The Bouncy Castle Java FIPS Project: A Look at the Past and the Future (S13b)
It has now been 10 years since the first Java Bouncy Castle FIPS module was submitted and certified. Over that time Java has gone from release version 8 to release version 25, the speakers have seen the introduction of Java module definitions, multi-version jar file, targeted JVM construction for applications via jlink, the Foreign Function and Memory APIs for inclusion of native code, FIPS 140-3, as well as changes to the ways a JCA cryptography module can be incorporated for use in the JVM. In addition to that the Bouncy Castle team has also introduced native acceleration in some modules, as well as finding ways to reduce the certified footprint, allowing the evolution of parts of the FIPS APIs to follow a timeline similar to the regular open-source Bouncy Castle Java project. This talk will look at how the new Java APIs and technologies, standard changes, and also the “getting of wisdom” in the Bouncy Castle team, have changed what the speakers do, what the Bouncy Castle FIPS project supports, how the project supports it, and what changes the speakers anticipate in the future.