WIP

Author: whyoleg

build-logic/src/main/kotlin/ckbuild/Projects.kt

@@ -25,13 +25,14 @@ object Projects {
         "cryptography-provider-base" to setOf(Tag.PUBLISHED),
         "cryptography-provider-jdk" to setOf(Tag.PUBLISHED),
         "cryptography-provider-jdk-bc" to setOf(Tag.PUBLISHED),
+        "cryptography-provider-bouncycastle" to setOf(Tag.PUBLISHED),
         "cryptography-provider-apple" to setOf(Tag.PUBLISHED),
-        "cryptography-provider-cryptokit" to setOf(Tag.PUBLISHED),
+//        "cryptography-provider-cryptokit" to setOf(Tag.PUBLISHED),
         "cryptography-provider-webcrypto" to setOf(Tag.PUBLISHED),
         "cryptography-provider-openssl3-api" to setOf(Tag.PUBLISHED),
         "cryptography-provider-openssl3-shared" to setOf(Tag.PUBLISHED),
         "cryptography-provider-openssl3-prebuilt" to setOf(Tag.PUBLISHED),
-        "cryptography-provider-optimal" to setOf(Tag.PUBLISHED),
+//        "cryptography-provider-optimal" to setOf(Tag.PUBLISHED),
 
         "cryptography-provider-jdk-android-tests" to setOf(),
         "cryptography-provider-openssl3-test" to setOf(),

cryptography-providers/bouncycastle/build.gradle.kts

@@ -0,0 +1,38 @@
+/*
+ * Copyright (c) 2023-2025 Oleg Yukhnevich. Use of this source code is governed by the Apache 2.0 license.
+ */
+
+import ckbuild.*
+import org.jetbrains.kotlin.gradle.*
+
+plugins {
+    id("ckbuild.multiplatform-library")
+    id("ckbuild.multiplatform-provider-tests")
+}
+
+description = "cryptography-kotlin BouncyCastle provider"
+
+@OptIn(ExperimentalKotlinGradlePluginApi::class)
+kotlin {
+    jvmTarget()
+
+    compilerOptions {
+        optIn.addAll(
+            OptIns.DelicateCryptographyApi,
+            OptIns.CryptographyProviderApi,
+        )
+    }
+
+    sourceSets {
+        jvmMain.dependencies {
+            api(projects.cryptographyCore)
+            implementation(libs.bouncycastle)
+            // implementation(projects.cryptographyProviderBase)
+        }
+    }
+}
+
+providerTests {
+    packageName.set("dev.whyoleg.cryptography.providers.bouncycastle")
+    providerInitializers.put("BouncyCastle", "CryptographyProvider.BouncyCastle")
+}

cryptography-providers/bouncycastle/src/jvmMain/kotlin/BouncyCastleCryptographyProvider.kt

@@ -0,0 +1,30 @@
+/*
+ * Copyright (c) 2023-2025 Oleg Yukhnevich. Use of this source code is governed by the Apache 2.0 license.
+ */
+
+package dev.whyoleg.cryptography.providers.bouncycastle
+
+import dev.whyoleg.cryptography.*
+import dev.whyoleg.cryptography.algorithms.*
+import dev.whyoleg.cryptography.providers.jdk.algorithms.*
+import dev.whyoleg.cryptography.random.*
+import java.security.*
+import java.util.*
+import java.util.concurrent.*
+
+private val defaultProvider = lazy { BouncyCastleCryptographyProvider }
+
+internal object BouncyCastleCryptographyProvider : CryptographyProvider() {
+    override val name: String get() = "BouncyCastle"
+
+    @Suppress("UNCHECKED_CAST")
+    override fun <A : CryptographyAlgorithm> getOrNull(identifier: CryptographyAlgorithmId<A>): A? = when (identifier) {
+        HKDF -> JdkHkdf(state, this)
+        else -> null
+    } as A?
+}
+
+internal class BouncyCastleCryptographyProviderContainer : CryptographyProviderContainer {
+    override val priority: Int get() = 100
+    override val provider: Lazy<CryptographyProvider> get() = defaultProvider
+}

cryptography-providers/bouncycastle/src/jvmMain/kotlin/algorithms/BcHkdf.kt

@@ -0,0 +1,42 @@
+/*
+ * Copyright (c) 2025 Oleg Yukhnevich. Use of this source code is governed by the Apache 2.0 license.
+ */
+
+package dev.whyoleg.cryptography.providers.bouncycastle.algorithms
+
+import dev.whyoleg.cryptography.*
+import dev.whyoleg.cryptography.algorithms.*
+import dev.whyoleg.cryptography.operations.*
+import org.bouncycastle.crypto.generators.*
+import org.bouncycastle.crypto.params.*
+
+internal object BcHkdf : HKDF {
+    override fun secretDerivation(
+        digest: CryptographyAlgorithmId<Digest>,
+        outputSize: BinarySize,
+        salt: ByteArray?,
+        info: ByteArray?,
+    ): SecretDerivation {
+
+        TODO("Not yet implemented")
+    }
+
+}
+
+private class BcHkdfSecretDerivation(
+    private val generator: HKDFBytesGenerator,
+    private val outputSizeBytes: Int,
+    private val salt: ByteArray?,
+    private val info: ByteArray?,
+) : SecretDerivation {
+    override fun deriveSecretToByteArrayBlocking(input: ByteArray): ByteArray {
+        generator.init(
+            HKDFParameters(
+                /* ikm = */ input,
+                /* salt = */ salt,
+                /* info = */ info
+            )
+        )
+        TODO("Not yet implemented")
+    }
+}

cryptography-providers/bouncycastle/src/jvmMain/resources/META-INF/services/dev.whyoleg.cryptography.CryptographyProviderContainer

@@ -0,0 +1,5 @@
+#
+# Copyright (c) 2025 Oleg Yukhnevich. Use of this source code is governed by the Apache 2.0 license.
+#
+
+dev.whyoleg.cryptography.providers.bouncycastle.BouncyCastleCryptographyProviderContainer

settings.gradle.kts

@@ -55,6 +55,7 @@ projects("cryptography-kotlin") {
             module("android-tests")
             module("bc") // preconfigured JDK with BC provider
         }
+        module("bouncycastle")
         module("apple")
         module("webcrypto")
         folder("openssl3") {