IBM Java JCE 140-2 Cryptographic Module
IBM Java JCE 140-2 Cryptographic Module, from IBM® Corporation, holds FIPS 140-2 certificate #376 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: None
Certificate
| Certificate number | 376 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-chip standalone |
| Vendor | IBM® Corporation · website |
| Software versions | 1.1 |
Module description
Quoted from the NIST CMVP entry for this certificate.
The IBM« Java« JCE (Java Cryptographic Extension) FIPS provider (IBMJCEFIPS) for Multi-platforms is a scalable, multi-purpose cryptographic module that supports only FIPS approved cryptographic operations via the Java2 Application Programming Interfaces (APIs).
Approved algorithms (6)
| Algorithm | CAVP certificates |
|---|---|
| AES | 78 |
| DSA | 91 |
| HMAC-SHA-1 | vendor affirmed |
| RSA | vendor affirmed |
| SHA-1 | 170 |
| Triple-DES | 189 |
Other algorithms
DES (Cert. #224); Diffie-Hellman (key agreement)
Tested configurations
- Windows 2000 Professional SP3 (JVM 1.3.1_03 and JVM 1.4.1_04), Windows 2000 Advanced Server SP4 (JVM 1.4.1), Sun Solaris 5.8 (JVM 1.3.1 and 1.4.1), AIX 5.2 (JVM 1.3.1 and 1.4.1), SuSE Linux Enterprise Server 8 (JVM 1.4.1_05), RedHat Linux Advanced Server 2.1 (JVM 1.4.1_05), IBM OS/400 V5R2M0 (JVM 1.4.1), z/OS V1R4 (JVM 1.4.1) (all in single user mode)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2004-01-30 | Initial | SAIC-VA |
| 2004-04-05 | Update |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2004-01-30, 2004-04-05