I used the FIPS provider in the JCE, but couldn’t really see any difference – I specifically looked for the maximum key sizes but didn’t find any difference there.
What advantages does enabling FIPS actually provide?
Share
Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
I used the FIPS provider in the JCE, but couldn’t really see any difference – I specifically looked for the maximum key sizes but didn’t find any difference there.
What advantages does enabling FIPS actually provide?
It simply means the JCE meets FIPS requirements. The main difference is that some less-secure ciphers are removed (like DES). Because most strong ciphers already meet FIPS requirements, you wouldn’t be able to see differences by checking maximum key sizes.
It’s also a market term used by IBM, who calls all versions of their JCE as FIPS JCE.