Roadmap for Bouncy Castle Java FIPS

Name: bc-fips-2.0.0.jar

BC-FJA 2.0.0 was submitted for certification under FIPS 140-3 on Feb 3rd, 2022. 2.0.0 is now available for early access. 2.0.0 will incorporate features from Java 11 and later. It will not support JVMs earlier than Java 1.8. BC-FJA 2.0.0 has now completed testing and is in the submission queue. 2.0.0 has been tested on Java 8, 11, 17, and 21.

Scheduled Additions for BC FIPS 2.0.0

Approved Mode Algorithms:

• SHA-3 HMAC^*
• KMAC,TupleHash,ParallelHash^*
• SP 800-38G: Methods for format preserving encryption (FF1 and FF3-1)^*

Non-approved Mode Algorithms:

• LMS (RFC 8554)^*
• ChaCha20^*, Poly1305^*, ChaCha20-Poly1305^*
• HKDF^*
• GOST R 34.11-2012^*
• GOST R 34.10-2012 (256 and 512)^*

Other:

• Support for PKIXRevocationChecker and the properties "ocsp.enable", "ocsp.responderURL" and "org.bouncycastle.x509.enableCRLDP".^*
• Extra configuration options for the HYBRID DRBG chain to provide better control on entropy demand by the module.^*

^* Now in early access release.

Name: bc-fips-2.1.0.jar

2.1.0 is now available for early access. 2.1.0 is compliant with FIPS 186-5 and includes a JNI layer for AES and SHA-256 acceleration. It will not support JVMs earlier than Java 1.8. As at April 9, 2023, BC-FJA 2.1.0 is about to commence testing.

Name: bc-fips-1.0.3.jar

Next release of bc-fips-1.0.2 contains bug fixes and some improvements, for more details, download BC-FJA-KnownIssues-1.0.2.3.csv. To continue to extend the life of 1.0.0 API past the initial 5 year archive date for the 1.0.0 certification. bc-fips-1.0.3 will be tested against Java 11, but will continue to support Java 1.8 and earlier JVMs. BC-FJA 1.0.3 will be done under FIPS 140-3.

Scheduled Additions for BC FIPS 1.0.3

Approved Mode Algorithms:

• KMAC,TupleHash,ParallelHash^*

Other:

• See 2.0.0 list.