Peter Dettman

Thanks, @harrison314 . It looks reasonable, though I want to check with bc-java that the approaches are similar. Some initial changes I'd prefer: - Use Prehash class instead of NullDigest...

A leading space should be escaped to be preserved in the actual value. e.g. `"CN=\\ Test"`. https://github.com/bcgit/bc-csharp/commit/3e1c56c649f9c714bd0cee1cd2d437066ffed051 fixed escaping of X509Name on output so that round-tripping will work (released as...

Added `SecurityParameters.getNegotiatedGroup()` as requested. Currently only set for TLS 1.3.

It seems no provider code accounts for a possible AnnotatedPrivateKey; rather it seems something intended to be confined to CMS-related code. Can you share more about the call site?