Bouncy Castle Cryptographic Library for Java

Describes the Data Fabric implementation of the Bouncy Castle cryptographic library for Java.

The Java components of the HPE Ezmeral Data Fabric need to use FIPS-approved cryptographic libraries for FIPS 140-2 Level 1 compliance. The Data Fabric cryptographic library of choice is Bouncy Castle. Bouncy Castle is an open-source Java cryptographic API package with a license similar to the MIT license. The Bouncy Castle Java APIs are FIPS-validated for Java 11, and the CMVP #3514 FIPS approval includes the Linux operating systems mentioned in the Operating System Support Matrix (Ubuntu and CentOS but not Red Hat).

Bouncy Castle Description

The following table describes the Bouncy Castle cryptographic library:
OS Module Description
Linux CentOS/SLES/Ubuntu Bouncy Castle BC-FJA (FIPS Java API v1.0.2.1)
  • FIPS 140-2 Level 1
  • Java Cryptographic API for Java SE 11
  • Tested on Dell PowerEdge R830 Photon OS 2.0, valid for any general purpose computer running HP-US and Linux CentOS/SLES/Ubuntu
  • CMVP #3514, obtaiend 8/23/2019, valid until 8/22/2024
  • See Security Policy

The majority of the cryptographic functions in the HPE Ezmeral Data Fabric core platform are done in the C/C++ layers using OpenSSL. Java components make calls to it through the Java Native Interface (JNI) using the Security class.