The various multipart/signed providers require the Bouncy Castle modules. While these are currently set as module dependencies on the org.jboss.resteasy.resteasy-crypto module they need to be added to the deployment as they may be required during processing the deployment.