Reference Guide

2 Preface
RSA BSAFE SSL-J 6.2.6 Security Policy
Preface
This document is a non-proprietary security policy for SSL-J security software, from
RSA.
This security policy describes how SSL-J uses the Application Program Interfaces
(APIs) of the Crypto-J FIPS 140-2 Cryptographic Module, RSA BSAFE Crypto-J
JSAFE and JCE Software Module 6.2.5 (Crypto-J JSAFE and JCE Software Module).
For more information about the Cryptographic Module, see the RSA BSAFE Crypto-J
JSAFE and JCE Software Module Security Policy documents. issued with this release.
SSL-J is a Java™ software development toolkit for building Transport Layer Security
(TLS) into enterprise to enterprise and commercial Internet applications.
FIPS 140-2 (Federal Information Processing Standards Publication 140-2 - Security
Requirements for Cryptographic Modules) details the U.S. Government requirements
for cryptographic modules. More information about the FIPS 140-2 standard and
validation program is available on the NIST website.
References
This document deals only with operations and capabilities of the Cryptographic
Module and use of this module within SSL-J in terms of a FIPS 140-2 Cryptographic
Module security policy. For more information about SSL-J, the Crypto-J JSAFE and
JCE Software Module, and the entire RSA BSAFE product line, see:
• RSA Security Solutions, for Information on the full line of RSA products and
services
• RSA Link > RSA BSAFE for product overviews, technical information, and
answers to sales-related questions.
Terminology
In this document, the term Cryptographic Module denotes the Crypto-J JSAFE and
JCE Software Module. The Cryptographic Module is also referred to as:
• The Java Crypto Module (JCM)
• The module.