Module Name
BC-FNA (Bouncy Castle FIPS .NET API)
Historical Reason
Moved to historical list due to sunsetting
Caveat
When operated in FIPS mode. No assurance of the minimum strength of generated keys.
Security Level Exceptions
Embodiment
Multi-Chip Stand Alone
Description
The Bouncy Castle FIPS .NET API is a comprehensive suite of FIPS Approved algorithms implemented in pure C#. All key sizes and modes have been implemented to allow flexibility and efficiency, and additional algorithms, including some post-quantum ones, are available in non-approved operation as well.
Tested Configuration(s)
- Microsoft Windows 10 Professional (64-bit) on .NET 4.5.2 framework running on Dell XPS 15 7590 with Intel Core i7-9750H (single-user mode)
Approved Algorithms
| AES |
Cert. #A1905 |
| CKG |
vendor affirmed |
| CVL |
Cert. #A1905 |
| DRBG |
Cert. #A1905 |
| DSA |
Cert. #A1905 |
| ECDSA |
Cert. #A1905 |
| HMAC |
Cert. #A1905 |
| KAS |
Cert. #A1905 |
| KAS |
KAS-SSC Cert. #A1905, CVL Cert. #A1905 |
| KAS |
KAS-SSC Cert. #A1905, KDA Cert. #A1905 |
| KAS-SSC |
Cert. #A1905 |
| KDA |
Cert. #A1905 |
| KTS |
AES Cert. #A1905; key establishment methodology provides between 128 and 256 bits of encryption strength |
| KTS |
Triple-DES Cert. #A1905; key establishment methodology provides 112 bits of encryption strength |
| KTS-RSA |
Cert. #A1905; key establishment methodology provides 112 or 128 bits of encryption strength |
| PBKDF |
Cert. #A1905 |
| RSA |
Cert. #A1905 |
| SHA-3 |
Cert. #A1905 |
| SHS |
Cert. #A1905 |
| Triple-DES |
Cert. #A1905 |
Allowed Algorithms
RSA (key wrapping; key establishment methodology provides 112 or 128 bits of encryption strength)
