Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Use Bouncy Castle in extension

fa1ntStar | Last updated: Sep 08, 2022 02:45PM UTC

Hi I want to deveplop some function about crypto, so I want to use bouncycastle in my extension，but there were some errors about jce。 the details about my extension: gradle: implementation group: 'org.bouncycastle', name: 'bcprov-jdk18on', version: '1.71' my codes in extenson: Security.addProvider(new BouncyCastleProvider()); Cipher cipher = Cipher.getInstance("AES/CBC/PKCS5Padding","BC"); exception: java.lang.SecurityException: JCE cannot authenticate the provider BC file:/E:/SecurityTools/Burpsuite/burpsuite.jar has unsigned entries - chromium-linux64-87.0.4280.66.zip env: windows x64 java version "11.0.11" 2021-04-20 LTS Java(TM) SE Runtime Environment 18.9 (build 11.0.11+9-LTS-194) Java HotSpot(TM) 64-Bit Server VM 18.9 (build 11.0.11+9-LTS-194, mixed mode) I have test the code in a main function， it works well，but when the code in Burp Extension ,I'll get erros;

Ben, PortSwigger Agent | Last updated: Sep 09, 2022 12:58PM UTC

Hi, BouncyCastle is used by Burp so you can treat it as a runtime dependency and your code should work (as you have explicitly defined the provided in the Cipher.getInstance()).

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.