Keyfactor Community

As a pioneer in open-source cryptography, PKI, and signing, we offer Bouncy Castle cryptographic APIs, EJBCA, and SignServer as free and open source software.

[Keyfactor Community @KeyfactorComm]

Entropy = Security
In this #KEYMASTER, David Hook (Bouncy Castle) & Sven Rajala reveal why randomness is the lifeblood of crypto, and why FIPS says “fail loudly” if it is compromised.
Weak entropy = predictable keys = broken security.
Read&Watch: https://t.co/3icTD4P4zp

[Keyfactor Community @KeyfactorComm]

Big News: Bouncy Castle is now a CVE Numbering Authority (CNA)! This milestone puts us at the heart of the global effort to make vulnerability disclosure faster, more transparent, and more secure.
🔗 Read more: https://t.co/wCKebijVl5
#CNA #CVE #SBOM #SupplyChainSecurity #AppSec

[CVE Announcements @CVEannounce]

Legion of the Bouncy Castle is now a CVE Numbering Authority (CNA) assigning CVE IDs for Legion of the Bouncy Castle issues only

https://t.co/EV4RQ6vb4B

#cve #cna #vulnerability #vulnerabilitymanagement #cybersecurity #opensource @CVEnew

[Keyfactor Community @KeyfactorComm]

Patch releases are now allowed for FIPS-certified Bouncy Castle modules! Thanks to a FedRAMP policy, you can now patch CVEs without breaking compliance—as long as crypto functions stay unchanged. First up: BC Java FIPS 2.1.1 Read more: https://t.co/NptBdB6b29

[Keyfactor Community @KeyfactorComm]

We are excited to share that the Bouncy Castle Jentropy Engine has officially received Entropy Source Validation (ESV) certification from NIST! Read More and Download: https://t.co/BgHIzxG4zu

[Keyfactor Community @KeyfactorComm]

New Release Alert!
Bouncy Castle updates: Java 1.81 & C# .NET 2.6.1
Dive into the future of cryptography: https://t.co/tKkpf7HVo6
#PostQuantum #BouncyCastle #IoTSecurity #CryptoAgility #OpenSourceCrypto

[Keyfactor Community @KeyfactorComm]

In this #KEYMASTER episode, @Keyfactor’s Sven Rajala is joined by PKI expert Mike Kushner to explore how certificate linting, a practice borrowed from the public web PKI world, helps catch issues before certificates are issued. Read more and watch: https://t.co/rYCveAuVMw #PKI

[Keyfactor Community @KeyfactorComm]

Ephemeral certs: not new, just better understood.
Sven & Tomas unpack short-lived certs.
Use cases? Service meshes, keyless signing, IoT scale.
Read and Watch on YouTube: https://t.co/u6xgWPXDKo #PKI #DevSecOps

[Keyfactor Community @KeyfactorComm]

Now that #PQC Readiness is in the spotlight, what about the HSMs? In this #KEYMASTER episode, Sven Rajala and Tomas Gustavsson discuss the current state of hardware security modules with PQC algorithms like LMS, ML-DSA, and ML-KEM.
Watch now: https://t.co/Ned777UwaD

[Keyfactor Community @KeyfactorComm]

When Are You PQC Ready? The journey to #post-quantum cryptography (#PQC) readiness is more than just adopting new algorithms. In this #KEYMASTER episode, Sven Rajala and Tomas Gustavsson explore what it truly means to be #PQC-ready. Watch now: https://t.co/iA6v7HUwQv

[Keyfactor Community @KeyfactorComm]

Introducing Keyfactor for Developers – your all-in-one platform for PKI and signing security.

Build, experiment, and scale – we have all the hands-on access and comprehensive resources to get you started.

Learn more: https://t.co/G73X8jSYxX

[Keyfactor Community @KeyfactorComm]

Bringing Transparency to #SoftwareSupplyChains – In this #KEYMASTER episode, Fredrik Skogman from @GitHub and host Sven Rajala deep dive into #SLSA (Supply-chain Levels for Software Artifacts) and its role in Software Supply Chain #Security. Watch now:
https://t.co/qFmY2GNIQx

[Keyfactor Community @KeyfactorComm]

TUF Love: Securing Software Updates with #TheUpdateFramework.

In this #KEYMASTER session, Fredrik Skogman, specializing in software supply chain security at @GitHub, shares valuable insights on #TUF with Sven Rajala.

Watch now:
https://t.co/u5ShDwGSQ4

[Keyfactor Community @KeyfactorComm]

The Evolving Landscape of SBOMs - In this episode of #KEYMASTER, Olle E Johansson joins Sven Rajala to explore Software Bill of Materials (SBOMs)—a critical yet complex tool for software security. Watch now:
https://t.co/7tLezTCgnK

[Keyfactor Community @KeyfactorComm]

ERCE? Never heard of it? Don’t worry, you are not alone. ERCE is actually the Easy Rest Client for EJBCA, and it just got some nice updates! Join us Live on our next YouTube session: https://t.co/ofatXnzml5

[Keyfactor Community @KeyfactorComm]

Key Archival and Recovery are crucial for PKI, enabling secure key recovery while ensuring compliance. Join Sven & Joey in this #KEYMASTER session—learn more and watch: https://t.co/ORAcVCgI13 #EJBCA

[Keyfactor Community @KeyfactorComm]

Happy Friday! We have released a new version of Bouncy Castle Java featuring updates on PQC, lightweight cryptography, and more. https://t.co/KupL2mbk5h #PQC #BouncyCastle #EncryptLikeItIs2030

[Keyfactor Community @KeyfactorComm]

Fresh KEYMASTER Episode Out Now!
Join Florian Handke and Sven Rajala as they discuss Certificate Management for OPC UA and How the OPC UA Standard Enables Security in Industrial Environments. https://t.co/EWtWQ9V2nr #EJBCA #PKI

[Keyfactor Community @KeyfactorComm]

In this episode of #KEYMASTER, Tomas Gustavsson joins Sven Rajala, to uncover the hidden pitfalls of PKI in service mesh setups and how to overcome them. https://t.co/dvwosX5TS6

[Keyfactor Community @KeyfactorComm]

🎄Happy Holidays! 🎄In 2024, we connected online via videos and forums and IRL at the Stockholm Tech Meetup. Thanks, Tomas and David 👇. Let’s continue the conversation in 2025! This year we’re making a donation to https://t.co/69io4YHWLx #PKI #PQC