Deps: Bump org.bouncycastle:bcprov-jdk15to18 from 1.66 to 1.78 (#778)

* Bump org.bouncycastle:bcprov-jdk15to18 from 1.66 to 1.78

Bumps [org.bouncycastle:bcprov-jdk15to18](https://github.com/bcgit/bc-java) from 1.66 to 1.78.
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

---
updated-dependencies:
- dependency-name: org.bouncycastle:bcprov-jdk15to18
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

* Don't try to parse an address as a PK unless it must be

Previously, we always parsed the `singleSigner` but that is often just
a program hash, and so it might not be a valid ed25519 pk.

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: John Jannotti <[email protected]>
Co-authored-by: Gary Malouf <[email protected]>

Author: 3 people

pom.xml

@@ -112,7 +112,7 @@
         <dependency>
           <groupId>org.bouncycastle</groupId>
           <artifactId>bcprov-jdk15to18</artifactId>
-          <version>1.66</version>
+          <version>1.78</version>
         </dependency>
         <dependency>
           <groupId>org.msgpack</groupId>

src/main/java/com/algorand/algosdk/crypto/LogicsigSignature.java

@@ -174,16 +174,15 @@ public boolean verify(Address singleSigner) throws NoSuchAlgorithmException {
 
         sanityCheckProgram(this.logic);
 
-        PublicKey pk;
-        try {
-            pk = singleSigner.toVerifyKey();
-        } catch (Exception ex) {
-            return false;
-        }
-
         if (this.sig != null) {
             try {
                 java.security.Signature sig = java.security.Signature.getInstance(SIGN_ALGO);
+                PublicKey pk;
+                try {
+                  pk = singleSigner.toVerifyKey();
+                } catch (Exception ex) {
+                  return false;
+                }
                 sig.initVerify(pk);
                 sig.update(this.bytesToSign());
                 return sig.verify(this.sig.getBytes());