The BC ML-DSA, ML-KEM and SLH-DSA keys and the BCPQC keys with named parameter sets now implement getParams(), returning a NamedParameterSpec naming the parameter set on Java 11 and later as the JDK's own keys do, and the BCPQC MAYO, SDitH, SNOVA and NTRU+ KeyPairGenerators now accept a NamedParameterSpec, which they had refused whatever its case, relates to github #2467.

Author: dghgit

docs/releasenotes.md

@@ -65,6 +65,8 @@ Date: 2026, TBD
 - The ML-DSA public key constructor taking rho and t1 separately checked only for null, so an ML-DSA SubjectPublicKeyInfo in the SEQUENCE { OCTET STRING rho, OCTET STRING t1 } form with a t1 of the wrong length was accepted by PublicKeyFactory and the JCA KeyFactory, unlike the same key in the standard raw encoding. The component constructors for ML-DSA private keys (rho, K, tr, s1, s2, t0, t1, seed) and SLH-DSA private keys (skSeed, prf, pkSeed, pkRoot) likewise accepted components of any length. All three now reject a component whose length does not match the parameter set with an IllegalArgumentException.
 - The light-weight CryptoProWrapEngine (RFC 4357 sec. 6.3) diversified the key encryption key in the caller's own array, so after init the KeyParameter it was given held the diversified key, and initialising again with the same parameters - to unwrap what had just been wrapped, say - diversified it a second time and used a different key. It also failed with a NullPointerException when given no S-box, although init has a branch for that case. It now diversifies a copy, and given no S-box uses the GOST 28147 engine's default S-box for the diversification, the one the wrap itself then uses. The provider's GOST 28147 key wrap ciphers were unaffected, as they always supply an S-box and build a new KeyParameter on every init.
 
+- The BCPQC MAYO, SDitH, SNOVA and NTRU+ KeyPairGenerators refused every java.security.spec.NamedParameterSpec with InvalidAlgorithmParameterException, whatever parameter set it named and in whatever case: they lower-cased the name and then looked it up in a table of upper-case names. The name is now upper-cased, so NamedParameterSpec("MAYO-1") and NamedParameterSpec("mayo-1") both select MAYO-1, as the other BCPQC families already allowed. The generators' own ParameterSpec classes were never affected.
+
 ### 2.1.3 Additional Features and Functionality
 
 - The CRMF certificate request message controls now include the RFC 4211 sec. 6.6 protocolEncrKey control, which names the key a CA is to encrypt its response with: org.bouncycastle.cert.crmf.ProtocolEncrKeyControl carries the SubjectPublicKeyInfo the control is defined to take, and CertificateRequestMessage.getControl() recognises id-regCtrl-protocolEncrKey alongside the regToken, authenticator and pkiArchiveOptions controls it already returned (github PR #2443).
@@ -82,6 +84,8 @@ Date: 2026, TBD
 
 - The BCJSSE provider adds an org.bouncycastle.jsse.BCSSLContext interface exposing extended functionality of its SSLContext, obtained with org.bouncycastle.jsse.util.ContextUtil.getBCSSLContext() by way of the new BCSSLSessionContext interface the context's session contexts implement. Its getDefaultParameters(boolean) and getSupportedParameters(boolean) return the context's default and supported parameters as a BCSSLParameters for either client or server mode, including the BC-specific properties, where SSLContext.getDefaultSSLParameters() and getSupportedSSLParameters() report client mode only and cannot carry those properties. A BCSSLContext describes the initialization of the SSLContext it was obtained from, and is not updated if the SSLContext is re-initialized.
 
+- The BC provider's ML-DSA, ML-KEM and SLH-DSA keys now implement getParams(), which keys inherit from java.security.AsymmetricKey from Java 22, returning a java.security.spec.NamedParameterSpec naming the parameter set (for example "ML-DSA-65") on Java 11 and later, and null before. The JDK's own ML-DSA and ML-KEM keys return only the family name, "ML-DSA" or "ML-KEM", from getAlgorithm() and report the parameter set this way, so comparing getParams() rather than getAlgorithm() now identifies the parameter set whichever provider made the key. The BCPQC provider's keys do the same for every family with named parameter sets - AIMer, BIKE, FAEST, Falcon, HAETAE, HQC, MAYO, MQOM, NTRU, NTRU+, NTRU LPRime, Streamlined NTRU Prime, QR-UOV, SABER, SDitH, SMAUG-T, SNOVA, SQIsign and UOV - with the name their ParameterSpec reports, which the family's KeyPairGenerator accepts back. getAlgorithm() on BC and BCPQC keys is unchanged (github #2467).
+
 ### 2.1.4 Additional Notes
 
 - The sources and javadoc jars of the Ant-built distributions (jdk14, jdk15to18 and jdk13) no longer carry test material. Each module's javadoc target copies the package documentation it needs - org/bouncycastle/<area>/**/*.html - back into the module source directory that has already been compiled from, and zip-src zips that directory afterwards, so every test package's package.html arrived in the sources jar by that route; javadoc-util additionally copied org/bouncycastle/asn1/isismtt/**/*.java, which put test classes into the bcutil javadoc as generated pages, and javadoc-pg deliberately copied the gpg and bcpg test sources in order to document them. Separately the source copies excluded test material only one directory deep and only for *.java, because Ant reads ** as an any-depth wildcard just where it is a whole path segment, so anything nested further or with another extension - the PEM certificate fixtures under org/bouncycastle/est/test/san corrected in 1.86, and an ICAO master list under org/bouncycastle/asn1/icao/test - went through. The source and javadoc copies of every module now exclude test directories at any depth, and javadoc-pg no longer documents the test packages. org.bouncycastle.util.test is unaffected and still ships in the bcprov binary, sources and javadoc jars, as it does from the Gradle build: it is the SimpleTest framework the light-weight API's own test classes are written against, not test material of the distribution. No binary changes - the classes and resources of every Ant-built jar are identical to those of the 1.86 release - and the Gradle-built jdk18on artifacts never carried any of this.

prov/src/main/java/org/bouncycastle/jcajce/provider/asymmetric/mldsa/BCMLDSAPrivateKey.java

@@ -3,6 +3,7 @@
 import java.io.IOException;
 import java.io.ObjectInputStream;
 import java.io.ObjectOutputStream;
+import java.security.spec.AlgorithmParameterSpec;
 
 import javax.security.auth.Destroyable;
 
@@ -15,6 +16,7 @@
 import org.bouncycastle.jcajce.interfaces.MLDSAPrivateKey;
 import org.bouncycastle.jcajce.interfaces.MLDSAPublicKey;
 import org.bouncycastle.jcajce.provider.asymmetric.util.KeyUtil;
+import org.bouncycastle.jcajce.provider.asymmetric.util.NamedParameterSpecUtil;
 import org.bouncycastle.jcajce.spec.MLDSAParameterSpec;
 import org.bouncycastle.util.Arrays;
 import org.bouncycastle.util.Exceptions;
@@ -160,6 +162,17 @@ public byte[] getSeed()
         return params.getSeed();
     }
 
+    /**
+     * Return the parameter set of this key as a java.security.spec.NamedParameterSpec, the form the
+     * JDK's own keys report through java.security.AsymmetricKey.getParams() from Java 22.
+     *
+     * @return a NamedParameterSpec naming the parameter set on Java 11 and later, null otherwise.
+     */
+    public AlgorithmParameterSpec getParams()
+    {
+        return NamedParameterSpecUtil.getNamedParameterSpec(getAlgorithm());
+    }
+
     public MLDSAParameterSpec getParameterSpec()
     {
         return MLDSAParameterSpec.fromName(params.getParameters().getName());

prov/src/main/java/org/bouncycastle/jcajce/provider/asymmetric/mldsa/BCMLDSAPublicKey.java

@@ -3,13 +3,15 @@
 import java.io.IOException;
 import java.io.ObjectInputStream;
 import java.io.ObjectOutputStream;
+import java.security.spec.AlgorithmParameterSpec;
 
 import org.bouncycastle.asn1.x509.SubjectPublicKeyInfo;
 import org.bouncycastle.crypto.params.MLDSAPublicKeyParameters;
 import org.bouncycastle.crypto.util.PublicKeyFactory;
 import org.bouncycastle.crypto.util.SubjectPublicKeyInfoFactory;
 import org.bouncycastle.jcajce.interfaces.BCKey;
 import org.bouncycastle.jcajce.interfaces.MLDSAPublicKey;
+import org.bouncycastle.jcajce.provider.asymmetric.util.NamedParameterSpecUtil;
 import org.bouncycastle.jcajce.spec.MLDSAParameterSpec;
 import org.bouncycastle.util.Arrays;
 import org.bouncycastle.util.Fingerprint;
@@ -104,6 +106,17 @@ public String getFormat()
         return "X.509";
     }
 
+    /**
+     * Return the parameter set of this key as a java.security.spec.NamedParameterSpec, the form the
+     * JDK's own keys report through java.security.AsymmetricKey.getParams() from Java 22.
+     *
+     * @return a NamedParameterSpec naming the parameter set on Java 11 and later, null otherwise.
+     */
+    public AlgorithmParameterSpec getParams()
+    {
+        return NamedParameterSpecUtil.getNamedParameterSpec(getAlgorithm());
+    }
+
     public MLDSAParameterSpec getParameterSpec()
     {
         return MLDSAParameterSpec.fromName(params.getParameters().getName());

prov/src/main/java/org/bouncycastle/jcajce/provider/asymmetric/mlkem/BCMLKEMPrivateKey.java

@@ -3,6 +3,7 @@
 import java.io.IOException;
 import java.io.ObjectInputStream;
 import java.io.ObjectOutputStream;
+import java.security.spec.AlgorithmParameterSpec;
 
 import javax.security.auth.Destroyable;
 
@@ -14,6 +15,7 @@
 import org.bouncycastle.jcajce.interfaces.BCKey;
 import org.bouncycastle.jcajce.interfaces.MLKEMPrivateKey;
 import org.bouncycastle.jcajce.interfaces.MLKEMPublicKey;
+import org.bouncycastle.jcajce.provider.asymmetric.util.NamedParameterSpecUtil;
 import org.bouncycastle.jcajce.spec.MLKEMParameterSpec;
 import org.bouncycastle.util.Arrays;
 import org.bouncycastle.util.Exceptions;
@@ -150,6 +152,17 @@ public MLKEMPrivateKey getPrivateKey(boolean preferSeedOnly)
         return new BCMLKEMPrivateKey(this.params.withPreferredFormat(MLKEMPrivateKeyParameters.EXPANDED_KEY));
     }
 
+    /**
+     * Return the parameter set of this key as a java.security.spec.NamedParameterSpec, the form the
+     * JDK's own keys report through java.security.AsymmetricKey.getParams() from Java 22.
+     *
+     * @return a NamedParameterSpec naming the parameter set on Java 11 and later, null otherwise.
+     */
+    public AlgorithmParameterSpec getParams()
+    {
+        return NamedParameterSpecUtil.getNamedParameterSpec(getAlgorithm());
+    }
+
     public MLKEMParameterSpec getParameterSpec()
     {
         return MLKEMParameterSpec.fromName(params.getParameters().getName());

prov/src/main/java/org/bouncycastle/jcajce/provider/asymmetric/mlkem/BCMLKEMPublicKey.java

@@ -3,13 +3,15 @@
 import java.io.IOException;
 import java.io.ObjectInputStream;
 import java.io.ObjectOutputStream;
+import java.security.spec.AlgorithmParameterSpec;
 
 import org.bouncycastle.asn1.x509.SubjectPublicKeyInfo;
 import org.bouncycastle.crypto.params.MLKEMPublicKeyParameters;
 import org.bouncycastle.crypto.util.PublicKeyFactory;
 import org.bouncycastle.crypto.util.SubjectPublicKeyInfoFactory;
 import org.bouncycastle.jcajce.interfaces.BCKey;
 import org.bouncycastle.jcajce.interfaces.MLKEMPublicKey;
+import org.bouncycastle.jcajce.provider.asymmetric.util.NamedParameterSpecUtil;
 import org.bouncycastle.jcajce.spec.MLKEMParameterSpec;
 import org.bouncycastle.util.Arrays;
 import org.bouncycastle.util.Fingerprint;
@@ -109,6 +111,17 @@ public String getFormat()
         return "X.509";
     }
 
+    /**
+     * Return the parameter set of this key as a java.security.spec.NamedParameterSpec, the form the
+     * JDK's own keys report through java.security.AsymmetricKey.getParams() from Java 22.
+     *
+     * @return a NamedParameterSpec naming the parameter set on Java 11 and later, null otherwise.
+     */
+    public AlgorithmParameterSpec getParams()
+    {
+        return NamedParameterSpecUtil.getNamedParameterSpec(getAlgorithm());
+    }
+
     public MLKEMParameterSpec getParameterSpec()
     {
         return MLKEMParameterSpec.fromName(params.getParameters().getName());

prov/src/main/java/org/bouncycastle/jcajce/provider/asymmetric/slhdsa/BCSLHDSAPrivateKey.java

@@ -3,6 +3,7 @@
 import java.io.IOException;
 import java.io.ObjectInputStream;
 import java.io.ObjectOutputStream;
+import java.security.spec.AlgorithmParameterSpec;
 
 import javax.security.auth.Destroyable;
 
@@ -15,6 +16,7 @@
 import org.bouncycastle.jcajce.interfaces.BCKey;
 import org.bouncycastle.jcajce.interfaces.SLHDSAPrivateKey;
 import org.bouncycastle.jcajce.interfaces.SLHDSAPublicKey;
+import org.bouncycastle.jcajce.provider.asymmetric.util.NamedParameterSpecUtil;
 import org.bouncycastle.jcajce.spec.SLHDSAParameterSpec;
 import org.bouncycastle.util.Arrays;
 import org.bouncycastle.util.Exceptions;
@@ -115,6 +117,17 @@ public SLHDSAPublicKey getPublicKey()
         return new BCSLHDSAPublicKey(new SLHDSAPublicKeyParameters(params.getParameters(), params.getPublicKey()));
     }
 
+    /**
+     * Return the parameter set of this key as a java.security.spec.NamedParameterSpec, the form the
+     * JDK's own keys report through java.security.AsymmetricKey.getParams() from Java 22.
+     *
+     * @return a NamedParameterSpec naming the parameter set on Java 11 and later, null otherwise.
+     */
+    public AlgorithmParameterSpec getParams()
+    {
+        return NamedParameterSpecUtil.getNamedParameterSpec(getAlgorithm());
+    }
+
     public SLHDSAParameterSpec getParameterSpec()
     {
         return SLHDSAParameterSpec.fromName(params.getParameters().getName());

prov/src/main/java/org/bouncycastle/jcajce/provider/asymmetric/slhdsa/BCSLHDSAPublicKey.java

@@ -3,13 +3,15 @@
 import java.io.IOException;
 import java.io.ObjectInputStream;
 import java.io.ObjectOutputStream;
+import java.security.spec.AlgorithmParameterSpec;
 
 import org.bouncycastle.asn1.x509.SubjectPublicKeyInfo;
 import org.bouncycastle.crypto.params.SLHDSAPublicKeyParameters;
 import org.bouncycastle.crypto.util.PublicKeyFactory;
 import org.bouncycastle.crypto.util.SubjectPublicKeyInfoFactory;
 import org.bouncycastle.jcajce.interfaces.BCKey;
 import org.bouncycastle.jcajce.interfaces.SLHDSAPublicKey;
+import org.bouncycastle.jcajce.provider.asymmetric.util.NamedParameterSpecUtil;
 import org.bouncycastle.jcajce.spec.SLHDSAParameterSpec;
 import org.bouncycastle.util.Arrays;
 import org.bouncycastle.util.Fingerprint;
@@ -101,6 +103,17 @@ public String getFormat()
         return "X.509";
     }
 
+    /**
+     * Return the parameter set of this key as a java.security.spec.NamedParameterSpec, the form the
+     * JDK's own keys report through java.security.AsymmetricKey.getParams() from Java 22.
+     *
+     * @return a NamedParameterSpec naming the parameter set on Java 11 and later, null otherwise.
+     */
+    public AlgorithmParameterSpec getParams()
+    {
+        return NamedParameterSpecUtil.getNamedParameterSpec(getAlgorithm());
+    }
+
     public SLHDSAParameterSpec getParameterSpec()
     {
         return SLHDSAParameterSpec.fromName(params.getParameters().getName());

prov/src/main/java/org/bouncycastle/jcajce/provider/asymmetric/util/NamedParameterSpecUtil.java

@@ -0,0 +1,26 @@
+package org.bouncycastle.jcajce.provider.asymmetric.util;
+
+import java.security.spec.AlgorithmParameterSpec;
+
+/**
+ * Version hook producing the JDK form of a key's named parameter set, as returned by the
+ * getParams() method keys inherit from java.security.AsymmetricKey from Java 22.
+ * <p>
+ * java.security.spec.NamedParameterSpec only exists from Java 11, so this copy, loaded on earlier
+ * JVMs, has nothing to offer and returns null. The jdk1.11 twin returns a NamedParameterSpec - keep
+ * the method set of the two copies identical, and put nothing else on this class.
+ * </p>
+ */
+public class NamedParameterSpecUtil
+{
+    /**
+     * Return a NamedParameterSpec for the passed in parameter set name, if the JVM has one.
+     *
+     * @param name the standard name of the parameter set, for example "ML-DSA-65".
+     * @return null, as NamedParameterSpec is not available before Java 11.
+     */
+    public static AlgorithmParameterSpec getNamedParameterSpec(String name)
+    {
+        return null;
+    }
+}

prov/src/main/java/org/bouncycastle/pqc/jcajce/provider/aimer/BCAIMerPrivateKey.java

@@ -4,9 +4,11 @@
 import java.io.ObjectInputStream;
 import java.io.ObjectOutputStream;
 import java.security.PrivateKey;
+import java.security.spec.AlgorithmParameterSpec;
 
 import org.bouncycastle.asn1.ASN1Set;
 import org.bouncycastle.asn1.pkcs.PrivateKeyInfo;
+import org.bouncycastle.jcajce.provider.asymmetric.util.NamedParameterSpecUtil;
 import org.bouncycastle.pqc.crypto.aimer.AIMerPrivateKeyParameters;
 import org.bouncycastle.pqc.crypto.util.PrivateKeyFactory;
 import org.bouncycastle.pqc.crypto.util.PrivateKeyInfoFactory;
@@ -93,6 +95,17 @@ public byte[] getEncoded()
         }
     }
 
+    /**
+     * Return the parameter set of this key as a java.security.spec.NamedParameterSpec, the form the
+     * JDK's own keys report through java.security.AsymmetricKey.getParams() from Java 22.
+     *
+     * @return a NamedParameterSpec naming the parameter set on Java 11 and later, null otherwise.
+     */
+    public AlgorithmParameterSpec getParams()
+    {
+        return NamedParameterSpecUtil.getNamedParameterSpec(getParameterSpec().getName());
+    }
+
     public AIMerParameterSpec getParameterSpec()
     {
         return AIMerParameterSpec.fromName(params.getParameters().getName());

prov/src/main/java/org/bouncycastle/pqc/jcajce/provider/aimer/BCAIMerPublicKey.java

@@ -4,8 +4,10 @@
 import java.io.ObjectInputStream;
 import java.io.ObjectOutputStream;
 import java.security.PublicKey;
+import java.security.spec.AlgorithmParameterSpec;
 
 import org.bouncycastle.asn1.x509.SubjectPublicKeyInfo;
+import org.bouncycastle.jcajce.provider.asymmetric.util.NamedParameterSpecUtil;
 import org.bouncycastle.pqc.crypto.aimer.AIMerPublicKeyParameters;
 import org.bouncycastle.pqc.crypto.util.PublicKeyFactory;
 import org.bouncycastle.pqc.crypto.util.SubjectPublicKeyInfoFactory;
@@ -94,6 +96,17 @@ public String getFormat()
         return "X.509";
     }
 
+    /**
+     * Return the parameter set of this key as a java.security.spec.NamedParameterSpec, the form the
+     * JDK's own keys report through java.security.AsymmetricKey.getParams() from Java 22.
+     *
+     * @return a NamedParameterSpec naming the parameter set on Java 11 and later, null otherwise.
+     */
+    public AlgorithmParameterSpec getParams()
+    {
+        return NamedParameterSpecUtil.getNamedParameterSpec(getParameterSpec().getName());
+    }
+
     public AIMerParameterSpec getParameterSpec()
     {
         return AIMerParameterSpec.fromName(params.getParameters().getName());