Today has been released version 3.1.3.6 of DidiSoft OpenPGP Library for Java which provides a critical bug fix.
The bug prevents decrypting .pgp data that was encrypted and compressed with the BZip-2 algorithm. The error message thrown in such cases is:
“com.didisoft.pgp.PGPException: I/O problem with stream: java.io.IOException: Not a BZIP2 marked stream : Not a BZIP2 marked stream : Not a BZIP2 marked stream”
Versions affected: all 3.0.x and 3.1.x versions.
Other recent updates
Version 3.1.3.5
Release date: 08 October 2018
KeyStore class – fixed bug in importing keys with only a comment header line
Version 3.1.3.4
Release date: 25 September 2018
PGPLib class – default preferred symmetric key cipher is now AES-256, with backward compatibility with keys made prior year 2002 using CAST5
As usual the latest version should be fully backward compatible and the upgrade shall be nothing more than replacing your existing JAR files with those from the latest release.
Shall you have any questions or concerns, please do not hesitate to drop us a line.
