--- schema_version: "1" id: 023b3b7ee413b678d44c444a85f1aa4fd8eb14e07848cd12acbf963c10c6dc17 title: Cryptography Module Release Notes for Mule 4 collection: mulesoft version: current locale: ja-jp portal_url: https://docs.salesforce.com/mulesoft/current/ja-jp/release-notes/connector/cryptography-module-release-notes.md canonical_url: https://docs.mulesoft.com/jp/release-notes/connector/cryptography-module-release-notes source_site: docs.mulesoft.com content_type: documentation content_hash: 7b0009c1cdd9ab037e7d47cf1452bcfcc9d62110add983da50ab36f9de4bc4b8 description: MuleSoft Documentation Site latest: true --- # Cryptography Module Release Notes for Mule 4 Cryptography module provides cryptography capabilities to a Mule application. Support Category: [Select](https://www.salesforce.com/en-us/wp-content/uploads/sites/4/documents/legal/Agreements/versioning-back-support-policy.pdf) Guide: [Cryptography Module User Guide](https://docs.mulesoft.com/cryptography-module/latest/) ## [](#2-2-2)2.2.2 **September 3, 2026** ### What’s New - This release includes general security fixes. ### Compatibility
Software Version

Mule

4.4 and later

OpenJDK

8, 11, and 17
## [](#2-2-1)2.2.1 **August 13, 2026** ### What’s New - This connector version requires Mule runtime 4.6.22 or later if you’re using Mule 4.6.x, or Mule runtime 4.9.9 or later if you’re using Mule 4.9.x. If you prefer not to upgrade your Mule runtime, use the connector version released immediately after this one. - The Mule Encryption library is upgraded to 1.9.6. ### Compatibility
Software Version

Mule

4.4 and later

OpenJDK

8, 11, and 17
## [](#2-2-0)2.2.0 **July 24, 2026** ### Compatibility
Software Version

Mule

4.4 and later

OpenJDK

8, 11, and 17
### Fixed Issues
Issue Resolution ID

PGP Encrypt, Decrypt, Sign, and Binary to Armored operations now report the security provider’s actual rejection reason (for example, a FIPS RSA PKCS1.5 encryption disallowed message) instead of a generic error, and a fatal error raised during background processing is no longer suppressed and returned as an empty successful result.

W-22503911

PGP key fingerprints shown in error messages now retain their leading zeros (for example, 05E124136361D538 instead of 5E124136361D538), matching the configured 16-character key ID.

W-22547796
## [](#2-1-3)2.1.3 **July 24, 2026** ### Compatibility
Software Version

Mule

4.4 and later

OpenJDK

8, 11, and 17
### Fixed Issues
Issue Resolution ID

The XML Decrypt operation using asymmetric keys no longer fails with a null pointer error when it is the first XML operation to run after a Mule runtime starts.

W-22713999
## [](#2-1-2)2.1.2 **May 15, 2026** ### Compatibility
Software Version

Mule

4.4 and later

OpenJDK

8, 11, and 17
### Fixed Issues
Issue Resolution ID

JCE keystores located in absolute filesystem paths now load correctly.

W-22213108

JCE Sign and Validate operations now report CRYPTO:SIGNATURE and CRYPTO:VALIDATION errors (instead of MULE:CRITICAL) when the JCE provider rejects an algorithm, such as DSA signing in FIPS mode.

W-22502254
## [](#2-1-1)2.1.1 **April 14, 2026** ### Compatibility
Software Version

Mule

4.4 and later

OpenJDK

8, 11, and 17
### Fixed Issues
Issue Resolution ID

Improved memory usage by processing InputStream data in chunks instead of loading entire payloads into memory at once, reducing heap pressure during JCE Sign, Verify, Encrypt, and Decrypt operations.

W-21312272

Improved InputStream handling in PGP Decrypt operations using an asynchronous piped stream approach, preventing resource leaks and ensuring proper cleanup on both success and error paths.

W-14996199

Enhanced resource loading to use a more reliable classpath resource resolution mechanism, improving compatibility across different deployment scenarios.

W-21348318
## [](#2-1-0)2.1.0 **January 23, 2026** ### What’s New Cryptography Module 2.1.0 enhances compatibility with FIPS 140-3 standards and Java 17, providing more robust validation and improved error handling for secure environments. - Improved FIPS 140-3 compatibility with Bouncy Castle FIPS security provider v2+. - Added proactive validation of cryptographic algorithms for PGP operations when running in FIPS environments to provide earlier and clearer errors when unsupported algorithms are detected. - Deprecated the global XMLDSig security provider registration mechanism which is no longer supported in Java 17 environments. - Preserved existing system properties for backward compatibility while marking them as deprecated and discouraged for use in FIPS-bound deployments. For details about migrating existing applications and understanding FIPS-related limitations, see [Upgrading Cryptography Module](https://docs.mulesoft.com/cryptography-module/latest/cryptography-module-upgrade). ### Compatibility
Software Version

Mule

4.4 and later

OpenJDK

8, 11, and 17
### Fixed Issues
Issue Resolution ID

Enhanced validation and error reporting for PGP operations in FIPS-compliant environments ensure that you receive immediate and clear feedback regarding unsupported configurations. Additionally, global security provider registration issues no longer occur when running in Java 17 environments, which ensures stable cryptographic operations.

W-20347586

The org.apache.commons:commons-lang3 dependency is removed.

W-20671542
## [](#2-0-0)2.0.0 **May 28, 2025** ### What’s New Cryptography Module 2.0.0 brings important updates, including: - Updating default values for connector operations - Migrating your PGP Keyring to AES-Encrypted keys when operating in FIPS mode - Using different key pairs for Sign, Encrypt, and Decrypt operations to enhance security - Using password-based encryption - Using BCFKS as the required keystore and truststore type - Specifying algorithms dynamically - Registering the XMLDSig Security Provider - Enabling compatibility for Decrypt or Validate operations without KDF parameters For details, refer to [Upgrading Cryptography Module](https://docs.mulesoft.com/cryptography-module/latest/cryptography-module-upgrade). ### Compatibility
Software Version

Mule

4.4 and later

OpenJDK

8, 11, and 17
## [](#1-3-22)1.3.22 **November 13, 2024** ### Compatibility
Software Version

Mule

4.1.1 and later

OpenJDK

8, 11, and 17
### Fixed Issues
Issue Resolution ID

The org.apache.commons:commons-lang3 library is upgraded to version 3.17.0.

W-17024694

The org.apache.commons:commons-io library is upgraded to version 2.17.0.

W-17024694
## [](#1-3-21)1.3.21 **August 15, 2024** ### Compatibility
Software Version

Mule

4.1.1 and later

OpenJDK

8, 11, and 17
### Fixed Issues
Issue Resolution ID

The connector no longer throws the No such provider BC error when running multiple flows in parallel.

W-15108894

The org.apache.commons:commons-lang3 library is upgraded to version 3.16.0.

W-15108894

The org.mule.sdk:mule-sdk-api library is upgraded to version 0.9.2.

W-15108894
## [](#1-3-20)1.3.20 **February 7, 2024** ### Compatibility
Software Version

Mule

4.1.1 and later

OpenJDK

8, 11, and 17
### Fixed Issues
Issue Resolution ID

PGP operations now support large payloads.

W-14118536
## [](#1-3-19)1.3.19 **January 19, 2024** ### Compatibility
Software Version

Mule

4.1.1 and later

OpenJDK

8, 11, and 17
### Fixed Issues
Issue Resolution ID

The PGP Encrypt operation now works correctly.

W-14792113
## [](#1-3-18)1.3.18 **January 11, 2024** ### Compatibility
Software Version

Mule

4.1.1 and later

OpenJDK

8, 11, and 17
### Fixed Issues
Issue Resolution ID

The org.apache.santuario:xmlsec library is upgraded to version 2.3.4 to address reported security vulnerabilities.

W-14668416
## [](#1-3-17)1.3.17 **January 9, 2024** ### What’s New - This connector is now compatible with Java 17. ### Compatibility
Software Version

Mule

4.1.1 and later

OpenJDK

8, 11, and 17
## [](#1-3-16)1.3.16 **September 20, 2023** ### Compatibility
Software Version

Mule

4.1.1 and later
### Fixed Issues
Issue Resolution ID

The Out of memory error no longer occurs for files larger than 300MB on PGP Encrypt, PGP Encrypt and Sign, PGP Encrypt Binary, and PGP Decrypt operations.

W-13797282
## [](#1-3-15)1.3.15 **September 19, 2023** ### Compatibility
Software Version

Mule

4.1.1 and later
### Fixed Issues
Issue Resolution ID

The dependency org.bouncycastle:bcpg-jdk18on:1.74 replaces org.bouncycastle:bcpg-jdk15on:1.70.

W-13844863

The dependency org.bouncycastle:bcprov-ext-jdk15to18:1.7, which is no longer in use, is removed to fix security vulnerabilities.

W-13844863
## [](#1-3-14)1.3.14 **November 16, 2022** ### Compatibility
Software Version

Mule

4.1.1 and later
### Fixed Issues
Issue Resolution ID

The Pgp encrypt operation no longer fails when running in a FIPS environment.

W-11900235
## [](#1-3-13)1.3.13 **November 4, 2022** ### Compatibility
Software Version

Mule

4.1.1 and later
### Fixed Issues
Issue ID

Internal dependencies that fix vulnerability issues are updated.

W-12007146
## [](#1-3-12)1.3.12 **September 26, 2022** ### Compatibility
Software Version

Mule

4.1.1 and later
### Fixed Issues
Issue ID

Upgraded bcprov-jdk15on to version 1.70 and bcprov-ext-jdk15to18 to version 1.71

W-11676720
## [](#1-3-11)1.3.11 **August 16, 2022** ### Compatibility
Software Version

Mule

4.1.1 and later
### Fixed Issues
Issue ID

Security updates applied to internal dependecies.

W-11550826
## [](#1-3-10)1.3.10 **March 15, 2022** ### Compatibility
Software Version

Mule

4.1.1 and later
### Fixed Issues
Issue ID

Security updates applied to internal dependecies.

W-10583033
## [](#1-3-9)1.3.9 **December 22, 2021** ### Compatibility
Software Version

Mule

4.1.1 and later
### Fixed Issues
Issue ID

Cipher RSA/NONE/OAEPWithSHA1AndMGF1Padding is now supported.

CRYPT-22
## [](#1-3-8)1.3.8 **June 10, 2021** No new features were added in this version. ### [](#fixed-issues-19)Fixed Issues - Upgraded internal dependencies. ## [](#1-3-7)1.3.7 **June 1, 2021** No new features were added in this version. ### [](#fixed-issues-20)Fixed Issues - Upgraded internal dependencies. ## [](#1-3-6)1.3.6 **January 21, 2021** No new features were added in this version. ### [](#fixed-issues-21)Fixed Issues - Unable to locate a key inside the private keyring when decrypting a file that was encrypted using PGP with multiple recipients. ## [](#1-3-5)1.3.5 **February 28, 2020** No new features were added in this version. ### [](#fixed-issues-22)Fixed Issues
Issue Description

EE-7206

The issue that caused JCE decryption operation fails when both random IV and ECB algorithm was selected
## [](#1-3-4)1.3.4 **February 4, 2020** No new features were added in this version. ### [](#fixed-issues-23)Fixed Issues
Issue Description

EE-7197

The issue that caused the inability to create a cipher after deploying the app a second time is fixed.
## [](#1-3-3)1.3.3 **January 22, 2020** No new features were added in this version. ### [](#fixed-issues-24)Fixed Issues
Issue Description

EE-7187

The issue that caused loading secret keys from a keyring that contained both public and secret keys to fail is fixed.
## [](#1-3-1)1.3.1 **October 1, 2019** No new features were added in this version. ### [](#fixed-issues-25)Fixed Issues
Issue Description

EE-7024

XML sign operation honors the elementPath parameter.
## [](#1-3-0)1.3.0 **September 25, 2019** ### [](#features)Features - XML Signatures can be verified against certificates contained in the document. - It is possible to define an XPath expression to select and verify a signature in an XML document that contains multiple signatures. - JCE encryption and decryption use a random initialization vector (IV). ### [](#fixed-issues-26)Fixed Issues
Issue Description

EE-6975

Key principal can be recovered from fingerprint.
## [](#1-2-0)1.2.0 **August 23, 2019** ### [](#features-2)Features - Added support for the ECDSA XML Signing algorithm. No issues were fixed in this version. ## [](#1-1-0)1.1.0 **August 20, 2019** ### [](#features-3)Features - Implemented atomic encrypt and sign operation for PGP. - PGP decryption operation can validate signature if found. - All PGP encryption operations now include MDC (modification detection code) by default. Although this is unlikely to cause any issues, you can use the `disableMDC` parameter to revert to the previous behavior if needed. ### [](#fixed-issues-27)Fixed Issues
Issue Description

MULE-17337

Upgrade Commons Codec to 1.13
## [](#1-0-1)1.0.1 **May 23, 2019** ### [](#minimum-mule-version)Minimum Mule Version **Mule 4.1.1** ### [](#fixed-issues-28)Fixed Issues
Issue Description

MULE-16870

Upgrade BouncyCastle dependency to 1.61.

MULE-16870

Upgrade Commons Lang dependency to 3.8.1.

MULE-16870

Upgrade Commons Codec dependency to 1.12.

MULE-16870

Upgrade XML Sec dependency to 2.1.3.
## [](#1-0-0)1.0.0 **Mar 19, 2018** ### [](#minimum-mule-version-2)Minimum Mule Version **Mule 4.1.0** ## [](#see-also)See Also - [Salesforce Help](https://help.salesforce.com) - [MuleSoft Services](https://www.mulesoft.com/support-and-services) - [Known Issues](https://help.salesforce.com/s/issues)