IBM Java JCE FIPS 140-2 Cryptographic Module with CPACF

Certificate

Module description

The IBM Java JCE (Java Cryptographic Extension) FIPS provider (IBMJCEFIPS) for multi-platforms is a scalable, multipurpose cryptographic module that supports many FIPS approved cryptographic operations. This gives Java applications access to the FIPS algorithms via the standard JCE framework.

Approved algorithms

Other algorithms

Diffie-Hellman (CVL Certs. #769 and #771; key agreement; key establishment methodology provides 112 bits of encryption strength; non-compliant less than 112 bits of encryption strength); EC Diffie-Hellman (CVL Certs. #769 and #771; key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength; non-compliant less than 112 bits of encryption strength); NDRNG; RSA (key wrapping; key establishment methodology provides 112 or 128 bits of encryption strength; non-compliant less than 112 bits of encryption strength); AES (non-compliant); MD5; Triple-DES (non-compliant)

Tested configurations

• Red Hat Enterprise Linux Server release 7.2 running on IBM z13 model N63 (single-user mode)
• z/OS version 2 release 2 running on IBM z13 model N63

Validation history

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

• 2026-08-21: first observed by this tracker, status historical
• Validation dates on record: 2017-02-13

Source documents

• NIST certificate page
• Security policy (PDF)
• Consolidated certificate (PDF)