Hey, thanks for answering. > Our own code does not use BC in StandardSecurityHandler which is why > it's optional dependency.
This part helps a lot. It's actually working fine on Android. I just wasn't sure if I was missing something and StandardSecurityHandler would try to use BC (and fail) when it gets the cipher object because I don't know a lot about how this security infrastructure works. Totally understandable that android is not receiving support, and this is a partial port I made for 3.0, but your answer helps me a lot, thanks again. Jose On Sun, Nov 12, 2023 at 5:59 AM Tilman Hausherr <thaush...@t-online.de> wrote: > Hi, > You need to ask this on github, we're not doing support for the Android > project. > The best would be to try. Open an encrypted file and don't include > BouncyCastle and see if it works. > Our own code does not use BC in StandardSecurityHandler which is why > it's optional dependency. It is used for electronic signing and > certificates. > Tilman > > On 11.11.2023 22:32, jose wrote: > > Hello, > > > > I wanted to confirm if BC dependencies are strictly necessary for > > decrypting documents with standard security. > > > > I'm testing PDFBox 3.0.0-RC1 on android and to my surprise I was able to > > decrypt a password protected document without including BC dependencies. > > > > I looked a little bit at the code of StandardSecurityHandler and > > PublicKeySecurityHandler and noticed that the former has no direct > > reference to BC classes, but I'm not sure if StandardSecurityHandler > might > > still use BC indirectly in some cases. > > > > I double checked transitive dependencies and for sure I'm not including > BC, > > so the question is, should I? For now I don't need public key encryption. > > > > Thanks! > > Jose > > >