diff --git a/CHANGELOG.md b/CHANGELOG.md
index b5b3742af80ea..de8a041da3b73 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -48,6 +48,9 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 - Bump `org.eclipse.jgit` from 6.5.0 to 6.7.0 ([#10147](https://github.com/opensearch-project/OpenSearch/pull/10147))
 - Bump OpenTelemetry from 1.30.1 to 1.31.0 ([#10617](https://github.com/opensearch-project/OpenSearch/pull/10617))
 - Bump OpenTelemetry from 1.31.0 to 1.32.0 and OpenTelemetry Semconv from 1.21.0-alpha to 1.23.1-alpha ([#11305](https://github.com/opensearch-project/OpenSearch/pull/11305))
+- Bump `org.bouncycastle:bcprov-jdk15to18` to `org.bouncycastle:bcprov-jdk18on` version 1.77 ([#12317](https://github.com/opensearch-project/OpenSearch/pull/12317))
+- Bump `org.bouncycastle:bcmail-jdk15to18` to `org.bouncycastle:bcmail-jdk18on` version 1.77 ([#12317](https://github.com/opensearch-project/OpenSearch/pull/12317))
+- Bump `org.bouncycastle:bcpkix-jdk15to18` to `org.bouncycastle:bcpkix-jdk18on` version 1.77 ([#12317](https://github.com/opensearch-project/OpenSearch/pull/12317))
 
 ### Changed
 - [CCR] Add getHistoryOperationsFromTranslog method to fetch the history snapshot from translogs ([#3948](https://github.com/opensearch-project/OpenSearch/pull/3948))
diff --git a/buildSrc/version.properties b/buildSrc/version.properties
index 95ae1ddb578a1..c7af58ab6b0b9 100644
--- a/buildSrc/version.properties
+++ b/buildSrc/version.properties
@@ -50,7 +50,7 @@ reactivestreams   = 1.0.4
 # when updating this version, you need to ensure compatibility with:
 #  - plugins/ingest-attachment (transitive dependency, check the upstream POM)
 #  - distribution/tools/plugin-cli
-bouncycastle=1.76
+bouncycastle=1.77
 # test dependencies
 randomizedrunner  = 2.7.1
 junit             = 4.13.2
diff --git a/plugins/identity-shiro/build.gradle b/plugins/identity-shiro/build.gradle
index 1548780aaa566..222443efcb214 100644
--- a/plugins/identity-shiro/build.gradle
+++ b/plugins/identity-shiro/build.gradle
@@ -28,7 +28,7 @@ dependencies {
 
   implementation 'org.passay:passay:1.6.3'
 
-  implementation "org.bouncycastle:bcprov-jdk15to18:${versions.bouncycastle}"
+  implementation "org.bouncycastle:bcprov-jdk18on:${versions.bouncycastle}"
 
   testImplementation project(path: ':modules:transport-netty4') // for http
   testImplementation project(path: ':plugins:transport-nio') // for http
diff --git a/plugins/identity-shiro/licenses/bcprov-jdk15to18-1.76.jar.sha1 b/plugins/identity-shiro/licenses/bcprov-jdk15to18-1.76.jar.sha1
deleted file mode 100644
index 2e96c404bef98..0000000000000
--- a/plugins/identity-shiro/licenses/bcprov-jdk15to18-1.76.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-0cb53f10290a634808555bc4b34328fdab1001f2
\ No newline at end of file
diff --git a/plugins/identity-shiro/licenses/bcprov-jdk18on-1.77.jar.sha1 b/plugins/identity-shiro/licenses/bcprov-jdk18on-1.77.jar.sha1
new file mode 100644
index 0000000000000..3e780df9559a9
--- /dev/null
+++ b/plugins/identity-shiro/licenses/bcprov-jdk18on-1.77.jar.sha1
@@ -0,0 +1 @@
+2cc971b6c20949c1ff98d1a4bc741ee848a09523
\ No newline at end of file
diff --git a/plugins/identity-shiro/licenses/bcprov-jdk15to18-LICENSE.txt b/plugins/identity-shiro/licenses/bcprov-jdk18on-LICENSE.txt
similarity index 100%
rename from plugins/identity-shiro/licenses/bcprov-jdk15to18-LICENSE.txt
rename to plugins/identity-shiro/licenses/bcprov-jdk18on-LICENSE.txt
diff --git a/plugins/identity-shiro/licenses/bcprov-jdk15to18-NOTICE.txt b/plugins/identity-shiro/licenses/bcprov-jdk18on-NOTICE.txt
similarity index 100%
rename from plugins/identity-shiro/licenses/bcprov-jdk15to18-NOTICE.txt
rename to plugins/identity-shiro/licenses/bcprov-jdk18on-NOTICE.txt
diff --git a/plugins/ingest-attachment/build.gradle b/plugins/ingest-attachment/build.gradle
index 22db73ad86796..6da34c4c9caf2 100644
--- a/plugins/ingest-attachment/build.gradle
+++ b/plugins/ingest-attachment/build.gradle
@@ -71,9 +71,9 @@ dependencies {
   api "org.apache.pdfbox:fontbox:${versions.pdfbox}"
   api "org.apache.pdfbox:jempbox:1.8.17"
   api "commons-logging:commons-logging:${versions.commonslogging}"
-  api "org.bouncycastle:bcmail-jdk15to18:${versions.bouncycastle}"
-  api "org.bouncycastle:bcprov-jdk15to18:${versions.bouncycastle}"
-  api "org.bouncycastle:bcpkix-jdk15to18:${versions.bouncycastle}"
+  api "org.bouncycastle:bcmail-jdk18on:${versions.bouncycastle}"
+  api "org.bouncycastle:bcprov-jdk18on:${versions.bouncycastle}"
+  api "org.bouncycastle:bcpkix-jdk18on:${versions.bouncycastle}"
   // OpenOffice
   api "org.apache.poi:poi-ooxml:${versions.poi}"
   api "org.apache.poi:poi:${versions.poi}"
diff --git a/plugins/ingest-attachment/licenses/bcmail-jdk15to18-1.76.jar.sha1 b/plugins/ingest-attachment/licenses/bcmail-jdk15to18-1.76.jar.sha1
deleted file mode 100644
index 46010d64015ad..0000000000000
--- a/plugins/ingest-attachment/licenses/bcmail-jdk15to18-1.76.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-23d8bcad6b57912e4633ca9955926ffcdf3c5c71
\ No newline at end of file
diff --git a/plugins/ingest-attachment/licenses/bcmail-jdk18on-1.77.jar.sha1 b/plugins/ingest-attachment/licenses/bcmail-jdk18on-1.77.jar.sha1
new file mode 100644
index 0000000000000..f71659316b8cd
--- /dev/null
+++ b/plugins/ingest-attachment/licenses/bcmail-jdk18on-1.77.jar.sha1
@@ -0,0 +1 @@
+f2bb8aa55dc901ee8b8aae7d1007c03592d65e03
\ No newline at end of file
diff --git a/plugins/ingest-attachment/licenses/bcmail-jdk15to18-LICENSE.txt b/plugins/ingest-attachment/licenses/bcmail-jdk18on-LICENSE.txt
similarity index 100%
rename from plugins/ingest-attachment/licenses/bcmail-jdk15to18-LICENSE.txt
rename to plugins/ingest-attachment/licenses/bcmail-jdk18on-LICENSE.txt
diff --git a/plugins/ingest-attachment/licenses/bcmail-jdk15to18-NOTICE.txt b/plugins/ingest-attachment/licenses/bcmail-jdk18on-NOTICE.txt
similarity index 100%
rename from plugins/ingest-attachment/licenses/bcmail-jdk15to18-NOTICE.txt
rename to plugins/ingest-attachment/licenses/bcmail-jdk18on-NOTICE.txt
diff --git a/plugins/ingest-attachment/licenses/bcpkix-jdk15to18-1.76.jar.sha1 b/plugins/ingest-attachment/licenses/bcpkix-jdk15to18-1.76.jar.sha1
deleted file mode 100644
index a843d972ac681..0000000000000
--- a/plugins/ingest-attachment/licenses/bcpkix-jdk15to18-1.76.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-3ee440dfa1c557c1cc0c46b5dadf5ef3896ccebb
\ No newline at end of file
diff --git a/plugins/ingest-attachment/licenses/bcpkix-jdk18on-1.77.jar.sha1 b/plugins/ingest-attachment/licenses/bcpkix-jdk18on-1.77.jar.sha1
new file mode 100644
index 0000000000000..05a8b2d5729bd
--- /dev/null
+++ b/plugins/ingest-attachment/licenses/bcpkix-jdk18on-1.77.jar.sha1
@@ -0,0 +1 @@
+ed953791ba0229747dd0fd9911e3d76a462acfd3
\ No newline at end of file
diff --git a/plugins/ingest-attachment/licenses/bcpkix-jdk15to18-LICENSE.txt b/plugins/ingest-attachment/licenses/bcpkix-jdk18on-LICENSE.txt
similarity index 100%
rename from plugins/ingest-attachment/licenses/bcpkix-jdk15to18-LICENSE.txt
rename to plugins/ingest-attachment/licenses/bcpkix-jdk18on-LICENSE.txt
diff --git a/plugins/ingest-attachment/licenses/bcpkix-jdk15to18-NOTICE.txt b/plugins/ingest-attachment/licenses/bcpkix-jdk18on-NOTICE.txt
similarity index 100%
rename from plugins/ingest-attachment/licenses/bcpkix-jdk15to18-NOTICE.txt
rename to plugins/ingest-attachment/licenses/bcpkix-jdk18on-NOTICE.txt
diff --git a/plugins/ingest-attachment/licenses/bcprov-jdk15to18-1.76.jar.sha1 b/plugins/ingest-attachment/licenses/bcprov-jdk15to18-1.76.jar.sha1
deleted file mode 100644
index 2e96c404bef98..0000000000000
--- a/plugins/ingest-attachment/licenses/bcprov-jdk15to18-1.76.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-0cb53f10290a634808555bc4b34328fdab1001f2
\ No newline at end of file
diff --git a/plugins/ingest-attachment/licenses/bcprov-jdk18on-1.77.jar.sha1 b/plugins/ingest-attachment/licenses/bcprov-jdk18on-1.77.jar.sha1
new file mode 100644
index 0000000000000..3e780df9559a9
--- /dev/null
+++ b/plugins/ingest-attachment/licenses/bcprov-jdk18on-1.77.jar.sha1
@@ -0,0 +1 @@
+2cc971b6c20949c1ff98d1a4bc741ee848a09523
\ No newline at end of file
diff --git a/plugins/ingest-attachment/licenses/bcprov-jdk15to18-LICENSE.txt b/plugins/ingest-attachment/licenses/bcprov-jdk18on-LICENSE.txt
similarity index 100%
rename from plugins/ingest-attachment/licenses/bcprov-jdk15to18-LICENSE.txt
rename to plugins/ingest-attachment/licenses/bcprov-jdk18on-LICENSE.txt
diff --git a/plugins/ingest-attachment/licenses/bcprov-jdk15to18-NOTICE.txt b/plugins/ingest-attachment/licenses/bcprov-jdk18on-NOTICE.txt
similarity index 100%
rename from plugins/ingest-attachment/licenses/bcprov-jdk15to18-NOTICE.txt
rename to plugins/ingest-attachment/licenses/bcprov-jdk18on-NOTICE.txt