Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

Cryptographic Algorithm Validation Program

Description
The Bouncy Castle FIPS Java API is a comprehensive suite of FIPS Approved algorithms implemented in pure Java. All key sizes and modes have been implemented to allow flexibility and efficiency, and additional algorithms are available in non-approved operation as well.
Version
1.0.1
Type
SOFTWARE
Vendor
Legion of the Bouncy Castle Inc.
85 The Crescent
Ascot Vale, Victoria 3032
Australia
Contacts
David Hook
dgh@bouncycastle.org
+61438170390
Jon Eaves
jon@bouncycastle.org
+61417502969

Validations

Number
Date
Operating Environments
Algorithm Capabilities
Component 1398
9/1/2017
  • Java SE Runtime Environment 7 on Red Hat Enterprise Linux 7.3 on VMware ESXi 5.5 on Intel Xeon Processor X5670
  • Java SE Runtime Environment 8 on Red Hat Enterprise Linux 7.3 on VMware ESXi 5.5 on Intel Xeon Processor X5670
  • Component ANS 9.63
    • Hash Algorithm: SHA2-224, SHA2-256, SHA2-384, SHA2-512
    Prerequisites:
  • Component IKEv2
      • Capabilities:
        • Hash Algorithm: SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512
        • Responder Nonce Length: 160-8192
        • Diffie-Hellman Shared Secret Length: 224
      • Capabilities:
        • Diffie-Hellman Shared Secret Length: 8192
        • Hash Algorithm: SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512
        • Responder Nonce Length: 160-8192
      • Capabilities:
        • Hash Algorithm: SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512
        • Responder Nonce Length: 160-8192
        • Diffie-Hellman Shared Secret Length: 384
    Prerequisites:
  • Component SRTP
    • AES Key Length: 128, 192, 256
    Prerequisites:
  • Component SSH
    • Hash Algorithm: SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512
    Prerequisites:
  • Component TLS
    • TLS Version: v1.0/1.1, v1.2
    • Hash Algorithm: SHA2-256, SHA2-384, SHA2-512
    Prerequisites:
  • PhotonOS 2.0 running on ESXi 6.7 with JRE 1.8 on Intel Xeon 6126
    • processor
      • manufacturer: Intel
    • software
  • Ubuntu 16.04 running on ESXi 6.7 with JRE 1.8 on Intel Xeon 6126
    • processor
      • manufacturer: Intel
    • software
  • Windows Server 2016 running on ESXi 6.7 with JRE 1.8 on Intel Xeon 6126
    • processor
      • manufacturer: Intel
    • software
  • Component ANS 9.63
    • Shared Info Length: 8-1024
    • Field Size: 224, 233, 256, 283, 384, 409, 521, 571
    • Key Data Length: 128-4096
    • Hash Algorithm: SHA2-224, SHA2-256, SHA2-384, SHA2-512
    Prerequisites:
  • Component IKEv2
      • Capabilities:
        • Diffie-Hellman Shared Secret Length: 224
        • Hash Algorithm: SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512
        • Initiator Nonce Length: 128-2048
        • Derived Keying Material Length: 160-8192
        • Responder Nonce Length: 128-2048
      • Capabilities:
        • Diffie-Hellman Shared Secret Length: 8192
        • Hash Algorithm: SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512
        • Initiator Nonce Length: 128-2048
        • Derived Keying Material Length: 160-8192
        • Responder Nonce Length: 128-2048
      • Capabilities:
        • Hash Algorithm: SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512
        • Initiator Nonce Length: 128-2048
        • Derived Keying Material Length: 160-8192
        • Responder Nonce Length: 128-2048
        • Diffie-Hellman Shared Secret Length: 384
    Prerequisites:
  • Component SRTP
    • AES Key Length: 128, 192, 256
    • KDR Expoonents: 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24
    Prerequisites:
  • Component SSH
    • Hash Algorithm: SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512
    • Cipher: AES-128, AES-192, AES-256, TDES
    Prerequisites:
  • Component TLS
    • Hash Algorithm: SHA2-256, SHA2-384, SHA2-512
    • TLS Version: v1.0/1.1, v1.2
    Prerequisites:
  • Linux 3.10 on Intel Xeon E5-2697 v3
    • processor
      • manufacturer: Intel
    • software
  • Linux 3.10 on Intel Xeon Silver 4110
    • processor
      • manufacturer: Intel
    • software
  • Component ANS 9.63
    • Shared Info Length: 0-1024
    • Field Size: 224, 233, 256, 283, 384, 409, 521, 571
    • Key Data Length: 128-4096
    • Hash Algorithm: SHA2-224, SHA2-256, SHA2-384, SHA2-512
    Prerequisites:
  • Component IKEv2
      • Capabilities:
        • Diffie-Hellman Shared Secret Length: 224
        • Hash Algorithm: SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512
        • Initiator Nonce Length: 128-2048
        • Derived Keying Material Length: 160-8192
        • Responder Nonce Length: 128-2048
      • Capabilities:
        • Diffie-Hellman Shared Secret Length: 8192
        • Hash Algorithm: SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512
        • Initiator Nonce Length: 128-2048
        • Derived Keying Material Length: 160-8192
        • Responder Nonce Length: 128-2048
      • Capabilities:
        • Hash Algorithm: SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512
        • Initiator Nonce Length: 128-2048
        • Derived Keying Material Length: 160-8192
        • Diffie-Hellman Shared Secret Length: 384
        • Responder Nonce Length: 128-2048
    Prerequisites:
  • Component SRTP
    • AES Key Length: 128, 192, 256
    • KDR Expoonents: 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24
    Prerequisites:
  • Component SSH
    • Cipher: AES-128, AES-192, AES-256, TDES
    • Hash Algorithm: SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512
    Prerequisites:
  • Component TLS
    • TLS Version: v1.0/1.1, v1.2
    • Hash Algorithm: SHA2-256, SHA2-384, SHA2-512
    Prerequisites:
  • Android Lollipop 5.1 on Qualcomm MSM8960 Pro
    • software
    • processor
      • manufacturer: Qualcomm
  • Android Marshmallow 6.0 on Qualcomm MSM8956
    • software
    • processor
      • manufacturer: Qualcomm
  • Android Oreo 8.1 on Qualcomm SDM660
    • software
    • processor
      • manufacturer: Qualcomm
  • Component ANS 9.63
    • Shared Info Length: 0-1024
    • Field Size: 224, 233, 256, 283, 384, 409, 521, 571
    • Key Data Length: 128-4096
    • Hash Algorithm: SHA2-224, SHA2-256, SHA2-384, SHA2-512
    Prerequisites:
  • Component IKEv2
      • Capabilities:
        • Hash Algorithm: SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512
        • Initiator Nonce Length: 128-2048
        • Derived Keying Material Length: 160-8192
        • Diffie-Hellman Shared Secret Length: 224
        • Responder Nonce Length: 128-2048
      • Capabilities:
        • Hash Algorithm: SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512
        • Initiator Nonce Length: 128-2048
        • Derived Keying Material Length: 160-8192
        • Diffie-Hellman Shared Secret Length: 8192
        • Responder Nonce Length: 128-2048
      • Capabilities:
        • Hash Algorithm: SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512
        • Initiator Nonce Length: 128-2048
        • Derived Keying Material Length: 160-8192
        • Diffie-Hellman Shared Secret Length: 384
        • Responder Nonce Length: 128-2048
    Prerequisites:
  • Component SRTP
    • AES Key Length: 128, 192, 256
    • KDR Expoonents: 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24
    Prerequisites:
  • Component SSH
    • Hash Algorithm: SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512
    • Cipher: AES-128, AES-192, AES-256, TDES
    Prerequisites:
  • Component TLS
    • Hash Algorithm: SHA2-256, SHA2-384, SHA2-512
    • TLS Version: v1.0/1.1, v1.2
    Prerequisites: