Convert docs/index, docs/releasenotes, docs/specifications and CONTRIBUTORS from hand-edited HTML to GitHub-flavoured markdown, keeping the per-version deep-link anchors and the CONTRIBUTORS address obfuscation intact, and repoint the Ant and shell distribution file lists, the internal links and the contributing guidance at the new names.

Author: dghgit

.claude/skills/bcpqc-add-signature-algorithm/SKILL.md

@@ -257,7 +257,7 @@ Add `suite.addTestSuite(<Alg>Test.class);` to `prov/src/test/java/org/bouncycast
 
 ### Step 16 — Release notes
 
-Add a single `<li>` to `docs/releasenotes.html` under the current unreleased version's "Additional Features and Functionality" block. Mention: the algorithm name and spec version, the parameter sets supported, that `BouncyCastlePQCProvider` exposes `KeyPairGenerator.<Alg>` / `Signature.<Alg>` / `KeyFactory.<Alg>` plus per-parameter-set aliases, and that `BouncyCastleProvider.loadPQCKeys()` registers the OIDs so the standard `BC` provider can decode certificates and PKCS#8 keys.
+Add a single `-` bullet to `docs/releasenotes.md` under the current unreleased version's "Additional Features and Functionality" block. Mention: the algorithm name and spec version, the parameter sets supported, that `BouncyCastlePQCProvider` exposes `KeyPairGenerator.<Alg>` / `Signature.<Alg>` / `KeyFactory.<Alg>` plus per-parameter-set aliases, and that `BouncyCastleProvider.loadPQCKeys()` registers the OIDs so the standard `BC` provider can decode certificates and PKCS#8 keys.
 
 ## Verification commands
 
@@ -314,6 +314,6 @@ When in doubt, mimic these files for the corresponding step:
 | 14 | `prov/src/main/jdk1.9/module-info.java` snova entries |
 | 15 | `prov/src/test/java/org/bouncycastle/pqc/jcajce/provider/test/SnovaTest.java` (mostly — but add a `testBcProviderKeyInfoConverter`; SNOVA's existing test doesn't cover that path, but FAEST's does) |
 | 15 (encoding) | `core/src/test/java/org/bouncycastle/pqc/crypto/test/PqcSignatureEncodingTest.java` `testSnova` + `checkBareSignature`, and the SNOVA block in `PqcMalformedInputTest.testMalformedSignatureReturnsFalse` |
-| 16 | `docs/releasenotes.html` — look at the FAEST entry under 1.85 for the prose template |
+| 16 | `docs/releasenotes.md` — look at the FAEST entry under 1.85 for the prose template |
 
 The FAEST entries (added in 1.85 alongside the introduction of this skill) are the most recent worked example of the full pipeline and are a useful cross-check.

CLAUDE.md

@@ -7,5 +7,5 @@ The detailed guidance is split across the files below (imported automatically).
 - @docs/claude/build-and-test.md — driving the Gradle build, running individual tests fast, the stash-the-fix verification discipline, why a green Gradle run can mean the tests never ran and the tree can move under a long one.
 - @docs/claude/build-jdk14.md — the jdk1.4 (build1-4) legacy build: source preprocessing (what the regexes fix and what they can't), the real-1.4-javac compile floor, overlay delete-vs-sync discipline, the build → bcsign4 → test flow and its signing/staleness traps.
 - @docs/claude/architecture.md — module graph and the `core`-into-`prov` trap, MR-jar overlays, `module-info.java` / `package-info.java` upkeep, where examples live, JCE provider registration, adding a PQC algorithm, `.bc` vs `.jcajce` package layering.
-- @docs/claude/conventions.md — test conventions, X.509 / ASN.1 RFC discipline, strict cert parse vs reviewer, DER lenient-read/strict-write, exception-message contract, `SecurityExceptions` cause-chaining, property constants, non-standard interop, PKCS#12 SPI pair, CMS streaming I/O, CMS recipient constraints, operator close discipline, duplicated OID tables, receiver-side `AlgorithmIdentifier` comparison, the name-finder/test count lock, checking whether the type already solves it, release notes, crediting reporters in CONTRIBUTORS.html, commit messages, URL checking, code style.
+- @docs/claude/conventions.md — test conventions, X.509 / ASN.1 RFC discipline, strict cert parse vs reviewer, DER lenient-read/strict-write, exception-message contract, `SecurityExceptions` cause-chaining, property constants, non-standard interop, PKCS#12 SPI pair, CMS streaming I/O, CMS recipient constraints, operator close discipline, duplicated OID tables, receiver-side `AlgorithmIdentifier` comparison, the name-finder/test count lock, checking whether the type already solves it, release notes, crediting reporters in CONTRIBUTORS.md, commit messages, URL checking, code style.
 - @docs/claude/upstream-lts-ports.md — the `UPSTREAM-*.md` porting workflow: verifying the doc against this tree, diffing against the BC-LTS checkout, tests/release-note trimmings, keeping the .md out of the commit.

CONTRIBUTORS.html

@@ -287,11 +287,14 @@
                 <copy toDir="@{toDir}">
                      <fileset dir="${basedir}">
                          <include name="*.html" />
+                         <include name="CONTRIBUTORS.md" />
                      </fileset>
                 </copy>
                 <copy toDir="@{toDir}/docs">
                      <fileset dir="${basedir}/docs">
-                         <include name="**/*.html" />
+                         <include name="index.md" />
+                         <include name="releasenotes.md" />
+                         <include name="specifications.md" />
                      </fileset>
                 </copy>
             </sequential>

CONTRIBUTORS.md

@@ -329,7 +329,7 @@ then
 
     mkdir $artifacts/lcrypto-jdk11-$base
     mkdir $artifacts/lcrypto-jdk11-$base/src
-    tar cf - index.html LICENSE.html CONTRIBUTORS.html docs | (cd $artifacts/lcrypto-jdk11-$base && tar xf -)
+    tar cf - index.html LICENSE.html CONTRIBUTORS.md docs | (cd $artifacts/lcrypto-jdk11-$base && tar xf -)
     (cd $jdk11src && tar cf - java org/bouncycastle/LICENSE.java \
     org/bouncycastle/test org/bouncycastle/math org/bouncycastle/internal org/bouncycastle/crypto org/bouncycastle/util org/bouncycastle/asn1 org/bouncycastle/pqc/legacy org/bouncycastle/pqc/math org/bouncycastle/pqc/crypto org/bouncycastle/pqc/asn1 ) \
      | (cd $artifacts/lcrypto-jdk11-$base/src && tar xf -)
@@ -449,7 +449,7 @@ then
 
     mkdir $artifacts/jce-jdk11-$base
     mkdir $artifacts/jce-jdk11-$base/src
-    tar cf - index.html LICENSE.html CONTRIBUTORS.html docs | (cd $artifacts/jce-jdk11-$base; tar xf -)
+    tar cf - index.html LICENSE.html CONTRIBUTORS.md docs | (cd $artifacts/jce-jdk11-$base; tar xf -)
     mkdir -p $jdk11src/org/bouncycastle/pqc/jcajce/provider/util
     cp prov/src/main/java/org/bouncycastle/pqc/jcajce/provider/util/BaseKeyFactorySpi.java $jdk11src/org/bouncycastle/pqc/jcajce/provider/util/BaseKeyFactorySpi.java
     cp prov/src/main/java/org/bouncycastle/pqc/jcajce/provider/util/KeyUtil.java $jdk11src/org/bouncycastle/pqc/jcajce/provider/util/KeyUtil.java
@@ -625,7 +625,7 @@ then
 
     mkdir $artifacts/bcpkix-jdk11-$base
     mkdir $artifacts/bcpkix-jdk11-$base/src
-    tar cf - index.html LICENSE.html CONTRIBUTORS.html docs | (cd $artifacts/bcpkix-jdk11-$base; tar xf -)
+    tar cf - index.html LICENSE.html CONTRIBUTORS.md docs | (cd $artifacts/bcpkix-jdk11-$base; tar xf -)
     ((cd $jdk11src && tar cf - org/bouncycastle/test org/bouncycastle/cert org/bouncycastle/dvcs org/bouncycastle/pkcs org/bouncycastle/pkix org/bouncycastle/cms org/bouncycastle/eac org/bouncycastle/openssl org/bouncycastle/tsp org/bouncycastle/operator ) | (cd $artifacts/bcpkix-jdk11-$base/src && tar xf -))
 
     (
@@ -686,7 +686,7 @@ then
 
     mkdir $artifacts/bcpg-jdk11-$base
     mkdir $artifacts/bcpg-jdk11-$base/src
-    tar cf - index.html LICENSE.html CONTRIBUTORS.html docs | (cd $artifacts/bcpg-jdk11-$base; tar xf -)
+    tar cf - index.html LICENSE.html CONTRIBUTORS.md docs | (cd $artifacts/bcpg-jdk11-$base; tar xf -)
     ((cd pg/src/main/java && tar cf - * ) | (cd $artifacts/bcpg-jdk11-$base/src && tar xf -))
     ((cd pg/src/main/jdk1.5 && tar cf - * ) | (cd $artifacts/bcpg-jdk11-$base/src && tar xf -))
     ((cd pg/src/main/jdk1.4 && tar cf - * ) | (cd $artifacts/bcpg-jdk11-$base/src && tar xf -))

ant/bc+-build.xml

@@ -272,7 +272,7 @@ then
     mkdir $artifacts/lcrypto-jdk12-$base
     mkdir $artifacts/lcrypto-jdk12-$base/src
 
-    tar cf - index.html LICENSE.html CONTRIBUTORS.html docs | (cd $artifacts/lcrypto-jdk12-$base && tar xf -)
+    tar cf - index.html LICENSE.html CONTRIBUTORS.md docs | (cd $artifacts/lcrypto-jdk12-$base && tar xf -)
     ((cd $jdk12src && tar cf - java org/bouncycastle/LICENSE.java \
     org/bouncycastle/test org/bouncycastle/math org/bouncycastle/internal org/bouncycastle/crypto org/bouncycastle/util org/bouncycastle/asn1 org/bouncycastle/pqc/legacy org/bouncycastle/pqc/math org/bouncycastle/pqc/crypto org/bouncycastle/pqc/asn1  ) | (cd $artifacts/lcrypto-jdk12-$base/src && tar xf -)) 
     (
@@ -358,7 +358,7 @@ then
 
     mkdir $artifacts/jce-jdk12-$base
     mkdir $artifacts/jce-jdk12-$base/src
-    tar cf - index.html LICENSE.html CONTRIBUTORS.html docs | (cd $artifacts/jce-jdk12-$base; tar xf -)
+    tar cf - index.html LICENSE.html CONTRIBUTORS.md docs | (cd $artifacts/jce-jdk12-$base; tar xf -)
     ((cd $jdk12src && tar cf - java javax org/bouncycastle/test org/bouncycastle/LICENSE.java org/bouncycastle/crypto org/bouncycastle/internal org/bouncycastle/math org/bouncycastle/pqc org/bouncycastle/asn1 org/bouncycastle/jcajce org/bouncycastle/util org/bouncycastle/jce org/bouncycastle/x509 ) | (cd $artifacts/jce-jdk12-$base/src && tar xf -))
 
     (
@@ -481,7 +481,7 @@ then
 
     mkdir $artifacts/bcpkix-jdk12-$base
     mkdir $artifacts/bcpkix-jdk12-$base/src
-    tar cf - index.html LICENSE.html CONTRIBUTORS.html docs | (cd $artifacts/bcpkix-jdk12-$base; tar xf -)
+    tar cf - index.html LICENSE.html CONTRIBUTORS.md docs | (cd $artifacts/bcpkix-jdk12-$base; tar xf -)
     ((cd $jdk12src && tar cf - org/bouncycastle/test org/bouncycastle/cert org/bouncycastle/cms org/bouncycastle/pkcs org/bouncycastle/pkix org/bouncycastle/openssl org/bouncycastle/operator org/bouncycastle/mozilla org/bouncycastle/tsp org/bouncycastle/voms ) | (cd $artifacts/bcpkix-jdk12-$base/src && tar xf -))
     (
     cd $artifacts/bcpkix-jdk12-$base; mkdir classes; mkdir javadoc;
@@ -561,7 +561,7 @@ then
 
     mkdir $artifacts/bcpg-jdk12-$base
     mkdir $artifacts/bcpg-jdk12-$base/src
-    tar cf - index.html LICENSE.html CONTRIBUTORS.html docs | (cd $artifacts/bcpg-jdk12-$base; tar xf -)
+    tar cf - index.html LICENSE.html CONTRIBUTORS.md docs | (cd $artifacts/bcpg-jdk12-$base; tar xf -)
     ((cd $jdk12src && tar cf - org/bouncycastle/test org/bouncycastle/apache org/bouncycastle/openpgp org/bouncycastle/bcpg org/bouncycastle/gpg) |  (cd $artifacts/bcpg-jdk12-$base/src && tar xf -))
     (
     cd $artifacts/bcpg-jdk12-$base; mkdir classes; mkdir javadoc;

build1-1

@@ -24,7 +24,7 @@ then
     mkdir -p $target
     mkdir $target/javadoc
     mkdir $target/src
-    tar cf - index.html LICENSE.html CONTRIBUTORS.html docs zips | (cd $target && tar xf -)
+    tar cf - index.html LICENSE.html CONTRIBUTORS.md docs zips | (cd $target && tar xf -)
     ((cd core/src/main/java; tar cf - * ) | (cd $target/src && tar xf -))
     ((cd core/src/main/javadoc; tar cf - * ) | (cd $target/src && tar xf -))
     ((cd core/src/main/jdk1.4; tar cf - * ) | (cd $target/src && tar xf -))

build1-2

@@ -151,7 +151,7 @@ Practical checklist when porting a new PQC algorithm — easy to leave any of th
 - `prov/.../jce/provider/BouncyCastleProvider.java` — in `loadPQCKeys()`, `addKeyInfoConverter(BCObjectIdentifiers.<alg>_<param>, new <Alg>KeyFactorySpi())` for every OID. **This is the BCPQC→BC bridge; skip it and certs / PKCS#8 work fine through BCPQC but break through BC.** Test it.
 - `prov/src/main/jdk1.9/module-info.java` — `opens org.bouncycastle.pqc.jcajce.provider.<alg> to java.base;` plus `exports org.bouncycastle.pqc.crypto.<alg>;` plus `exports org.bouncycastle.pqc.jcajce.provider.<alg>;`. Mirror `pqc.crypto.<alg>` into `prov/src/main/ext-jdk1.9/module-info.java` (the legacy distribution does not export the JCE-side `provider.<alg>` packages).
 - Tests in `prov/src/test/java/org/bouncycastle/pqc/jcajce/provider/test/<Alg>Test.java` plus an entry in `AllTests.java`, and the signature-encoding assertions above in `core`'s `PqcSignatureEncodingTest` / `PqcMalformedInputTest`. Include a `testBcProviderKeyInfoConverter`-style case that exercises `BouncyCastleProvider.getPublicKey(SubjectPublicKeyInfo)` and `getPrivateKey(PrivateKeyInfo)` against every parameter set, proving the `loadPQCKeys()` registration works.
-- `docs/releasenotes.html` — one `<li>` under the current unreleased version's "Additional Features and Functionality" block.
+- `docs/releasenotes.md` — one `-` bullet under the current unreleased version's "Additional Features and Functionality" block.
 
 ### Two JCA-boundary details the checklist does not spell out