Java developers, take note: Oracle has released Jipher, a cryptographic service provider for Java that packs a FIPS 140-2 validated OpenSSL cryptographic module. This announcement is music to the ears of those working in regulated environments.
Oracle's latest offering aims to bridge the gap between security and compliance, making it easier for Java applications to operate within FIPS 140-regulated environments. By leveraging the OpenSSL 3.x FIPS module, Jipher ensures that deployments are in line with industry standards.
What is Jipher?
Jipher is a Java cryptographic service provider packaged as a JAR file, downloadable from Java Tools and Resources or My Oracle Support for Java SE users. This new addition to the Java ecosystem caters specifically to developers working within FIPS 140-regulated environments, providing them with a reliable solution for encryption.
Why is FIPS 140-Validation Crucial?
The National Institute of Standards and Technology (NIST) publishes FIPS standards that define security requirements for cryptographic modules. In regulated environments, adherence to these standards is mandatory. Oracle's Jipher addresses this need by offering a FIPS 140-validated OpenSSL cryptographic module.
Jipher's Advantages
By utilizing Jipher, developers can ensure their Java applications meet the stringent security requirements of FIPS 140-regulated environments. This compliance is particularly important for organizations operating in industries such as finance and healthcare, where data security is paramount. Oracle's Jipher represents a significant advancement in delivering standards-compliant security solutions.
Oracle's commitment to security is further underscored by its recent release of JDK 24, which includes post-quantum algorithm implementations standardized by FIPS 203 and FIPS 204. This move demonstrates the company's dedication to protecting users against emerging threats like quantum computing.
Getting Started with Jipher
Jipher requires an up-to-date release of Oracle JDK 17 or JDK 21, or GraalVM for JDK 17 or JDK 21. It is made available under the Java SE OTN license and supported for Java SE subscribers and users running Java workloads in Oracle Cloud Infrastructure.
Online News Articles and Regulatory Compliance
In today's digital landscape, regulatory compliance is more crucial than ever. With Jipher, Oracle has taken a significant step towards providing developers with the tools they need to stay ahead of evolving security threats. As online news articles continue to highlight the importance of data security, it is clear that companies must prioritize compliance.