Source Code for Project Brisbane (AKA Jipher) is now available
The source code for Project Brisbane (AKA Jipher), a Java Cryptographic Extension provider for FIPS 140 regulated environments that is based on OpenSSL, is now available in https://github.com/openjdk/brisbane.
The code is EA-quality at this point, but we have built and successfully tested it against the OpenSSL cryptography library version 3.6.2 and the OpenSSL FIPS provider version 3.5.4. We aim to reach GA quality later this year.
We welcome your feedback!
Best regards,
Denis
Sebastian ŁaskawiecWed 30 Sep 2026 8:45AM
Thank you Denis!
Project Brisbane looks very interesting from the Keycloak Community perspective [1]. I’ve been exploring different options for supporting FIPS mode in Keycloak without relying on Bouncy Castle libraries.
I wanted to ask about the expected GA timeline and whether there are plans to include it by default in OpenJDK? At the same time, I noticed the 20-ga tag in the repository [2], so I wanted to clarify whether these bits are now considered ready for public consumption and experimentation.
[1] https://www.keycloak.org/
[2] https://github.com/openjdk/brisbane/releases/tag/20-ga
Denis GauthierThu 1 Oct 2026 5:42AM
Hi Sebastian,
Thanks for your interest Project Brisbane. Try it out and let us know what you think! Project Brisbane has reached GA, so it is considered ready for public consumption. Note we also have a supported commercial product that is based on the Project Brisbane 20-ga release. Project Brisbane will continue to be an OpenJDK project. There are no plans to include it by default in OpenJDK.
It may interest you to know that Jon Spillett will be delivering a talk about Jipher in the OpenSSL Conference on October 14th.
Sebastian ŁaskawiecThu 1 Oct 2026 7:21AM
Thank you Denis! Much appreciate your response!
Denis GauthierFri 2 Oct 2026 12:36AM
Sebastian, sorry I missed your message to OpenJDK. I sent the same reply there just now so that community also gets visibility.
Gadepalli R G ·Mon 8 Jun 2026 1:21AM
Thank you Denis for posting. It’s a coincidence that I was recently reading about this topic.
Best regards
Gayatri