Hey, thanks for answering.

> Our own code does not use BC in StandardSecurityHandler which is why
> it's optional dependency.

This part helps a lot. It's actually working fine on Android. I just wasn't
sure if I was missing something and StandardSecurityHandler would try to
use BC (and fail) when it gets the cipher object because I don't know a lot
about how this security infrastructure works.

Totally understandable that android is not receiving support, and this is a
partial port I made for 3.0, but your answer helps me a lot, thanks again.

Jose

On Sun, Nov 12, 2023 at 5:59 AM Tilman Hausherr <thaush...@t-online.de>
wrote:

> Hi,
> You need to ask this on github, we're not doing support for the Android
> project.
> The best would be to try. Open an encrypted file and don't include
> BouncyCastle and see if it works.
> Our own code does not use BC in StandardSecurityHandler which is why
> it's optional dependency. It is used for electronic signing and
> certificates.
> Tilman
>
> On 11.11.2023 22:32, jose wrote:
> > Hello,
> >
> > I wanted to confirm if BC dependencies are strictly necessary for
> > decrypting documents with standard security.
> >
> > I'm testing PDFBox 3.0.0-RC1 on android and to my surprise I was able to
> > decrypt a password protected document without including BC dependencies.
> >
> > I looked a little bit at the code of StandardSecurityHandler and
> > PublicKeySecurityHandler and noticed that the former has no direct
> > reference to BC classes, but I'm not sure if StandardSecurityHandler
> might
> > still use BC indirectly in some cases.
> >
> > I double checked transitive dependencies and for sure I'm not including
> BC,
> > so the question is, should I? For now I don't need public key encryption.
> >
> > Thanks!
> > Jose
> >
>

Reply via email to