As a pioneer in open-source cryptography, PKI, and signing, we offer Bouncy Castle cryptographic APIs, EJBCA, and SignServer as free and open source software.
Entropy = Security
In this #KEYMASTER, David Hook (Bouncy Castle) & Sven Rajala reveal why randomness is the lifeblood of crypto, and why FIPS says “fail loudly” if it is compromised.
Weak entropy = predictable keys = broken security.
Read&Watch: https://t.co/3icTD4P4zp
Big News: Bouncy Castle is now a CVE Numbering Authority (CNA)! This milestone puts us at the heart of the global effort to make vulnerability disclosure faster, more transparent, and more secure.
🔗 Read more: https://t.co/wCKebijVl5
#CNA#CVE#SBOM#SupplyChainSecurity#AppSec
Patch releases are now allowed for FIPS-certified Bouncy Castle modules! Thanks to a FedRAMP policy, you can now patch CVEs without breaking compliance—as long as crypto functions stay unchanged. First up: BC Java FIPS 2.1.1 Read more: https://t.co/NptBdB6b29
We are excited to share that the Bouncy Castle Jentropy Engine has officially received Entropy Source Validation (ESV) certification from NIST! Read More and Download: https://t.co/BgHIzxG4zu
In this #KEYMASTER episode, @Keyfactor’s Sven Rajala is joined by PKI expert Mike Kushner to explore how certificate linting, a practice borrowed from the public web PKI world, helps catch issues before certificates are issued. Read more and watch: https://t.co/rYCveAuVMw #PKI
Ephemeral certs: not new, just better understood.
Sven & Tomas unpack short-lived certs.
Use cases? Service meshes, keyless signing, IoT scale.
Read and Watch on YouTube: https://t.co/u6xgWPXDKo #PKI#DevSecOps
Now that #PQC Readiness is in the spotlight, what about the HSMs? In this #KEYMASTER episode, Sven Rajala and Tomas Gustavsson discuss the current state of hardware security modules with PQC algorithms like LMS, ML-DSA, and ML-KEM.
Watch now: https://t.co/Ned777UwaD
When Are You PQC Ready? The journey to #post-quantum cryptography (#PQC) readiness is more than just adopting new algorithms. In this #KEYMASTER episode, Sven Rajala and Tomas Gustavsson explore what it truly means to be #PQC-ready. Watch now: https://t.co/iA6v7HUwQv
Introducing Keyfactor for Developers – your all-in-one platform for PKI and signing security.
Build, experiment, and scale – we have all the hands-on access and comprehensive resources to get you started.
Learn more: https://t.co/G73X8jSYxX
Bringing Transparency to #SoftwareSupplyChains – In this #KEYMASTER episode, Fredrik Skogman from @GitHub and host Sven Rajala deep dive into #SLSA (Supply-chain Levels for Software Artifacts) and its role in Software Supply Chain #Security. Watch now:
https://t.co/qFmY2GNIQx
TUF Love: Securing Software Updates with #TheUpdateFramework.
In this #KEYMASTER session, Fredrik Skogman, specializing in software supply chain security at @GitHub, shares valuable insights on #TUF with Sven Rajala.
Watch now:
https://t.co/u5ShDwGSQ4
The Evolving Landscape of SBOMs - In this episode of #KEYMASTER, Olle E Johansson joins Sven Rajala to explore Software Bill of Materials (SBOMs)—a critical yet complex tool for software security. Watch now:
https://t.co/7tLezTCgnK
ERCE? Never heard of it? Don’t worry, you are not alone. ERCE is actually the Easy Rest Client for EJBCA, and it just got some nice updates! Join us Live on our next YouTube session: https://t.co/ofatXnzml5
Key Archival and Recovery are crucial for PKI, enabling secure key recovery while ensuring compliance. Join Sven & Joey in this #KEYMASTER session—learn more and watch: https://t.co/ORAcVCgI13 #EJBCA
Happy Friday! We have released a new version of Bouncy Castle Java featuring updates on PQC, lightweight cryptography, and more. https://t.co/KupL2mbk5h #PQC#BouncyCastle#EncryptLikeItIs2030
Fresh KEYMASTER Episode Out Now!
Join Florian Handke and Sven Rajala as they discuss Certificate Management for OPC UA and How the OPC UA Standard Enables Security in Industrial Environments. https://t.co/EWtWQ9V2nr #EJBCA#PKI
In this episode of #KEYMASTER, Tomas Gustavsson joins Sven Rajala, to uncover the hidden pitfalls of PKI in service mesh setups and how to overcome them. https://t.co/dvwosX5TS6
🎄Happy Holidays! 🎄In 2024, we connected online via videos and forums and IRL at the Stockholm Tech Meetup. Thanks, Tomas and David 👇. Let’s continue the conversation in 2025! This year we’re making a donation to https://t.co/69io4YHWLx #PKI#PQC