Hubert

Existing (password) connections fail against some sFTP-server (brands?) after upgrading the JSch library from 0.2.11 to 0.2.16. Debugging shows that after the key exchange is negotiated and the new keys...

Larger 3DES encrypted PGP files fail to decrypt using bc-fips 2.0.0

4

Since the upgrade of bc-fips 1.0.x to bc-fips 2.0.0 larger 3DES PGP encrypted files fail to decrypt with stack trace: `java.lang.IllegalStateException: attempt to process more than 65536 blocks with 2-Key...

The **bcpg-fips** source code for _org/bouncycastle/bcpg/ArmoredOutputStream.java_ contains at-least for release **2.0.9** and **2.0.10** still the version placeholder instead of the real version: `public static final String DEFAULT_VERSION = "BCPG v@RELEASE_NAME@";`...

Within our product we saw that com.jcraft.jsch.Channel uses ‘1 GB' memory in many 600KB buffers in its com.jcraft.jsch.Channel by >2000 ChannelSftp instances (all different connections and needed). Further investigation turned...