Interoperability

The following provides an overview of Bouncy Castle's capabilities and support, with relevant links to external standards and documentation. 

Packages and Standards

Bouncy Castle Java supports the following formats and standards.

Certifications

The following lists certifications with relevant links to certificates and documentation.

For more information about the Bouncy Castle FIPS Java API and how it presents cryptography, refer to The Bouncy Castle FIPS Java API in 100 Examples and sample code at https://www.bouncycastle.org/fips-java/bc-fips-100-java.tar.gz and https://www.bouncycastle.org/fips-java/bc-fips-100-java.zip.

Algorithms and Key Types

Bouncy Castle supports the following public key algorithm types and key size/curves.

Symmetric Key Algorithms

Bouncy Castle supports the following symmetric key algorithms.

Message Digests and Expandable Output Functions

Bouncy Castle supports the following Message Digests and Expandable Output Functions (XOFs).

Post Quantum Algorithm Support

The following stateful hash-based signature algorithms are standardized and implemented.

NIST PQC Competition Algorithms

For further details on these algorithms, refer to NIST Post-Quantum Cryptography.

The Post-Quantum Cryptography (PQC) algorithms below are still under development. Published standards are unlikely to appear before mid-2024 and the algorithms may still change. You can start experimenting, but note that while the Key Encapsulation Algorithms (KEMs) are suitable for use with hybrid cryptography using short-term keys, the PQC algorithms below are still not suitable for use with anything long-term.

Key Encapsulation Algorithms (KEMs)

Signature Algorithms

CRL, OCSP and Certificate Distribution

Bouncy Castle supports the following CRL formats and standards.

Certificate Enrollment Protocols

The following lists Certificate Enrollment Protocols and/or interfaces.