---
schema_version: "1"
id: bbacb4a5af40197a27075e75b5c0201833d5cff5e8e63364cc73939e6585367a
title: Cryptography Module Release Notes for Mule 4
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/release-notes/connector/cryptography-module-release-notes.md
canonical_url: https://docs.mulesoft.com/release-notes/connector/cryptography-module-release-notes
source_site: docs.mulesoft.com
content_type: documentation
content_hash: 13ebdd55d3239b58e57d94b29088ff7cec65b2fdd3eb3367df9d15664cc85013
description: MuleSoft Documentation Site
latest: true
---
---
product: Release Notes
version: master
---

# Cryptography Module Release Notes for Mule 4

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

Cryptography module provides cryptography capabilities to a Mule application.

Support Category:
[Select](https://www.salesforce.com/en-us/wp-content/uploads/sites/4/documents/legal/Agreements/versioning-back-support-policy.pdf)

Guide: [Cryptography Module User Guide](https://docs.mulesoft.com/cryptography-module/latest/)

## 2.2.2

**September 3, 2026**

### What’s New

- This release includes general security fixes.

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Software</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.4 and later</p></td></tr><tr><td><p>OpenJDK</p></td><td><p>8, 11, and 17</p></td></tr></tbody></table>

## 2.2.1

**August 13, 2026**

### What’s New

- This connector version requires Mule runtime 4.6.22 or later if you’re using Mule 4.6.x, or Mule
  runtime 4.9.9 or later if you’re using Mule 4.9.x. If you prefer not to upgrade your Mule runtime,
  use the connector version released immediately after this one.

- The Mule Encryption library is upgraded to 1.9.6.

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Software</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.4 and later</p></td></tr><tr><td><p>OpenJDK</p></td><td><p>8, 11, and 17</p></td></tr></tbody></table>

## 2.2.0

**July 24, 2026**

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Software</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.4 and later</p></td></tr><tr><td><p>OpenJDK</p></td><td><p>8, 11, and 17</p></td></tr></tbody></table>

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><p>PGP <strong>Encrypt</strong>, <strong>Decrypt</strong>, <strong>Sign</strong>, and <strong>Binary to Armored</strong> operations now report the security provider’s actual rejection reason (for example, a FIPS <code>RSA PKCS1.5 encryption disallowed</code> message) instead of a generic error, and a fatal error raised during background processing is no longer suppressed and returned as an empty successful result.</p></td><td><p>W-22503911</p></td></tr><tr><td><p>PGP key fingerprints shown in error messages now retain their leading zeros (for example, <code>05E124136361D538</code> instead of <code>5E124136361D538</code>), matching the configured 16-character key ID.</p></td><td><p>W-22547796</p></td></tr></tbody></table>

## 2.1.3

**July 24, 2026**

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Software</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.4 and later</p></td></tr><tr><td><p>OpenJDK</p></td><td><p>8, 11, and 17</p></td></tr></tbody></table>

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><p>The <strong>XML Decrypt</strong> operation using asymmetric keys no longer fails with a null pointer error when it is the first XML operation to run after a Mule runtime starts.</p></td><td><p>W-22713999</p></td></tr></tbody></table>

## 2.1.2

**May 15, 2026**

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Software</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.4 and later</p></td></tr><tr><td><p>OpenJDK</p></td><td><p>8, 11, and 17</p></td></tr></tbody></table>

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><p>JCE keystores located in absolute filesystem paths now load correctly.</p></td><td><p>W-22213108</p></td></tr><tr><td><p>JCE <strong>Sign</strong> and <strong>Validate</strong> operations now report <code>CRYPTO:SIGNATURE</code> and <code>CRYPTO:VALIDATION</code> errors (instead of <code>MULE:CRITICAL</code>) when the JCE provider rejects an algorithm, such as DSA signing in FIPS mode.</p></td><td><p>W-22502254</p></td></tr></tbody></table>

## 2.1.1

**April 14, 2026**

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Software</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.4 and later</p></td></tr><tr><td><p>OpenJDK</p></td><td><p>8, 11, and 17</p></td></tr></tbody></table>

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><p>Improved memory usage by processing <code>InputStream</code> data in chunks instead of loading entire payloads into memory at once, reducing heap pressure during JCE <strong>Sign</strong>, <strong>Verify</strong>, <strong>Encrypt</strong>, and <strong>Decrypt</strong> operations.</p></td><td><p>W-21312272</p></td></tr><tr><td><p>Improved <code>InputStream</code> handling in PGP <strong>Decrypt</strong> operations using an asynchronous piped stream approach, preventing resource leaks and ensuring proper cleanup on both success and error paths.</p></td><td><p>W-14996199</p></td></tr><tr><td><p>Enhanced resource loading to use a more reliable classpath resource resolution mechanism, improving compatibility across different deployment scenarios.</p></td><td><p>W-21348318</p></td></tr></tbody></table>

## 2.1.0

**January 23, 2026**

### What’s New

Cryptography Module 2.1.0 enhances compatibility with FIPS 140-3 standards and Java 17, providing
more robust validation and improved error handling for secure environments.

- Improved FIPS 140-3 compatibility with Bouncy Castle FIPS security provider v2+.

- Added proactive validation of cryptographic algorithms for PGP operations when running in FIPS
  environments to provide earlier and clearer errors when unsupported algorithms are detected.

- Deprecated the global XMLDSig security provider registration mechanism which is no longer
  supported in Java 17 environments.

- Preserved existing system properties for backward compatibility while marking them as deprecated
  and discouraged for use in FIPS-bound deployments.

For details about migrating existing applications and understanding FIPS-related limitations, see
[Upgrading Cryptography Module](https://docs.mulesoft.com/cryptography-module/latest/cryptography-module-upgrade).

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Software</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.4 and later</p></td></tr><tr><td><p>OpenJDK</p></td><td><p>8, 11, and 17</p></td></tr></tbody></table>

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><p>Enhanced validation and error reporting for PGP operations in FIPS-compliant environments ensure that you receive immediate and clear feedback regarding unsupported configurations. Additionally, global security provider registration issues no longer occur when running in Java 17 environments, which ensures stable cryptographic operations.</p></td><td><p>W-20347586</p></td></tr><tr><td><p>The <code>org.apache.commons:commons-lang3</code> dependency is removed.</p></td><td><p>W-20671542</p></td></tr></tbody></table>

## 2.0.0

**May 28, 2025**

### What’s New

Cryptography Module 2.0.0 brings important updates, including:

- Updating default values for connector operations

- Migrating your PGP Keyring to AES-Encrypted keys when operating in FIPS mode

- Using different key pairs for Sign, Encrypt, and Decrypt operations to enhance security

- Using password-based encryption

- Using BCFKS as the required keystore and truststore type

- Specifying algorithms dynamically

- Registering the XMLDSig Security Provider

- Enabling compatibility for Decrypt or Validate operations without KDF parameters

For details, refer to
[Upgrading Cryptography Module](https://docs.mulesoft.com/cryptography-module/latest/cryptography-module-upgrade).

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Software</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.4 and later</p></td></tr><tr><td><p>OpenJDK</p></td><td><p>8, 11, and 17</p></td></tr></tbody></table>

## 1.3.22

**November 13, 2024**

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Software</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.1.1 and later</p></td></tr><tr><td><p>OpenJDK</p></td><td><p>8, 11, and 17</p></td></tr></tbody></table>

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><p>The <code>org.apache.commons:commons-lang3</code> library is upgraded to version 3.17.0.</p></td><td><p>W-17024694</p></td></tr><tr><td><p>The <code>org.apache.commons:commons-io</code> library is upgraded to version 2.17.0.</p></td><td><p>W-17024694</p></td></tr></tbody></table>

## 1.3.21

**August 15, 2024**

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Software</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.1.1 and later</p></td></tr><tr><td><p>OpenJDK</p></td><td><p>8, 11, and 17</p></td></tr></tbody></table>

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><p>The connector no longer throws the <code>No such provider BC</code> error when running multiple flows in parallel.</p></td><td><p>W-15108894</p></td></tr><tr><td><p>The <code>org.apache.commons:commons-lang3</code> library is upgraded to version 3.16.0.</p></td><td><p>W-15108894</p></td></tr><tr><td><p>The <code>org.mule.sdk:mule-sdk-api</code> library is upgraded to version 0.9.2.</p></td><td><p>W-15108894</p></td></tr></tbody></table>

## 1.3.20

**February 7, 2024**

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Software</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.1.1 and later</p></td></tr><tr><td><p>OpenJDK</p></td><td><p>8, 11, and 17</p></td></tr></tbody></table>

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><p>PGP operations now support large payloads.</p></td><td><p>W-14118536</p></td></tr></tbody></table>

## 1.3.19

**January 19, 2024**

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Software</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.1.1 and later</p></td></tr><tr><td><p>OpenJDK</p></td><td><p>8, 11, and 17</p></td></tr></tbody></table>

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><p>The <strong>PGP Encrypt</strong> operation now works correctly.</p></td><td><p>W-14792113</p></td></tr></tbody></table>

## 1.3.18

**January 11, 2024**

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Software</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.1.1 and later</p></td></tr><tr><td><p>OpenJDK</p></td><td><p>8, 11, and 17</p></td></tr></tbody></table>

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><p>The org.apache.santuario:xmlsec library is upgraded to version 2.3.4 to address reported security vulnerabilities.</p></td><td><p>W-14668416</p></td></tr></tbody></table>

## 1.3.17

**January 9, 2024**

### What’s New

- This connector is now compatible with Java 17.

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Software</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.1.1 and later</p></td></tr><tr><td><p>OpenJDK</p></td><td><p>8, 11, and 17</p></td></tr></tbody></table>

## 1.3.16

**September 20, 2023**

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Software</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.1.1 and later</p></td></tr></tbody></table>

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><p>The <code>Out of memory</code> error no longer occurs for files larger than 300MB on <strong>PGP Encrypt</strong>, <strong>PGP Encrypt and Sign</strong>, <strong>PGP Encrypt Binary</strong>, and <strong>PGP Decrypt</strong> operations.</p></td><td><p>W-13797282</p></td></tr></tbody></table>

## 1.3.15

**September 19, 2023**

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Software</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.1.1 and later</p></td></tr></tbody></table>

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><p>The dependency org.bouncycastle:bcpg-jdk18on:1.74 replaces org.bouncycastle:bcpg-jdk15on:1.70.</p></td><td><p>W-13844863</p></td></tr><tr><td><p>The dependency org.bouncycastle:bcprov-ext-jdk15to18:1.7, which is no longer in use, is removed to fix security vulnerabilities.</p></td><td><p>W-13844863</p></td></tr></tbody></table>

## 1.3.14

**November 16, 2022**

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Software</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.1.1 and later</p></td></tr></tbody></table>

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue Resolution</th><th>ID</th></tr></thead><tbody><tr><td><p>The <strong>Pgp encrypt</strong> operation no longer fails when running in a FIPS environment.</p></td><td><p>W-11900235</p></td></tr></tbody></table>

## 1.3.13

**November 4, 2022**

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Software</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.1.1 and later</p></td></tr></tbody></table>

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue</th><th>ID</th></tr></thead><tbody><tr><td><p>Internal dependencies that fix vulnerability issues are updated.</p></td><td><p>W-12007146</p></td></tr></tbody></table>

## 1.3.12

**September 26, 2022**

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Software</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.1.1 and later</p></td></tr></tbody></table>

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue</th><th>ID</th></tr></thead><tbody><tr><td><p>Upgraded bcprov-jdk15on to version 1.70 and bcprov-ext-jdk15to18 to version 1.71</p></td><td><p>W-11676720</p></td></tr></tbody></table>

## 1.3.11

**August 16, 2022**

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Software</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.1.1 and later</p></td></tr></tbody></table>

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue</th><th>ID</th></tr></thead><tbody><tr><td><p>Security updates applied to internal dependecies.</p></td><td><p>W-11550826</p></td></tr></tbody></table>

## 1.3.10

**March 15, 2022**

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Software</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.1.1 and later</p></td></tr></tbody></table>

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue</th><th>ID</th></tr></thead><tbody><tr><td><p>Security updates applied to internal dependecies.</p></td><td><p>W-10583033</p></td></tr></tbody></table>

## 1.3.9

**December 22, 2021**

### Compatibility

<table><colgroup><col> <col></colgroup><thead><tr><th>Software</th><th>Version</th></tr></thead><tbody><tr><td><p>Mule</p></td><td><p>4.1.1 and later</p></td></tr></tbody></table>

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue</th><th>ID</th></tr></thead><tbody><tr><td><p>Cipher <code>RSA/NONE/OAEPWithSHA1AndMGF1Padding</code> is now supported.</p></td><td><p>CRYPT-22</p></td></tr></tbody></table>

## 1.3.8

**June 10, 2021**

No new features were added in this version.

### Fixed Issues

- Upgraded internal dependencies.

## 1.3.7

**June 1, 2021**

No new features were added in this version.

### Fixed Issues

- Upgraded internal dependencies.

## 1.3.6

**January 21, 2021**

No new features were added in this version.

### Fixed Issues

- Unable to locate a key inside the private keyring when decrypting a file that was encrypted using
  PGP with multiple recipients.

## 1.3.5

**February 28, 2020**

No new features were added in this version.

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue</th><th>Description</th></tr></thead><tbody><tr><td><div><div><p>EE-7206</p></div></div></td><td><div><div><p>The issue that caused JCE decryption operation fails when both random IV and ECB algorithm was selected</p></div></div></td></tr></tbody></table>

## 1.3.4

**February 4, 2020**

No new features were added in this version.

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue</th><th>Description</th></tr></thead><tbody><tr><td><div><div><p>EE-7197</p></div></div></td><td><div><div><p>The issue that caused the inability to create a cipher after deploying the app a second time is fixed.</p></div></div></td></tr></tbody></table>

## 1.3.3

**January 22, 2020**

No new features were added in this version.

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue</th><th>Description</th></tr></thead><tbody><tr><td><div><div><p>EE-7187</p></div></div></td><td><div><div><p>The issue that caused loading secret keys from a keyring that contained both public and secret keys to fail is fixed.</p></div></div></td></tr></tbody></table>

## 1.3.1

**October 1, 2019**

No new features were added in this version.

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue</th><th>Description</th></tr></thead><tbody><tr><td><div><div><p>EE-7024</p></div></div></td><td><div><div><p>XML sign operation honors the <code>elementPath</code> parameter.</p></div></div></td></tr></tbody></table>

## 1.3.0

**September 25, 2019**

### Features

- XML Signatures can be verified against certificates contained in the document.

- It is possible to define an XPath expression to select and verify a signature in an XML document
  that contains multiple signatures.

- JCE encryption and decryption use a random initialization vector (IV).

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue</th><th>Description</th></tr></thead><tbody><tr><td><div><div><p>EE-6975</p></div></div></td><td><div><div><p>Key principal can be recovered from fingerprint.</p></div></div></td></tr></tbody></table>

## 1.2.0

**August 23, 2019**

### Features

- Added support for the ECDSA XML Signing algorithm.

No issues were fixed in this version.

## 1.1.0

**August 20, 2019**

### Features

- Implemented atomic encrypt and sign operation for PGP.

- PGP decryption operation can validate signature if found.

- All PGP encryption operations now include MDC (modification detection code) by default. Although
  this is unlikely to cause any issues, you can use the `disableMDC` parameter to revert to the
  previous behavior if needed.

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue</th><th>Description</th></tr></thead><tbody><tr><td><div><div><p>MULE-17337</p></div></div></td><td><div><div><p>Upgrade Commons Codec to 1.13</p></div></div></td></tr></tbody></table>

## 1.0.1

**May 23, 2019**

### Minimum Mule Version

**Mule 4.1.1**

### Fixed Issues

<table><colgroup><col> <col></colgroup><thead><tr><th>Issue</th><th>Description</th></tr></thead><tbody><tr><td><div><div><p>MULE-16870</p></div></div></td><td><div><div><p>Upgrade BouncyCastle dependency to 1.61.</p></div></div></td></tr><tr><td><div><div><p>MULE-16870</p></div></div></td><td><div><div><p>Upgrade Commons Lang dependency to 3.8.1.</p></div></div></td></tr><tr><td><div><div><p>MULE-16870</p></div></div></td><td><div><div><p>Upgrade Commons Codec dependency to 1.12.</p></div></div></td></tr><tr><td><div><div><p>MULE-16870</p></div></div></td><td><div><div><p>Upgrade XML Sec dependency to 2.1.3.</p></div></div></td></tr></tbody></table>

## 1.0.0

**Mar 19, 2018**

### Minimum Mule Version

**Mule 4.1.0**

## See Also

- [Salesforce Help](https://help.salesforce.com)

- [MuleSoft Services](https://www.mulesoft.com/support-and-services)

- [Known Issues](https://help.salesforce.com/s/issues)