Source Code for Project Brisbane (AKA Jipher) is now available

Thank you Denis for posting. It’s a coincidence that I was recently reading about this topic.

Best regards

Gayatri

Thank you Denis!

Project Brisbane looks very interesting from the Keycloak Community perspective [1]. I’ve been exploring different options for supporting FIPS mode in Keycloak without relying on Bouncy Castle libraries.

I wanted to ask about the expected GA timeline and whether there are plans to include it by default in OpenJDK? At the same time, I noticed the 20-ga tag in the repository [2], so I wanted to clarify whether these bits are now considered ready for public consumption and experimentation.

[1] https://www.keycloak.org/
[2] https://github.com/openjdk/brisbane/releases/tag/20-ga

Hi Sebastian,

Thanks for your interest Project Brisbane. Try it out and let us know what you think! Project Brisbane has reached GA, so it is considered ready for public consumption. Note we also have a supported commercial product that is based on the Project Brisbane 20-ga release. Project Brisbane will continue to be an OpenJDK project. There are no plans to include it by default in OpenJDK.

It may interest you to know that Jon Spillett will be delivering a talk about Jipher in the OpenSSL Conference on October 14th.

Thank you Denis! Much appreciate your response!

Sebastian, sorry I missed your message to OpenJDK. I sent the same reply there just now so that community also gets visibility.