
• Update hashCode() and equals() in keys to match OpenJDK's version by @KostasTsiounis in #719
• Support engineGetParameters in RSASignature by @JinhangZhang in #733
• Remove commons-lang3-3.17.0.jar dependency by @taoliult in #728
• Throw exception in case of incorrect EC key size by @KostasTsiounis in #743
• Add AESWrap for FIPS and non-FIPS based on Oracle Alaises by @johnpeck-us-ibm in #758
• Ignore case for X25519 and X448 curve names by @gin-nader in #755
• Change DSA signature verify exception cause to EOFException by @gin-nader in #769
• Update Non-FIPS OCKC binaries to v20250823_8.9.14 by @jasonkatonica in #774
• Assign parent Jenkins node to be none by @jasonkatonica in #778
• Enable PQC algorithms on Mac OS x86 platform by @jasonkatonica in #785
• Check NoWhitespaceAfter and NoWhitespaceBefore by @jasonkatonica in #790
• PQC memory leak fixes by @johnpeck-us-ibm in #796
• Update github action OCKC compilation to v8.9.14 by @jasonkatonica in #800
• Fix typos in PQC related changes by @KostasTsiounis in #805
• Fix KEM to follow the SPI and the Java Docs by @johnpeck-us-ibm in #812
• Always store human readable alg name in PQC keys by @jasonkatonica in #820

Full Changelog: 21.0.8...21.0.9

17.0.17

What's Changed

• Add additional test exports for standalone profile by @jasonkatonica in #675
• Update doc for install and PQC by @jasonkatonica in #688
• Allow OpenJCEPlus to run in developer mode by @jasonkatonica in #693
• Remove unnecessary change of interop for z/OS by @KostasTsiounis in #700
• Update configuration doc for OpenJCEPlusFIPS by @jasonkatonica in #705
• Remove com.ibm.crypto.provider.restrictRSAExponent by @taoliult in #710
• Implement thread safety for SecureRandom engine by @dev-koan in #715
• Update hashCode() and equals() in keys to match OpenJDK's version by @KostasTsiounis in #720
• Support engineGetParameters in RSASignature by @JinhangZhang in #735
• Remove commons-lang3-3.17.0.jar dependency by @taoliult in #727
• Throw exception in case of incorrect EC key size by @KostasTsiounis in #744
• Add AESWrap for FIPS and non-FIPS based on Oracle Alaises by @johnpeck-us-ibm in #753
• Ignore case for X25519 and X448 curve names by @gin-nader in #756
• Change DSA signature verify exception cause to EOFException by @gin-nader in #770
• Update Non-FIPS OCKC binaries to v20250823_8.9.14 by @jasonkatonica in #775
• Assign parent Jenkins node to be none by @jasonkatonica in #779
• Enable PQC algorithms on Mac OS x86 platform by @jasonkatonica in #786
• Check NoWhitespaceAfter and NoWhitespaceBefore by @jasonkatonica in #791
• PQC memory leak fixes by @johnpeck-us-ibm in #797
• Update github action OCKC compilation to v8.9.14 by @jasonkatonica in #801
• Fix typos in PQC related changes by @KostasTsiounis in #806
• Fix KEM to follow the SPI and the Java Docs by @johnpeck-us-ibm in #813
• Always store human readable alg name in PQC keys by @jasonkatonica in #821

Full Changelog: 17.0.16...17.0.17

11.0.29

What's Changed

• Add additional test exports for standalone profile by @jasonkatonica in #676
• Update doc for install by @jasonkatonica in #689
• Allow OpenJCEPlus to run in developer mode by @jasonkatonica in #694
• Remove unnecessary change of interop for z/OS by @KostasTsiounis in #701
• Update configuration doc for OpenJCEPlusFIPS by @jasonkatonica in #706
• Remove com.ibm.crypto.provider.restrictRSAExponent by @taoliult in #711
• Implement thread safety for SecureRandom engine by @dev-koan in #716
• Update hashCode() and equals() in keys to match OpenJDK's version by @KostasTsiounis in #721
• Support engineGetParameters in RSASignature by @JinhangZhang in #736
• Remove commons-lang3-3.17.0.jar dependency by @taoliult in #726
• Throw exception in case of incorrect EC key size by @KostasTsiounis in #745
• Add AESWrap for FIPS and non-FIPS based on Oracle Alaises by @johnpeck-us-ibm in #766
• Ignore case for X25519 and X448 curve names by @gin-nader in #757
• Change DSA signature verify exception cause to EOFException by @gin-nader in #771
• Update Non-FIPS OCKC binaries to v20250823_8.9.14 by @jasonkatonica in #776
• Assign parent Jenkins node to be none by @jasonkatonica in #780
• Check NoWhitespaceAfter and NoWhitespaceBefore by @jasonkatonica in #792
• Update github action OCKC compilation to v8.9.14 by @jasonkatonica in #802

Full Changelog: 11.0.28...11.0.29

21.0.8

What's Changed

• Potential multithreading issues related to static variables by @taoliult in #510
• Remove local copies of NamedCurve and CurveDB by @KostasTsiounis in #505
• Modify Jenkins pipeline machine tags by @jasonkatonica in #520
• Update DSAParameters engineToString to match OpenJDK's version by @taoliult in #532
• Update PSSParameters's engineToString to match OpenJDK's version by @KostasTsiounis in #524
• Tolerate empty message EdDSA by @jasonkatonica in #528
• Less instantiation of cipher objects in AES tests by @jasonkatonica in #537
• Update ChaCha20 and ChaCha20Poly1305 cipher to match expected Cipher behaviour by @KostasTsiounis in #542
• Check PSSParameterSpec with different message digest by @JinhangZhang in #550
• Throw InvalidKeyException when XDH small order by @jasonkatonica in #556
• Fix the comment in RSAPSSSignature by @JinhangZhang in #562
• Test and change user supplied random generation by @jasonkatonica in #546
• Optimize SecureRandom usage in various services by @jasonkatonica in #566
• Add check for unsupported EdDSA signature algorithms by @taoliult in #570
• Throw exception for negative digest len or offset by @jasonkatonica in #580
• Update loading encoded OAEPParameters by @KostasTsiounis in #584
• Guard against short buffer within ECDHKeyAgreement by @jasonkatonica in #590
• Update maven dependencies by @jasonkatonica in #595
• Check for acceptable values in NamedParameterSpec by @KostasTsiounis in #601
• Accept spec using a lowercase x448 curve name by @taoliult in #608
• Check for appropriate curve before matching algorithm by @KostasTsiounis in #611
• Update Jacoco plugin version by @KostasTsiounis in #618
• Do not be default run build or test logic by @jasonkatonica in #633
• Add test for key encodings by @jasonkatonica in #624
• Migrate to latest OCKC version by @jasonkatonica in #629
• Remove commons-beanutils-1.9.4.jar dependency due to vulnerability by @taoliult in #639
• Update Maven to 3.9.10 by @jasonkatonica in #645
• Add PBKDF2 multithreaded tests by @jasonkatonica in #649
• Add test case for accepting spec with lowercase X448 curve name by @taoliult in #654
• Add ML-KEM and ML-DSA Algorithms (PQC) by @johnpeck-us-ibm in #658
• Update OCKC to version 8.9.11 by @jasonkatonica in #664

Full Changelog: 21.0.7...21.0.8

17.0.16

What's Changed

• Potential multithreading issues related to static variables by @taoliult in #509
• Remove local copies of NamedCurve and CurveDB by @KostasTsiounis in #506
• Modify Jenkins pipeline machine tags by @jasonkatonica in #521
• Update DSAParameters engineToString to match OpenJDK's version by @taoliult in #533
• Update PSSParameters's engineToString to match OpenJDK's version by @KostasTsiounis in #525
• Tolerate empty message EdDSA by @jasonkatonica in #527
• Less instantiation of cipher objects in AES tests by @jasonkatonica in #538
• Update ChaCha20 and ChaCha20Poly1305 cipher to match expected Cipher behaviour by @KostasTsiounis in #543
• Check PSSParameterSpec with different message digest by @JinhangZhang in #553
• Throw InvalidKeyException when XDH small order by @jasonkatonica in #557
• Fix the comment in RSAPSSSignature by @JinhangZhang in #563
• Test and change user supplied random generation by @jasonkatonica in #547
• Optimize SecureRandom usage in various services by @jasonkatonica in #567
• Add check for unsupported EdDSA signature algorithms by @taoliult in #571
• Throw exception for negative digest len or offset by @jasonkatonica in #581
• Guard against short buffer within ECDHKeyAgreement by @jasonkatonica in #589
• Update maven dependencies by @jasonkatonica in #596
• Check for acceptable values in NamedParameterSpec by @KostasTsiounis in #602
• Accept spec using a lowercase x448 curve name by @taoliult in #607
• Check for appropriate curve before matching algorithm by @KostasTsiounis in #612
• Update Jacoco plugin version by @KostasTsiounis in #619
• Do not be default run build or test logic by @jasonkatonica in #634
• Add test for key encodings by @jasonkatonica in #625
• Migrate to latest OCKC version by @jasonkatonica in #630
• Remove commons-beanutils-1.9.4.jar dependency due to vulnerability by @taoliult in #640
• Update Maven to 3.9.10 by @jasonkatonica in #646
• Add PBKDF2 multithreaded tests by @jasonkatonica in #650
• Add test case for accepting spec with lowercase X448 curve name by @taoliult in #653
• Add ML-KEM and ML-DSA Algorithms (PQC) by @johnpeck-us-ibm in #659
• Update OCKC to version 8.9.11 by @jasonkatonica in #665

Full Changelog: 17.0.15...17.0.16