Package org.keycloak.crypto.fips
package org.keycloak.crypto.fips
-
ClassesClassDescriptionThe Class CertificateUtils provides utility functions for generation of V1 and V3
X509CertificateECDH Ephemeral Static Algorithm Provider.Encodes Key or Certificates to PEM format stringIntegration based on FIPS 140-2AFIPS1402Providerthat forces BC to run in FIPS approve mode by default.Variant oforg.keycloak.jose.jwe.alg.AesKeyWrapAlgorithmProviderbased on FIPSFips note: Based on https://downloads.bouncycastle.org/fips-java/BC-FJA-UserGuide-1.0.2.pdf, Section 4 There are no direct public/private key ciphers available in approved mode.Security provider to workaround usage of potentially unsecured algorithms by 3rd party dependencies.