OpenSSL Communities

Source Code for Project Brisbane (AKA Jipher) is now available

Denis Gauthier Thu 30 Apr 2026 4:50AMPublicSeen by 121

The source code for Project Brisbane (AKA Jipher), a Java Cryptographic Extension provider for FIPS 140 regulated environments that is based on OpenSSL, is now available in https://github.com/openjdk/brisbane.

The code is EA-quality at this point, but we have built and successfully tested it against the OpenSSL cryptography library version 3.6.2 and the OpenSSL FIPS provider version 3.5.4. We aim to reach GA quality later this year.

We welcome your feedback!

Best regards,

Denis

Gadepalli R GMon 8 Jun 2026 1:21AM

Thank you Denis for posting. It’s a coincidence that I was recently reading about this topic.

Best regards

Gayatri

Sebastian ŁaskawiecWed 30 Sep 2026 8:45AM

Thank you Denis!

Project Brisbane looks very interesting from the Keycloak Community perspective [1]. I’ve been exploring different options for supporting FIPS mode in Keycloak without relying on Bouncy Castle libraries.

I wanted to ask about the expected GA timeline and whether there are plans to include it by default in OpenJDK? At the same time, I noticed the 20-ga tag in the repository [2], so I wanted to clarify whether these bits are now considered ready for public consumption and experimentation.

[1] https://www.keycloak.org/
[2] https://github.com/openjdk/brisbane/releases/tag/20-ga

Denis GauthierThu 1 Oct 2026 5:42AM

Hi Sebastian,

Thanks for your interest Project Brisbane. Try it out and let us know what you think! Project Brisbane has reached GA, so it is considered ready for public consumption. Note we also have a supported commercial product that is based on the Project Brisbane 20-ga release. Project Brisbane will continue to be an OpenJDK project. There are no plans to include it by default in OpenJDK.

It may interest you to know that Jon Spillett will be delivering a talk about Jipher in the OpenSSL Conference on October 14th.

Sebastian ŁaskawiecThu 1 Oct 2026 7:21AM

Thank you Denis! Much appreciate your response!

Denis GauthierFri 2 Oct 2026 12:36AM

Sebastian, sorry I missed your message to OpenJDK. I sent the same reply there just now so that community also gets visibility.