[prev in list] [next in list] [prev in thread] [next in thread]
List: bouncycastle-crypto-dev
Subject: Re: [dev-crypto] BC 2.0 + FIPS "certification" timeline
From: David Hook <dgh () bouncycastle ! org>
Date: 2024-03-12 4:59:33
Message-ID: 7a0850c2-1b2c-4c7f-aca3-5ff24f5322bc () bouncycastle ! org
[Download RAW message or body]
The only thing I can say for certain is we're well into the
co-ordination process for 2.0.0. That said, the process will do what the
process does, so other than the elapsed time giving us a hint we're
still not sure when we will be done. The changes required to move to
FIPS 140-3, combined with the flood of FIPS 140-2 submissions at the end
of 2022, has really slowed things down a bit...
Regards,
David
On 12/3/24 08:01, David Sitsky wrote:
> Hi,
>
> I can see https://www.bouncycastle.org/fips_java_roadmap.html
> indicates "BC-FJA 2.0.0 has now completed testing and is in the
> submission queue." and indeed from
> https://csrc.nist.gov/Projects/cryptographic-module-validation-program/modules-in-process/Modules-In-Process-List:
>
> BC-FJA (Bouncy Castle FIPS Java API) ... FIPS 140-3 Review Pending
> (12/22/2023)
> BC-FJA (Bouncy Castle FIPS Java API) ... FIPS 140-3 Coordination
> (3/1/2024)
>
> Does anybody here have a sense when this process will roughly
> complete? We are looking for a rough timeline when we can use JDK21
> with BC2+FIPS.
>
> Cheers,
> David
>
[Attachment #3 (text/html)]
<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix">The only thing I can say for certain is
we're well into the co-ordination process for 2.0.0. That said,
the process will do what the process does, so other than the
elapsed time giving us a hint we're still not sure when we will be
done. The changes required to move to FIPS 140-3, combined with
the flood of FIPS 140-2 submissions at the end of 2022, has really
slowed things down a bit...<br>
</div>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix">Regards,</div>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix">David<br>
</div>
<div class="moz-cite-prefix">On 12/3/24 08:01, David Sitsky wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAEQ8c00+sCzGMdHtO7FDWr=PM-PUS+fgoJhCCrTjzw+KuQRmsw@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="ltr">Hi,
<div><br>
</div>
<div>I can see <a
href="https://www.bouncycastle.org/fips_java_roadmap.html"
moz-do-not-send="true" \
class="moz-txt-link-freetext">https://www.bouncycastle.org/fips_java_roadmap.html</a> \
indicates "<span style="color:rgb(51,51,51);font-family:Arial,Helvetica,"Sans \
Serif";font-size:13.3333px">BC-FJA 2.0.0 has now completed testing and is in \
the submission queue." and indeed from </span><a
href="https://csrc.nist.gov/Projects/cryptographic-module-validation-program/modules-in-process/Modules-In-Process-List"
moz-do-not-send="true" \
class="moz-txt-link-freetext">https://csrc.nist.gov/Projects/cryptographic-module-validation-program/modules-in-process/Modules-In-Process-List</a>:</div>
<div><br>
</div>
BC-FJA (Bouncy Castle FIPS Java API) ... FIPS 140-3 Review
Pending (12/22/2023)<br>
<div>BC-FJA (Bouncy Castle FIPS Java API) ... FIPS 140-3
Coordination (3/1/2024)</div>
<div><br>
</div>
<div>Does anybody here have a sense when this process will
roughly complete? We are looking for a rough timeline when we
can use JDK21 with BC2+FIPS.</div>
<div><br>
</div>
<div>Cheers,</div>
<div>David</div>
<div><br>
</div>
<div> </div>
</div>
</blockquote>
<p><br>
</p>
</body>
</html>
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic