808bits

VMware's BC-FJA (Bouncy Castle FIPS Java API)

FIPS 140-3 certificate #4986 · Broadcom Inc. · data as of 2026-08-28
Active. Sunset date 2029-07-28, 1064 days away.
Caveat: When operated in approved mode. No assurance of the minimum strength of generated SSPs (e.g., keys).

Certificate

Certificate number4986
StandardFIPS 140-3
Statusactive
Sunset date2029-07-28
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorBroadcom Inc. · website
Software versions2.0.0

Module description

VMware's BC-FJA is a comprehensive suite of FIPS Approved algorithms implemented in pure Java. All key sizes and modes have been implemented to allow flexibility and efficiency, and additional algorithms are available in non-approved operation as well.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A

Approved algorithms

AlgorithmCAVP certificate
AES-CBCA4399
AES-CBCA5205
AES-CBC-CS1A4399
AES-CBC-CS1A5205
AES-CBC-CS2A4399
AES-CBC-CS2A5205
AES-CBC-CS3A4399
AES-CBC-CS3A5205
AES-CCMA4399
AES-CCMA5205
AES-CFB128A4399
AES-CFB128A5205
AES-CFB8A4399
AES-CFB8A5205
AES-CMACA4399
AES-CMACA5205
AES-CTRA4399
AES-CTRA5205
AES-ECBA4399
AES-ECBA5205
AES-FF1A4399
AES-FF1A5205
AES-GCMA4399
AES-GCMA5205
AES-GMACA4399
AES-GMACA5205
AES-KWA4399
AES-KWA5205
AES-KWPA4399
AES-KWPA5205
AES-OFBA4399
AES-OFBA5205
Counter DRBGA4399
Counter DRBGA5205
cSHAKE-128A4399
cSHAKE-128A5205
cSHAKE-256A4399
cSHAKE-256A5205
DSA KeyGen (FIPS186-4)A4399
DSA KeyGen (FIPS186-4)A5205
DSA PQGGen (FIPS186-4)A4399
DSA PQGGen (FIPS186-4)A5205
DSA PQGVer (FIPS186-4)A4399
DSA PQGVer (FIPS186-4)A5205
DSA SigGen (FIPS186-4)A4399
DSA SigGen (FIPS186-4)A5205
DSA SigVer (FIPS186-4)A4399
DSA SigVer (FIPS186-4)A5205
ECDSA KeyGen (FIPS186-4)A4399
ECDSA KeyGen (FIPS186-4)A5205
ECDSA KeyVer (FIPS186-4)A4399
ECDSA KeyVer (FIPS186-4)A5205
ECDSA SigGen (FIPS186-4)A4399
ECDSA SigGen (FIPS186-4)A5205
ECDSA SigVer (FIPS186-4)A4399
ECDSA SigVer (FIPS186-4)A5205
Hash DRBGA4399
Hash DRBGA5205
HMAC DRBGA4399
HMAC DRBGA5205
HMAC-SHA-1A4399
HMAC-SHA-1A5205
HMAC-SHA2-224A4399
HMAC-SHA2-224A5205
HMAC-SHA2-256A4399
HMAC-SHA2-256A5205
HMAC-SHA2-384A4399
HMAC-SHA2-384A5205
HMAC-SHA2-512A4399
HMAC-SHA2-512A5205
HMAC-SHA2-512/224A4399
HMAC-SHA2-512/224A5205
HMAC-SHA2-512/256A4399
HMAC-SHA2-512/256A5205
HMAC-SHA3-224A4399
HMAC-SHA3-224A5205
HMAC-SHA3-256A4399
HMAC-SHA3-256A5205
HMAC-SHA3-384A4399
HMAC-SHA3-384A5205
HMAC-SHA3-512A4399
HMAC-SHA3-512A5205
KAS-ECC Sp800-56Ar3A4399
KAS-ECC Sp800-56Ar3A5205
KAS-FFC Sp800-56Ar3A4399
KAS-FFC Sp800-56Ar3A5205
KAS-IFCA4399
KAS-IFCA5205
KDA HKDF SP800-56Cr2A4399
KDA HKDF SP800-56Cr2A5205
KDA OneStep SP800-56Cr2A4399
KDA OneStep SP800-56Cr2A5205
KDA TwoStep SP800-56Cr2A4399
KDA TwoStep SP800-56Cr2A5205
KDF ANS 9.63A4399
KDF ANS 9.63A5205
KDF IKEv2A4399
KDF IKEv2A5205
KDF SNMPA4399
KDF SNMPA5205
KDF SP800-108A4399
KDF SP800-108A5205
KDF SRTPA4399
KDF SRTPA5205
KDF SSHA4399
KDF SSHA5205
KDF TLSA4399
KDF TLSA5205
KMAC-128A4399
KMAC-128A5205
KMAC-256A4399
KMAC-256A5205
KTS-IFCA4399
KTS-IFCA5205
ParallelHash-128A4399
ParallelHash-128A5205
ParallelHash-256A4399
ParallelHash-256A5205
PBKDFA4399
PBKDFA5205
RSA Decryption PrimitiveA4399
RSA Decryption PrimitiveA5205
RSA KeyGen (FIPS186-4)A4399
RSA KeyGen (FIPS186-4)A5205
RSA SigGen (FIPS186-4)A4399
RSA SigGen (FIPS186-4)A5205
RSA Signature PrimitiveA4399
RSA Signature PrimitiveA5205
RSA SigVer (FIPS186-2)A4399
RSA SigVer (FIPS186-2)A5205
RSA SigVer (FIPS186-4)A4399
RSA SigVer (FIPS186-4)A5205
Safe Primes Key GenerationA4399
Safe Primes Key GenerationA5205
Safe Primes Key VerificationA4399
Safe Primes Key VerificationA5205
SHA-1A4399
SHA-1A5205
SHA2-224A4399
SHA2-224A5205
SHA2-256A4399
SHA2-256A5205
SHA2-384A4399
SHA2-384A5205
SHA2-512A4399
SHA2-512A5205
SHA2-512/224A4399
SHA2-512/224A5205
SHA2-512/256A4399
SHA2-512/256A5205
SHA3-224A4399
SHA3-224A5205
SHA3-256A4399
SHA3-256A5205
SHA3-384A4399
SHA3-384A5205
SHA3-512A4399
SHA3-512A5205
SHAKE-128A4399
SHAKE-128A5205
SHAKE-256A4399
SHAKE-256A5205
TupleHash-128A4399
TupleHash-128A5205
TupleHash-256A4399
TupleHash-256A5205

Tested configurations

  • Java SE Runtime Environment v11 with Photon OS 3.0 on VMWare ESXi 8.0 running on Dell PowerEdge R650 with Intel Xeon Gold 6330
  • Java SE Runtime Environment v11 with Photon OS 5.0 on VMWare ESXi 8.0 running on Dell PowerEdge R650 with Intel Xeon Gold 6330
  • Java SE Runtime Environment v11 with Ubuntu 22.04 on VMWare ESXi 8.0 running on Dell PowerEdge R650 with Intel Xeon Gold 6330
  • Java SE Runtime Environment v17 with Amazon Linux 2023 on VMWare ESXi 8.0 running on Dell PowerEdge R650 with Intel Xeon Gold 6330
  • Java SE Runtime Environment v17 with CentOS 9.0 on VMWare ESXi 8.0 running on Dell PowerEdge R650 with Intel Xeon Gold 6330
  • Java SE Runtime Environment v17 with Photon OS 5.0 on VMWare ESXi 8.0 running on Dell PowerEdge R650 with Intel Xeon Gold 6330
  • Java SE Runtime Environment v17 with Red Hat Enterprise Linux 9.3 on VMWare ESXi 8.0 running on Dell PowerEdge R650 with Intel Xeon Gold 6330
  • Java SE Runtime Environment v21 with Photon OS 4.0 on VMWare ESXi 8.0 running on Dell PowerEdge R650 with Intel Xeon Gold 6330
  • VMware Photon OS 4.0 with Java SE Runtime Environment v11 on VMware ESXi 8.0 running on Dell PowerEdge R650 with Intel Xeon Gold 6330
  • VMware Photon OS 4.0 with Java SE Runtime Environment v17 on VMware ESXi 8.0 running on Dell PowerEdge R650 with Intel Xeon Gold 6330
  • VMware Photon OS 4.0 with Java SE Runtime Environment v8 on VMware ESXi 8.0 running on Dell PowerEdge R650 with Intel Xeon Gold 6330
  • VMware Photon OS 5.0 with Java SE Runtime Environment v21 on VMware ESXi 8.0 running on Dell PowerEdge R650 with Intel Xeon Gold 6330

Validation history

DateTypeLab
2025-03-14InitialLightship Security, Inc.
2025-06-23UpdateLightship Security, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status active
  • Validation dates on record: 2025-03-14

Source documents