Reference Guide

2 Preface

RSA BSAFE Cert-J 6.2.4 Security Policy

Preface

This document is a non-proprietary security policy for the Cert-J cryptographic toolkit

from RSA.

This security policy describes how Cert-J uses the Application Program Interfaces

(APIs) of the Crypto-J FIPS 140-2 Cryptographic Module, RSA BSAFE Crypto-J

JSAFE and JCE Software Module (Crypto-J JSAFE and JCE Software Module). For

more information about the Cryptographic Module, see the Crypto-J FIPS 140-2

validation security policy Level 1 and Level 2 documents, RSA BSAFE Crypto-J

JSAFE and JCE Software Module Security Policy documents issued with this release.

Cert-J software is the RSA certificate-handling software development kit for creating

Java applications that integrate into a public key infrastructure (PKI). Based on open

standards and thoroughly tested for multi-vendor interoperability, Cert-J software

provides in one package all the certificate processing and cryptographic software that

developers need for building PKI-enabled applications.

FIPS 140-2 (Federal Information Processing Standards Publication 140-2 - Security

Requirements for Cryptographic Modules) details the U.S. Government requirements

for cryptographic modules. More information about the FIPS 140-2 standard and

validation program is available on the NIST website.

References

This document deals only with operations and capabilities of the Crypto-J JSAFE and

JCE Software Module and how Cert-J uses this module in terms of a FIPS 140-2

Cryptographic Module security policy. More information on Cert-J, the Crypto-J

JSAFE and JCE Software Module, and the entire RSA BSAFE product line is

available at:

• RSA Security Solutions, for Information on the full line of RSA products and

services

• RSA Link > RSA BSAFE for product overviews, technical information, and

answers to sales-related questions.

Terminology

In this document, the term Cryptographic Module denotes the Crypto-J JSAFE and

JCE Software Module. The Cryptographic Module is also referred to as:

• The Java Crypto Module (JCM)

• The module.