AmazonCorrettoCryptoProvider 2.5.0 - 2025-03-05

Build Artifacts

With the 2.5.0 release of ACCP(-FIPS), we've decided to remove build artifacts from GitHub releases, aligning with other AWS cryptography libraries such as AWS-LC and aws-lc-rs. The build artifacts (JARs) are available for download on Maven Central:

• ACCP
• ACCP-FIPS

What's Changed

• Add AWS-LC src & ref flags to Gradle build by @sp717 in #390
• Benchmark to compare AES/GCM and AES/KWP for key wrapping by @amirhosv in #391
• Avoid using RSA_blinding_off_temp_for_accp_compatibility by @amirhosv in #389
• Use LibCryptoRng instead of DEFAULT in Random benchmark by @fabrice102 in #392
• Refactoring some KDF related functions by @amirhosv in #393
• Apply the rule of 3/5/0 to JByteArrayCritical et al. by @fabrice102 in #395
• ConcatinationKDF: SSKDF from NIST.SP.800-56Cr2 Key Derivation by @amirhosv in #397
• Add Ed25519 DSA by @sp717 in #394
• Add Benchmarks for Ed25519 by @sp717 in #401
• Counter KDF: NIST SP 800-108r1-upd1 by @amirhosv in #399
• Use environment variable for key store's password and minor updates by @amirhosv in #402
• Experimental FIPS build by @amirhosv in #403
• Update RSA key generation unit test by @amirhosv in #405
• Avoid unnecessary array copy in singlePass by @pengxiaolong in #408
• Update the FIPS section of README by @amirhosv in #406
• Fix ByteBuffer offset calculation for AES/CBC/NoPadding by @bmathiske in #412
• Make Ed25519 KeyFactory registration Opt-in by @amirhosv in #410
• Remove CPP coverage target from default coverage target by @geedo0 in #414
• Update README section on building ACCP in FIPS mode by @brian-jarvis-aws in #415
• JMH Benchmarking Fixups by @geedo0 in #416
• Add missing JMH parameters and naming changes by @geedo0 in #417
• Add ACCP/AWS-LC version table to README by @WillChilds-Klein in #419
• Add Benchmarking Data to README by @geedo0 in #418
• Bump AWS-LC version to 1.42.0 and AWS-LC-FIPS version to 3.0.0 by @WillChilds-Klein in #421
• Update pom descriptions by @WillChilds-Klein in #420
• Support "pure" ML-DSA by @WillChilds-Klein in #422
• Support "External Mu" ML-DSA by @WillChilds-Klein in #423
• Use ACCP for ML-DSA in EvpKeyFactoryTest (for now) by @WillChilds-Klein in #424
• Add null check to AesCbcSpi by @geedo0 in #426
• Digests in rsa cipher test by @WillChilds-Klein in #428
• Add provider info string by @chockalingamc in #427
• Refactor Git tags to enable use in downstream build scripts by @chockalingamc in #430
• Update README.md regarding ACCP-FIPS and randomness by @fabrice102 in #400
• Bump AWS-LC dependency to 1.45 by @WillChilds-Klein in #431
• Refactor Cipher/AES/CBC Service Registration by @geedo0 in #429
• Support Ed25519ph by @WillChilds-Klein in #432
• Fix classname field of AES KeyGenerator Service by @geedo0 in #435
• Encode ML-DSA priv key as seed, expose MlDsaUtils by @WillChilds-Klein in #434

New Contributors

• @pengxiaolong made their first contribution in #408
• @bmathiske made their first contribution in #412
• @chockalingamc made their first contribution in #427

Full Changelog: 2.4.1...2.5.0