Recently upgraded from BC 1.34 to 1.45. I\'m decoding some previously-encoded data with the following:
SecretKeySpec skeySpec = new SecretKeySpec(raw, \"
According to the release notes, this fix was included in version 1.40:
PKCS7Padding validation would not fail if pad length was 0. This has been fixed.
This sounds like it may be pertinent.