AWS CloudHSM JCE5.18.1

Java applications can route cryptographic operations to an AWS CloudHSM hardware security module through the AWS CloudHSM JCE provider. Compliant with the Java Cryptography Architecture, it exposes HSM-backed cryptographic services through standard Java security interfaces. Developers can use it in services that need Java-based key generation, signing, verification, and other cryptographic operations performed by CloudHSM. Amazon Web Services publishes the provider for applications built around the JCA and JCE APIs.

Version 5.18.1 adds ML-DSA key generation, signing, and verification to the provider. It also introduces EdDSA support for the Ed25519 and Ed25519ph algorithms. The release corrects key-reference filtering so session keys can be selected, while improving throttling handling and automatic retry behavior. The Client SDK is supported for production environments and provides the same components and support level as Client SDK 3.

This release adds Ubuntu 26.04 LTS support to the Client SDK, while the listed platform for AWS CloudHSM JCE is Windows on x64 architecture. Using the provider requires an AWS CloudHSM HSM and a Java application that works with the Java Cryptography Architecture. AWS releases SDK updates for new capabilities plus security, stability, and performance fixes. Beginning with SDK 5.17, support covers up to three previous minor SDK versions and one year from an SDK version’s release date.