bouncycastle-fips
Chainguard
Status
Impact
We are waiting for the CMVP for bouncycastle-fips v2.1.2 to be validated by NIST, until then we have to hold off any updates to the package. As per https://www.bouncycastle.org/download/bouncy-castle-java-fips/ The 2.1.0 release, BC-FJA 2.1.0 (Certificate #4943), is certified for use on Java 8, Java 11, Java 17 and Java 21. The 2.1.2 release is a patch release on 2.1.0, going into submission. The CMVP for bouncycastle-fips still shows that 2.1.1 is the only version validated.
Status