IBM® Java JSSE FIPS 140-2 Cryptographic Module
IBM® Java JSSE FIPS 140-2 Cryptographic Module, from IBM® Corporation, holds FIPS 140-2 certificate #409 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in FIPS mode
Certificate
| Certificate number | 409 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-chip standalone |
| Vendor | IBM® Corporation · website |
| Software versions | 1.1 |
Module description
Quoted from the NIST CMVP entry for this certificate.
The IBM+ Java+ JSSE (Java Secure Sockets Extension) FIPS provider (IBMJSSEFIPS) for Multi-platforms is a scalable, multi-purpose Secure Sockets provider that supports only FIPS approved TLS cipher suites via the Java2 Application Programming Interfaces (APIs).
Approved algorithms (6)
| Algorithm | CAVP certificates |
|---|---|
| AES | 53 |
| DSA | 83 |
| HMAC-SHA-1 | vendor affirmed |
| RSA | vendor affirmed |
| SHA-1 | 148 |
| Triple-DES | 163 |
Other algorithms
DES (Cert. #208); MD2; MD5; RC2; RC4; SHA-256; Diffie-Hellman (key agreement)
Tested configurations
- Windows 2000 Professional SP3 (JVM 1.3.1_03 and JVM 1.4.1_04), Windows 2000 Advanced Server SP4 (JVM 1.4.1), Sun Solaris 5.8 (JVM 1.3.1 and 1.4.1), AIX 5.2 (JVM 1.3.1 and 1.4.1), SuSE Linux Enterprise Server 8 (JVM 1.4.1_05), Red Hat Linux Advanced Server 2.1(JVM 1.4.1_05), IBM OS/400 V5R2M0 (JVM 1.4.1), z/OSV1R4 (JVM 1.4.1)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2004-04-05 | Initial | SAIC-VA |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2004-04-05