When would bouncy castle Java 25 FIPS compliant be released ?

[Simo-NBU-100673]

Hello fellow developers, I would like to ask is there a known schedule for FIPS compliant bouncy castle as our project is already migrated to Java 25 but we cannot release it as it would not be FIPS compliant if bouncy castle isn't?

I would greatly appreciate if you provide some official schedule if such exists.

[dghgit]

We're in the process of testing BC-FJA 2.1.2 and BC-FJA 2.0.1 on Java 25.

Non-FIPS BC supports Java 25 already, note the FIPS releases will lag on actual Java 25 support (KDFs), this should appear in BC-FJA 3.0.0.

[theosiemensrhodes]

Hi @dghgit, is there a timeline for this support? Thanks!

[theRsquare]

@dghgit , we are also looking for the same update on the support for java 25. can you please provide a timeline for this.

[SraavanChevireddy]

@dghgit - Is there a workaround meantime for us to use ?

[dghgit]

The current jar should work fine with Java 25 - the issue is more that it's not officially tested with Java 25 and as the underlying JVM determines the GPC (General Purpose Computer) in use, this means we're not FIPS certified for the Java 25 so it's not on our certificate. We are in the process of trying to get this addressed, but it's both expensive and time consuming as it requires a re-test on the new GPC with associated paper work and NIST recovery fees.

[mabartos]

@dghgit Thanks for the work! Any progress here?

[ITman1]

Ia there any official way like some ticket, case or status page how to track progress on NIST side? Thx.