Re: BC-FIPS does not reject JKS keystores

--0000000000001480a30597adfa49
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Ahh thanks Pete. I'm new to FIPS and FedRAMP, and I guess it shows.

I think I had a misconception about FIPS. Please correct me if I'm wrong:
FIPS certification applies only to the cryptographic library? And JSSE
provider FIPS mode is only used to help developers make sure that their
JSSE cryptography actually uses the FIPS-certified provider, and not all
providers available?
Thanks,
Daniel

wt., 19 lis 2019 o 03:25 Peter Dettman <[email protected]>
napisa=C5=82(a):

> Hi Daniel,
> If I'm understanding your question correctly, the answer is neither; the
> JSSE provider is not involved in certification for the FIPS jar itself.
>
> Regards,
> Pete Dettman
>
> On 15/11/19 3:06 pm, Daniel Jeli=C5=84ski wrote:
> > So, all is good. I'd just like to know which JSSE provider was
> > BouncyCastle approved with, Sun's or BouncyCastleJsseProvider?
> > Thanks,
> > Daniel
>

--0000000000001480a30597adfa49
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Ahh thanks Pete. I&#39;m new to FIPS and FedRAMP, and=
 I guess it shows.</div><div><br></div><div>I think I had a misconception a=
bout FIPS. Please correct me if I&#39;m wrong: FIPS certification applies o=
nly to the cryptographic library? And JSSE provider FIPS mode is only used =
to help developers make sure that their JSSE cryptography actually uses the=
 FIPS-certified provider, and not all providers available?</div><div>Thanks=
,</div><div>Daniel</div><br><div class=3D"gmail_quote"><div dir=3D"ltr" cla=
ss=3D"gmail_attr">wt., 19 lis 2019 o 03:25=C2=A0Peter Dettman &lt;<a href=
=3D"mailto:[email protected]">[email protected]</=
a>&gt; napisa=C5=82(a):<br></div><blockquote class=3D"gmail_quote" style=3D=
"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-le=
ft:1ex">Hi Daniel,<br>
If I&#39;m understanding your question correctly, the answer is neither; th=
e<br>
JSSE provider is not involved in certification for the FIPS jar itself.<br>
<br>
Regards,<br>
Pete Dettman<br>
<br>
On 15/11/19 3:06 pm, Daniel Jeli=C5=84ski wrote:<br>
&gt; So, all is good. I&#39;d just like to know which JSSE provider was<br>
&gt; BouncyCastle approved with, Sun&#39;s or BouncyCastleJsseProvider?<br>
&gt; Thanks,<br>
&gt; Daniel<br>
</blockquote></div></div>

--0000000000001480a30597adfa49--