I want to implement the SCP (Secure Copy) function in my Java application to copy a file from an SSH server to another computer. My java application must be FIPS compatible and therefore uses the SunPKCS11 provider to interact with the NSS database.
To implement SCP functionality, we can use any of the following SSH libraries for Java:
- Jsch
- vngx-jsch
- Apache MINA SSHD
- Ganymed ssh-2
- sshj
- SSHTools
I have the following questions regarding these SSH libraries:
- Are any of the above libraries certified by FIPS?
- If FIPS is not certified, are these algorithms (encryption, key exchange, MAC, etc.) used FIPS-compatible?
- Are there any other FIPS compatible SSH libraries for Java?
, , , JSch FIPS: