diff --git a/bom/pom.xml b/bom/pom.xml
index 5ca7eb06c..f937025f6 100644
--- a/bom/pom.xml
+++ b/bom/pom.xml
@@ -373,11 +373,6 @@
                 <artifactId>stax2-api</artifactId>
                 <version>${stax2.version}</version>
             </dependency>
-            <dependency>
-                <groupId>org.cryptacular</groupId>
-                <artifactId>cryptacular</artifactId>
-                <version>${cryptacular.version}</version>
-            </dependency>
             <dependency>
                 <groupId>org.eclipse.angus</groupId>
                 <artifactId>angus-mail</artifactId>
diff --git a/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/ASN1Object.java b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/ASN1Object.java
new file mode 100644
index 000000000..758b46614
--- /dev/null
+++ b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/ASN1Object.java
@@ -0,0 +1,8 @@
+package org.bouncycastle.asn1;
+
+import org.bouncycastle.util.Encodable;
+
+public abstract class ASN1Object
+        implements ASN1Encodable, Encodable {
+
+}
diff --git a/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/ASN1Set.java b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/ASN1Set.java
new file mode 100644
index 000000000..659fbd055
--- /dev/null
+++ b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/ASN1Set.java
@@ -0,0 +1,7 @@
+package org.bouncycastle.asn1;
+
+public abstract class ASN1Set
+        extends ASN1Primitive
+        implements org.bouncycastle.util.Iterable<ASN1Encodable> {
+
+}
diff --git a/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/pkcs/Attribute.java b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/pkcs/Attribute.java
new file mode 100644
index 000000000..71e905eb1
--- /dev/null
+++ b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/pkcs/Attribute.java
@@ -0,0 +1,15 @@
+package org.bouncycastle.asn1.pkcs;
+
+import org.bouncycastle.asn1.ASN1Object;
+import org.bouncycastle.asn1.ASN1Primitive;
+
+public class Attribute
+        extends ASN1Object {
+
+    @Override
+    public ASN1Primitive toASN1Primitive() {
+        throw new UnsupportedOperationException("Exclude io.quarkiverse.cxf:quarkus-cxf-bc-stub from"
+                + " io.quarkiverse.cxf:quarkus-cxf-rt-ws-security dependencies and add Bouncy Castle instead");
+    }
+
+}
diff --git a/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/pkcs/CertificationRequest.java b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/pkcs/CertificationRequest.java
new file mode 100644
index 000000000..c6c7f0448
--- /dev/null
+++ b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/pkcs/CertificationRequest.java
@@ -0,0 +1,15 @@
+package org.bouncycastle.asn1.pkcs;
+
+import org.bouncycastle.asn1.ASN1Object;
+import org.bouncycastle.asn1.ASN1Primitive;
+
+public class CertificationRequest
+        extends ASN1Object {
+
+    @Override
+    public ASN1Primitive toASN1Primitive() {
+        throw new UnsupportedOperationException("Exclude io.quarkiverse.cxf:quarkus-cxf-bc-stub from"
+                + " io.quarkiverse.cxf:quarkus-cxf-rt-ws-security dependencies and add Bouncy Castle instead");
+    }
+
+}
diff --git a/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/pkcs/PKCSObjectIdentifiers.java b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/pkcs/PKCSObjectIdentifiers.java
new file mode 100644
index 000000000..956c78e4b
--- /dev/null
+++ b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/pkcs/PKCSObjectIdentifiers.java
@@ -0,0 +1,5 @@
+package org.bouncycastle.asn1.pkcs;
+
+public interface PKCSObjectIdentifiers {
+
+}
diff --git a/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/x500/X500Name.java b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/x500/X500Name.java
index f632b3822..4f86083da 100644
--- a/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/x500/X500Name.java
+++ b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/x500/X500Name.java
@@ -11,4 +11,9 @@ public RDN[] getRDNs() {
                 + " io.quarkiverse.cxf:quarkus-cxf-rt-ws-security dependencies and add Bouncy Castle instead");
     }
 
+    public X500Name(X500NameStyle style, X500Name name) {
+        throw new UnsupportedOperationException("Exclude io.quarkiverse.cxf:quarkus-cxf-bc-stub from"
+                + " io.quarkiverse.cxf:quarkus-cxf-rt-ws-security dependencies and add Bouncy Castle instead");
+    }
+
 }
diff --git a/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/x500/X500NameStyle.java b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/x500/X500NameStyle.java
new file mode 100644
index 000000000..cc2716d4b
--- /dev/null
+++ b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/x500/X500NameStyle.java
@@ -0,0 +1,5 @@
+package org.bouncycastle.asn1.x500;
+
+public interface X500NameStyle {
+
+}
diff --git a/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/x500/style/AbstractX500NameStyle.java b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/x500/style/AbstractX500NameStyle.java
new file mode 100644
index 000000000..1ed795564
--- /dev/null
+++ b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/x500/style/AbstractX500NameStyle.java
@@ -0,0 +1,8 @@
+package org.bouncycastle.asn1.x500.style;
+
+import org.bouncycastle.asn1.x500.X500NameStyle;
+
+public abstract class AbstractX500NameStyle
+        implements X500NameStyle {
+
+}
diff --git a/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/x500/style/RFC4519Style.java b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/x500/style/RFC4519Style.java
new file mode 100644
index 000000000..431174b9a
--- /dev/null
+++ b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/x500/style/RFC4519Style.java
@@ -0,0 +1,6 @@
+package org.bouncycastle.asn1.x500.style;
+
+public class RFC4519Style
+        extends AbstractX500NameStyle {
+
+}
diff --git a/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/x509/BasicConstraints.java b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/x509/BasicConstraints.java
new file mode 100644
index 000000000..4d4fd097d
--- /dev/null
+++ b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/x509/BasicConstraints.java
@@ -0,0 +1,14 @@
+package org.bouncycastle.asn1.x509;
+
+import org.bouncycastle.asn1.ASN1Object;
+import org.bouncycastle.asn1.ASN1Primitive;
+
+public class BasicConstraints extends ASN1Object {
+
+    @Override
+    public ASN1Primitive toASN1Primitive() {
+        throw new UnsupportedOperationException("Exclude io.quarkiverse.cxf:quarkus-cxf-bc-stub from"
+                + " io.quarkiverse.cxf:quarkus-cxf-rt-ws-security dependencies and add Bouncy Castle instead");
+    }
+
+}
diff --git a/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/x509/Extension.java b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/x509/Extension.java
new file mode 100644
index 000000000..11cf8a3f1
--- /dev/null
+++ b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/x509/Extension.java
@@ -0,0 +1,14 @@
+package org.bouncycastle.asn1.x509;
+
+import org.bouncycastle.asn1.ASN1Object;
+import org.bouncycastle.asn1.ASN1Primitive;
+
+public class Extension extends ASN1Object {
+
+    @Override
+    public ASN1Primitive toASN1Primitive() {
+        throw new UnsupportedOperationException("Exclude io.quarkiverse.cxf:quarkus-cxf-bc-stub from"
+                + " io.quarkiverse.cxf:quarkus-cxf-rt-ws-security dependencies and add Bouncy Castle instead");
+    }
+
+}
diff --git a/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/x509/KeyPurposeId.java b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/x509/KeyPurposeId.java
new file mode 100644
index 000000000..7dfb46bc7
--- /dev/null
+++ b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/x509/KeyPurposeId.java
@@ -0,0 +1,15 @@
+package org.bouncycastle.asn1.x509;
+
+import org.bouncycastle.asn1.ASN1Object;
+import org.bouncycastle.asn1.ASN1Primitive;
+
+public class KeyPurposeId
+        extends ASN1Object {
+
+    @Override
+    public ASN1Primitive toASN1Primitive() {
+        throw new UnsupportedOperationException("Exclude io.quarkiverse.cxf:quarkus-cxf-bc-stub from"
+                + " io.quarkiverse.cxf:quarkus-cxf-rt-ws-security dependencies and add Bouncy Castle instead");
+    }
+
+}
diff --git a/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/x509/KeyUsage.java b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/x509/KeyUsage.java
new file mode 100644
index 000000000..78adc7400
--- /dev/null
+++ b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/x509/KeyUsage.java
@@ -0,0 +1,14 @@
+package org.bouncycastle.asn1.x509;
+
+import org.bouncycastle.asn1.ASN1Object;
+import org.bouncycastle.asn1.ASN1Primitive;
+
+public class KeyUsage extends ASN1Object {
+
+    @Override
+    public ASN1Primitive toASN1Primitive() {
+        throw new UnsupportedOperationException("Exclude io.quarkiverse.cxf:quarkus-cxf-bc-stub from"
+                + " io.quarkiverse.cxf:quarkus-cxf-rt-ws-security dependencies and add Bouncy Castle instead");
+    }
+
+}
diff --git a/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/x509/PolicyInformation.java b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/x509/PolicyInformation.java
new file mode 100644
index 000000000..8a466d60a
--- /dev/null
+++ b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/asn1/x509/PolicyInformation.java
@@ -0,0 +1,14 @@
+package org.bouncycastle.asn1.x509;
+
+import org.bouncycastle.asn1.ASN1Object;
+import org.bouncycastle.asn1.ASN1Primitive;
+
+public class PolicyInformation extends ASN1Object {
+
+    @Override
+    public ASN1Primitive toASN1Primitive() {
+        throw new UnsupportedOperationException("Exclude io.quarkiverse.cxf:quarkus-cxf-bc-stub from"
+                + " io.quarkiverse.cxf:quarkus-cxf-rt-ws-security dependencies and add Bouncy Castle instead");
+    }
+
+}
diff --git a/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/cert/CertIOException.java b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/cert/CertIOException.java
new file mode 100644
index 000000000..6a640d5f5
--- /dev/null
+++ b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/cert/CertIOException.java
@@ -0,0 +1,7 @@
+package org.bouncycastle.cert;
+
+import java.io.IOException;
+
+public class CertIOException extends IOException {
+
+}
diff --git a/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/cert/X509v3CertificateBuilder.java b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/cert/X509v3CertificateBuilder.java
new file mode 100644
index 000000000..5a2ef9b0f
--- /dev/null
+++ b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/cert/X509v3CertificateBuilder.java
@@ -0,0 +1,5 @@
+package org.bouncycastle.cert;
+
+public class X509v3CertificateBuilder {
+
+}
diff --git a/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/cert/jcajce/JcaX509CertificateConverter.java b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/cert/jcajce/JcaX509CertificateConverter.java
new file mode 100644
index 000000000..c318bf719
--- /dev/null
+++ b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/cert/jcajce/JcaX509CertificateConverter.java
@@ -0,0 +1,5 @@
+package org.bouncycastle.cert.jcajce;
+
+public class JcaX509CertificateConverter {
+
+}
diff --git a/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/cert/jcajce/JcaX509v3CertificateBuilder.java b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/cert/jcajce/JcaX509v3CertificateBuilder.java
new file mode 100644
index 000000000..7c70a8713
--- /dev/null
+++ b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/cert/jcajce/JcaX509v3CertificateBuilder.java
@@ -0,0 +1,16 @@
+package org.bouncycastle.cert.jcajce;
+
+import java.math.BigInteger;
+import java.util.Date;
+
+import org.bouncycastle.asn1.x500.X500Name;
+import org.bouncycastle.asn1.x509.SubjectPublicKeyInfo;
+
+public class JcaX509v3CertificateBuilder {
+    public JcaX509v3CertificateBuilder(X500Name issuer, BigInteger serial, Date notBefore, Date notAfter, X500Name subject,
+            SubjectPublicKeyInfo publicKey) {
+        throw new UnsupportedOperationException("Exclude io.quarkiverse.cxf:quarkus-cxf-bc-stub from"
+                + " io.quarkiverse.cxf:quarkus-cxf-rt-ws-security dependencies and add Bouncy Castle instead");
+    }
+
+}
diff --git a/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/jce/provider/BouncyCastleProvider.java b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/jce/provider/BouncyCastleProvider.java
new file mode 100644
index 000000000..017ba0f6d
--- /dev/null
+++ b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/jce/provider/BouncyCastleProvider.java
@@ -0,0 +1,8 @@
+package org.bouncycastle.jce.provider;
+
+public class BouncyCastleProvider {
+    public BouncyCastleProvider() {
+        throw new UnsupportedOperationException("Exclude io.quarkiverse.cxf:quarkus-cxf-bc-stub from"
+                + " io.quarkiverse.cxf:quarkus-cxf-rt-ws-security dependencies and add Bouncy Castle instead");
+    }
+}
diff --git a/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/operator/ContentSigner.java b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/operator/ContentSigner.java
new file mode 100644
index 000000000..a002ece0a
--- /dev/null
+++ b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/operator/ContentSigner.java
@@ -0,0 +1,5 @@
+package org.bouncycastle.operator;
+
+public interface ContentSigner {
+
+}
diff --git a/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/operator/OperatorCreationException.java b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/operator/OperatorCreationException.java
new file mode 100644
index 000000000..f6708f65c
--- /dev/null
+++ b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/operator/OperatorCreationException.java
@@ -0,0 +1,5 @@
+package org.bouncycastle.operator;
+
+public class OperatorCreationException extends OperatorException {
+
+}
diff --git a/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/operator/OperatorException.java b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/operator/OperatorException.java
new file mode 100644
index 000000000..387ebec78
--- /dev/null
+++ b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/operator/OperatorException.java
@@ -0,0 +1,5 @@
+package org.bouncycastle.operator;
+
+public class OperatorException extends Exception {
+
+}
diff --git a/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/operator/jcajce/JcaContentSignerBuilder.java b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/operator/jcajce/JcaContentSignerBuilder.java
new file mode 100644
index 000000000..83c52cdbf
--- /dev/null
+++ b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/operator/jcajce/JcaContentSignerBuilder.java
@@ -0,0 +1,11 @@
+package org.bouncycastle.operator.jcajce;
+
+public class JcaContentSignerBuilder {
+
+    public JcaContentSignerBuilder(String signatureAlgorithm) {
+        throw new UnsupportedOperationException("Exclude io.quarkiverse.cxf:quarkus-cxf-bc-stub from"
+                + " io.quarkiverse.cxf:quarkus-cxf-rt-ws-security dependencies and add Bouncy Castle instead");
+
+    }
+
+}
diff --git a/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/pkcs/PKCS10CertificationRequest.java b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/pkcs/PKCS10CertificationRequest.java
new file mode 100644
index 000000000..d6d34395f
--- /dev/null
+++ b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/pkcs/PKCS10CertificationRequest.java
@@ -0,0 +1,5 @@
+package org.bouncycastle.pkcs;
+
+public class PKCS10CertificationRequest {
+
+}
diff --git a/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/pkcs/PKCS10CertificationRequestBuilder.java b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/pkcs/PKCS10CertificationRequestBuilder.java
new file mode 100644
index 000000000..fce283fcf
--- /dev/null
+++ b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/pkcs/PKCS10CertificationRequestBuilder.java
@@ -0,0 +1,5 @@
+package org.bouncycastle.pkcs;
+
+public class PKCS10CertificationRequestBuilder {
+
+}
diff --git a/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/util/Encodable.java b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/util/Encodable.java
new file mode 100644
index 000000000..028450eb6
--- /dev/null
+++ b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/util/Encodable.java
@@ -0,0 +1,5 @@
+package org.bouncycastle.util;
+
+public interface Encodable {
+
+}
diff --git a/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/util/Iterable.java b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/util/Iterable.java
new file mode 100644
index 000000000..5c1f7e384
--- /dev/null
+++ b/extensions/ws-security/bc-stub/src/main/java/org/bouncycastle/util/Iterable.java
@@ -0,0 +1,6 @@
+package org.bouncycastle.util;
+
+public interface Iterable<T>
+        extends java.lang.Iterable<T> {
+
+}
diff --git a/pom.xml b/pom.xml
index 3217a22d5..936b944ef 100644
--- a/pom.xml
+++ b/pom.xml
@@ -51,7 +51,6 @@
         <!-- Items annotated with @sync can be updated by running mvn cq:sync-versions -N -->
         <angus-mail.version>2.0.3</angus-mail.version>
         <assertj.version>3.27.2</assertj.version>
-        <cryptacular.version>1.2.6</cryptacular.version><!-- 1.2.7 does not work - see https://github.com/quarkiverse/quarkus-cxf/issues/1648 -->
         <cxf.xjcplugins.version>4.1.0</cxf.xjcplugins.version><!-- @sync org.apache.cxf:cxf:${cxf.version} prop:cxf.xjc-utils.version -->
         <ehcache.version>3.10.8</ehcache.version>
         <fastinfoset.version>2.1.1</fastinfoset.version>