Question: is bcrypt fips 140-2 compliant?
Answer: While bcrypt is a highly adopted and well regarded choice, it's not FIPS 140-2 approved, and as such, cannot be used in a FIPS 140-2 JVM. ... The default TLS configuration of Elasticsearch is compliant with FIPS 140-2, as only TLSv1.