Nimbus JOSE+JWT vs Bouncy Castle

Nimbus JOSE+JWT

JSON Web Token (JWT) implementation for Java with support for signatures (JWS), encryption (JWE) and web keys (JWK). (by Connect2id)

Security

Source Code

Suggest alternative

Edit details

Bouncy Castle

Bouncy Castle Java Distribution (Mirror) (by bcgit)

Security Crypto Java Openpgp

Source Code

bouncycastle.org

Suggest alternative

Edit details

Our great sponsors

WorkOS - The modern identity platform for B2B SaaS

InfluxDB - Power Real-Time Data Analytics at Scale

SaaSHub - Software Alternatives and Reviews

Our great sponsors

Nimbus JOSE+JWT		Bouncy Castle
	Project
-	Mentions	9
40	Stars	2,154
-	Growth	1.9%
0.0	Activity	9.5
about 9 years ago	Latest Commit	5 days ago
	Language	Java
-	License	MIT License

The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

Nimbus JOSE+JWT

Posts with mentions or reviews of Nimbus JOSE+JWT. We have used some of these posts to build our list of alternatives and similar projects.

We haven't tracked posts mentioning Nimbus JOSE+JWT yet.
Tracking mentions began in Dec 2020.

Bouncy Castle

Posts with mentions or reviews of Bouncy Castle. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2024-02-01.

Show HN: filippo.io/mlkem768 – Post-Quantum Cryptography for the Go Ecosystem
3 projects | news.ycombinator.com | 1 Feb 2024

Note that there may be incompatibilities until NIST has published the final revisions. Some specifications are on Round 3 kyber, others are on FIPS 203.
This one will interoperate with Bouncy Castle as we both use FIPS 203 draft, but won't interoperate with OQS that is still on the Round 3 submission.
See also: https://github.com/bcgit/bc-java/issues/1578
Java implementation of a quantum computing resistant cryptographic algorithm
4 projects | news.ycombinator.com | 23 Oct 2023

The readme mentions a dependency on Bouncy Castle - note that BC already contains several Java-based PQC signature schemes, see https://doc.primekey.com/bouncycastle/interoperability#Inter... and https://github.com/bcgit/bc-java
Help with BouncyCastle OpenPGP (Java)
2 projects | /r/openpgp | 23 Dec 2022

The best official resources are probably the example classes in the bouncycastle repository. They give you a rough idea for how to use the API, although they are a bit minimal unfortunately. You can probably apply a lot of domain knowledge (what algorithms are good/bad) from openpgpjs too, although you'd have to find out how the respective method calls are called on the BC side.
Bouncy Castle VS pgpainless - a user suggested alternative
2 projects | 12 Aug 2022
Any good open-source Java encryption API
1 project | /r/opensource | 13 Jul 2022
How can i use the sha256sum tool of my linux-based OS to encript strings?
1 project | /r/learnjava | 15 Apr 2022

Why? Bouncy Castle has all you need.
Non Spring users what are you using ??
7 projects | /r/java | 2 Nov 2021

Cryptography? Use Java Cryptography Extensions and Java Secure Socket Extensions with Bouncy Castle
Java - Bouncy castle - OpenPGP
2 projects | /r/crypto | 19 May 2021
Dozens sue Amazon's Ring after camera hack leads to threats and racial slurs
1 project | /r/technology | 23 Dec 2020

Recently there was a constant time enhancement in bouncy castle that added a comparison using indexOf instead of charAt. Fairly easy to overlook, although glaring in hindsight, if there are no negative tests covering the functionality.