Cloudian-FJA (FIPS Java API)
Caveat: When operated in approved mode. No assurance of the minimum strength of generated SSPs (e.g., keys).
Certificate
| Certificate number | 5068 |
|---|---|
| Standard | FIPS 140-3 |
| Status | active |
| Sunset date | 2029-07-28 |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Cloudian Inc. · website |
| Software versions | 2.0.0 |
Module description
The Cloudian FIPS Java API is a comprehensive suite of FIPS Approved algorithms implemented in pure Java and based on Bouncy Castle. All key sizes and modes have been implemented to allow flexibility and efficiency, and additional algorithms are available in non-approved operation as well.
Security level exceptions
- Physical security: N/A
- Non-invasive security: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES-CBC | A4399 |
| AES-CBC-CS1 | A4399 |
| AES-CBC-CS2 | A4399 |
| AES-CBC-CS3 | A4399 |
| AES-CCM | A4399 |
| AES-CFB128 | A4399 |
| AES-CFB8 | A4399 |
| AES-CMAC | A4399 |
| AES-CTR | A4399 |
| AES-ECB | A4399 |
| AES-FF1 | A4399 |
| AES-GCM | A4399 |
| AES-GMAC | A4399 |
| AES-KW | A4399 |
| AES-KWP | A4399 |
| AES-OFB | A4399 |
| Counter DRBG | A4399 |
| cSHAKE-128 | A4399 |
| cSHAKE-256 | A4399 |
| DSA KeyGen (FIPS186-4) | A4399 |
| DSA PQGGen (FIPS186-4) | A4399 |
| DSA PQGVer (FIPS186-4) | A4399 |
| DSA SigGen (FIPS186-4) | A4399 |
| DSA SigVer (FIPS186-4) | A4399 |
| ECDSA KeyGen (FIPS186-4) | A4399 |
| ECDSA KeyVer (FIPS186-4) | A4399 |
| ECDSA SigGen (FIPS186-4) | A4399 |
| ECDSA SigVer (FIPS186-4) | A4399 |
| Hash DRBG | A4399 |
| HMAC DRBG | A4399 |
| HMAC-SHA-1 | A4399 |
| HMAC-SHA2-224 | A4399 |
| HMAC-SHA2-256 | A4399 |
| HMAC-SHA2-384 | A4399 |
| HMAC-SHA2-512 | A4399 |
| HMAC-SHA2-512/224 | A4399 |
| HMAC-SHA2-512/256 | A4399 |
| HMAC-SHA3-224 | A4399 |
| HMAC-SHA3-256 | A4399 |
| HMAC-SHA3-384 | A4399 |
| HMAC-SHA3-512 | A4399 |
| KAS-ECC Sp800-56Ar3 | A4399 |
| KAS-FFC Sp800-56Ar3 | A4399 |
| KAS-IFC | A4399 |
| KDA HKDF SP800-56Cr2 | A4399 |
| KDA OneStep SP800-56Cr2 | A4399 |
| KDA TwoStep SP800-56Cr2 | A4399 |
| KDF ANS 9.63 | A4399 |
| KDF IKEv2 | A4399 |
| KDF SNMP | A4399 |
| KDF SP800-108 | A4399 |
| KDF SRTP | A4399 |
| KDF SSH | A4399 |
| KDF TLS | A4399 |
| KMAC-128 | A4399 |
| KMAC-256 | A4399 |
| KTS-IFC | A4399 |
| ParallelHash-128 | A4399 |
| ParallelHash-256 | A4399 |
| PBKDF | A4399 |
| RSA Decryption Primitive | A4399 |
| RSA KeyGen (FIPS186-4) | A4399 |
| RSA SigGen (FIPS186-4) | A4399 |
| RSA Signature Primitive | A4399 |
| RSA SigVer (FIPS186-2) | A4399 |
| RSA SigVer (FIPS186-4) | A4399 |
| Safe Primes Key Generation | A4399 |
| Safe Primes Key Verification | A4399 |
| SHA-1 | A4399 |
| SHA2-224 | A4399 |
| SHA2-256 | A4399 |
| SHA2-384 | A4399 |
| SHA2-512 | A4399 |
| SHA2-512/224 | A4399 |
| SHA2-512/256 | A4399 |
| SHA3-224 | A4399 |
| SHA3-256 | A4399 |
| SHA3-384 | A4399 |
| SHA3-512 | A4399 |
| SHAKE-128 | A4399 |
| SHAKE-256 | A4399 |
| TupleHash-128 | A4399 |
| TupleHash-256 | A4399 |
Tested configurations
- VMware Photon OS 4.0 with Java SE Runtime Environment v8 on VMware ESXi 8.0 running on Dell PowerEdge R650 with Intel Xeon Gold 6330, VMware Photon OS 4.0 with Java SE Runtime Environment v11 on VMware ESXi 8.0 running on Dell PowerEdge R650 with Intel Xeon Gold 6330, VMware Photon OS 4.0 with Java SE Runtime Environment v17 on VMware ESXi 8.0 running on Dell PowerEdge R650 with Intel Xeon Gold 6330, VMware Photon OS 5.0 with Java SE Runtime Environment v21 on VMware ESXi 8.0 running on Dell PowerEdge R650 with Intel Xeon Gold 6330
Validation history
| Date | Type | Lab |
|---|---|---|
| 2025-09-22 | Initial | AEGISOLVE, Inc. |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2025-09-22