BC-FJA (Bouncy Castle FIPS Java API)
Caveat: Interim Validation. When operated in approved mode. The module generates SSPs (e.g., keys) whose strengths are modified by available entropy
Certificate
| Certificate number | 4943 |
|---|---|
| Standard | FIPS 140-3 |
| Status | active |
| Sunset date | 2027-01-16 |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Legion of the Bouncy Castle Inc. · website |
| Software versions | 2.1.1 |
Module description
The Bouncy Castle FIPS Java API is a comprehensive suite of FIPS Approved algorithms implemented in pure Java. All key sizes and modes have been implemented to allow flexibility and efficiency, and additional algorithms are available in non-approved operation as well.
Security level exceptions
- Physical security: N/A
- Non-invasive security: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES-CBC | A4270 |
| AES-CBC-CS1 | A4270 |
| AES-CBC-CS2 | A4270 |
| AES-CBC-CS3 | A4270 |
| AES-CCM | A4270 |
| AES-CFB128 | A4270 |
| AES-CFB8 | A4270 |
| AES-CMAC | A4270 |
| AES-CTR | A4270 |
| AES-ECB | A4270 |
| AES-FF1 | A4270 |
| AES-GCM | A4270 |
| AES-GMAC | A4270 |
| AES-KW | A4270 |
| AES-KWP | A4270 |
| AES-OFB | A4270 |
| Counter DRBG | A4270 |
| cSHAKE-128 | A4270 |
| cSHAKE-256 | A4270 |
| DSA KeyGen (FIPS186-4) | A4270 |
| DSA PQGGen (FIPS186-4) | A4270 |
| DSA PQGVer (FIPS186-4) | A4270 |
| DSA SigGen (FIPS186-4) | A4270 |
| DSA SigVer (FIPS186-4) | A4270 |
| ECDSA KeyGen (FIPS186-4) | A4270 |
| ECDSA KeyVer (FIPS186-4) | A4270 |
| ECDSA SigGen (FIPS186-4) | A4270 |
| ECDSA SigVer (FIPS186-4) | A4270 |
| EDDSA KeyGen | A4270 |
| EDDSA KeyVer | A4270 |
| EDDSA SigGen | A4270 |
| EDDSA SigVer | A4270 |
| Hash DRBG | A4270 |
| HMAC DRBG | A4270 |
| HMAC-SHA-1 | A4270 |
| HMAC-SHA2-224 | A4270 |
| HMAC-SHA2-256 | A4270 |
| HMAC-SHA2-384 | A4270 |
| HMAC-SHA2-512 | A4270 |
| HMAC-SHA2-512/224 | A4270 |
| HMAC-SHA2-512/256 | A4270 |
| HMAC-SHA3-224 | A4270 |
| HMAC-SHA3-256 | A4270 |
| HMAC-SHA3-384 | A4270 |
| HMAC-SHA3-512 | A4270 |
| KAS-ECC Sp800-56Ar3 | A4270 |
| KAS-FFC Sp800-56Ar3 | A4270 |
| KAS-IFC | A4270 |
| KDA HKDF SP800-56Cr2 | A4270 |
| KDA OneStep SP800-56Cr2 | A4270 |
| KDA TwoStep SP800-56Cr2 | A4270 |
| KDF ANS 9.63 | A4270 |
| KDF IKEv2 | A4270 |
| KDF SP800-108 | A4270 |
| KDF SRTP | A4270 |
| KDF SSH | A4270 |
| KDF TLS | A4270 |
| KMAC-128 | A4270 |
| KMAC-256 | A4270 |
| KTS-IFC | A4270 |
| LMS SigVer | A4270 |
| ParallelHash-128 | A4270 |
| ParallelHash-256 | A4270 |
| PBKDF | A4270 |
| RSA KeyGen (FIPS186-5) | A4270 |
| RSA SigGen (FIPS186-5) | A4270 |
| RSA SigVer (FIPS186-5) | A4270 |
| Safe Primes Key Generation | A4270 |
| Safe Primes Key Verification | A4270 |
| SHA-1 | A4270 |
| SHA2-224 | A4270 |
| SHA2-256 | A4270 |
| SHA2-384 | A4270 |
| SHA2-512 | A4270 |
| SHA2-512/224 | A4270 |
| SHA2-512/256 | A4270 |
| SHA3-224 | A4270 |
| SHA3-256 | A4270 |
| SHA3-384 | A4270 |
| SHA3-512 | A4270 |
| SHAKE-128 | A4270 |
| SHAKE-256 | A4270 |
| TLS v1.2 KDF RFC7627 | A4270 |
| TupleHash-128 | A4270 |
| TupleHash-256 | A4270 |
Tested configurations
- Java SE Runtime Environment v8 (1.8) on Ubuntu 22.04 LTS running on an Intel NUC 11 Pro with an 11th Gen Intel Core i7 with PAA, Java SE Runtime Environment v8 (1.8) on Ubuntu 22.04 LTS running on an Intel NUC 11 Pro with an 11th Gen Intel Core i7 without PAA, Java SE Runtime Environment v11 (11) on Ubuntu 22.04 LTS running on an Intel NUC 11 Pro with an 11th Gen Intel Core i7 with PAA, Java SE Runtime Environment v11 (11) on Ubuntu 22.04 LTS running on an Intel NUC 11 Pro with an 11th Gen Intel Core i7 without PAA, Java SE Runtime Environment v17 (17) on Ubuntu 22.04 LTS running on an Intel NUC 11 Pro with an 11th Gen Intel Core i7 with PAA, Java SE Runtime Environment v17 (17) on Ubuntu 22.04 LTS running on an Intel NUC 11 Pro with an 11th Gen Intel Core i7 without PAA, Java SE Runtime Environment v21 (21) on Ubuntu 22.04 LTS running on an Intel NUC 11 Pro with an 11th Gen Intel Core i7 with PAA, Java SE Runtime Environment v21 (21) on Ubuntu 22.04 LTS running on an Intel NUC 11 Pro with an 11th Gen Intel Core i7 with PAA
Validation history
| Date | Type | Lab |
|---|---|---|
| 2025-01-17 | Initial | Lightship Security, Inc. |
| 2025-11-14 | Update | Lightship Security, Inc. |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2025-01-17