Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cryptographic Module Validation Program CMVP

Certificate #4943

Details

Module Name
BC-FJA (Bouncy Castle FIPS Java API)
Standard
FIPS 140-3
Status
Active
Sunset Date
1/16/2027
Overall Level
1
Caveat
Interim Validation. When operated in approved mode. The module generates SSPs (e.g., keys) whose strengths are modified by available entropy
Security Level Exceptions
  • Physical security: N/A
  • Non-invasive security: N/A
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
The Bouncy Castle FIPS Java API is a comprehensive suite of FIPS Approved algorithms implemented in pure Java. All key sizes and modes have been implemented to allow flexibility and efficiency, and additional algorithms are available in non-approved operation as well.
Tested Configuration(s)
  • Java SE Runtime Environment v8 (1.8) on Ubuntu 22.04 LTS running on an Intel NUC 11 Pro with an 11th Gen Intel Core i7 with PAA, Java SE Runtime Environment v8 (1.8) on Ubuntu 22.04 LTS running on an Intel NUC 11 Pro with an 11th Gen Intel Core i7 without PAA, Java SE Runtime Environment v11 (11) on Ubuntu 22.04 LTS running on an Intel NUC 11 Pro with an 11th Gen Intel Core i7 with PAA, Java SE Runtime Environment v11 (11) on Ubuntu 22.04 LTS running on an Intel NUC 11 Pro with an 11th Gen Intel Core i7 without PAA, Java SE Runtime Environment v17 (17) on Ubuntu 22.04 LTS running on an Intel NUC 11 Pro with an 11th Gen Intel Core i7 with PAA, Java SE Runtime Environment v17 (17) on Ubuntu 22.04 LTS running on an Intel NUC 11 Pro with an 11th Gen Intel Core i7 without PAA, Java SE Runtime Environment v21 (21) on Ubuntu 22.04 LTS running on an Intel NUC 11 Pro with an 11th Gen Intel Core i7 with PAA, Java SE Runtime Environment v21 (21) on Ubuntu 22.04 LTS running on an Intel NUC 11 Pro with an 11th Gen Intel Core i7 with PAA
Approved Algorithms
AES-CBC
AES-CBC-CS1
AES-CBC-CS2
AES-CBC-CS3
AES-CCM
AES-CFB128
AES-CFB8
AES-CMAC
AES-CTR
AES-ECB
AES-FF1
AES-GCM
AES-GMAC
AES-KW
AES-KWP
AES-OFB
Counter DRBG
cSHAKE-128
cSHAKE-256
DSA KeyGen (FIPS186-4)
DSA PQGGen (FIPS186-4)
DSA PQGVer (FIPS186-4)
DSA SigGen (FIPS186-4)
DSA SigVer (FIPS186-4)
ECDSA KeyGen (FIPS186-4)
ECDSA KeyVer (FIPS186-4)
ECDSA SigGen (FIPS186-4)
ECDSA SigVer (FIPS186-4)
EDDSA KeyGen
EDDSA KeyVer
EDDSA SigGen
EDDSA SigVer
Hash DRBG
HMAC DRBG
HMAC-SHA-1
HMAC-SHA2-224
HMAC-SHA2-256
HMAC-SHA2-384
HMAC-SHA2-512
HMAC-SHA2-512/224
HMAC-SHA2-512/256
HMAC-SHA3-224
HMAC-SHA3-256
HMAC-SHA3-384
HMAC-SHA3-512
KAS-ECC Sp800-56Ar3
KAS-FFC Sp800-56Ar3
KAS-IFC
KDA HKDF SP800-56Cr2
KDA OneStep SP800-56Cr2
KDA TwoStep SP800-56Cr2
KDF ANS 9.63
KDF IKEv2
KDF SP800-108
KDF SRTP
KDF SSH
KDF TLS
KMAC-128
KMAC-256
KTS-IFC
LMS SigVer
ParallelHash-128
ParallelHash-256
PBKDF
RSA KeyGen (FIPS186-5)
RSA SigGen (FIPS186-5)
RSA SigVer (FIPS186-5)
Safe Primes Key Generation
Safe Primes Key Verification
SHA-1
SHA2-224
SHA2-256
SHA2-384
SHA2-512
SHA2-512/224
SHA2-512/256
SHA3-224
SHA3-256
SHA3-384
SHA3-512
SHAKE-128
SHAKE-256
TLS v1.2 KDF RFC7627
TupleHash-128
TupleHash-256
Software Versions
2.1.1

Vendor

Legion of the Bouncy Castle Inc.
85 The Crescent
Ascot Vale, Victoria 3032
Australia

David Hook
[email protected]
Phone: 61438170390
Jon Eaves
[email protected]
Phone: 61417502969

Related Files

Validation History

Date Type Lab
1/17/2025 Initial Lightship Security, Inc.
11/14/2025 Update Lightship Security, Inc.