As a pioneer in open-source cryptography, PKI, and signing, we offer Bouncy Castle cryptographic APIs, EJBCA, and SignServer as free and open source software.
Independence, Ohio, Worldwide
Joined September 2011
- Tweets1.1K
- Following264
- Followers1.2K
- Likes708
Entropy = Security
In this #KEYMASTER, David Hook (Bouncy Castle) & Sven Rajala reveal why randomness is the lifeblood of crypto, and why FIPS says “fail loudly” if it is compromised.
Weak entropy = predictable keys = broken security.
Read&Watch: ejbca.org/resources/keymaste…
Big News: Bouncy Castle is now a CVE Numbering Authority (CNA)! This milestone puts us at the heart of the global effort to make vulnerability disclosure faster, more transparent, and more secure.
🔗 Read more: bouncycastle.org/resources/b…
#CNA #CVE #SBOM #SupplyChainSecurity #AppSec
Keyfactor Community retweeted
Legion of the Bouncy Castle is now a CVE Numbering Authority (CNA) assigning CVE IDs for Legion of the Bouncy Castle issues only
cve.org/Media/News/item/news…
#cve #cna #vulnerability #vulnerabilitymanagement #cybersecurity #opensource @CVEnew
ALT New CVE Program Partner
Patch releases are now allowed for FIPS-certified Bouncy Castle modules! Thanks to a FedRAMP policy, you can now patch CVEs without breaking compliance—as long as crypto functions stay unchanged. First up: BC Java FIPS 2.1.1 Read more: bouncycastle.org/resources/p…
We are excited to share that the Bouncy Castle Jentropy Engine has officially received Entropy Source Validation (ESV) certification from NIST! Read More and Download: bouncycastle.org/resources/b…
New Release Alert!
Bouncy Castle updates: Java 1.81 & C# .NET 2.6.1
Dive into the future of cryptography: bouncycastle.org/resources/b…
#PostQuantum #BouncyCastle #IoTSecurity #CryptoAgility #OpenSourceCrypto
In this #KEYMASTER episode, @Keyfactor’s Sven Rajala is joined by PKI expert Mike Kushner to explore how certificate linting, a practice borrowed from the public web PKI world, helps catch issues before certificates are issued. Read more and watch: ejbca.org/resources/keymaste… #PKI
Ephemeral certs: not new, just better understood.
Sven & Tomas unpack short-lived certs.
Use cases? Service meshes, keyless signing, IoT scale.
Read and Watch on YouTube: ejbca.org/resources/keymaste… #PKI #DevSecOps
Now that #PQC Readiness is in the spotlight, what about the HSMs? In this #KEYMASTER episode, Sven Rajala and Tomas Gustavsson discuss the current state of hardware security modules with PQC algorithms like LMS, ML-DSA, and ML-KEM.
Watch now: ejbca.org/resources/keymaste…
When Are You PQC Ready? The journey to #post-quantum cryptography (#PQC) readiness is more than just adopting new algorithms. In this #KEYMASTER episode, Sven Rajala and Tomas Gustavsson explore what it truly means to be #PQC-ready. Watch now: ejbca.org/resources/keymaste…
