Skip to content

feat(sdk): DSPX-3309 add hybrid post-quantum key wrapping for KAS (X-Wing, ECDH+ML-KEM) #368

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
sujankota wants to merge 7 commits into
base: main
Choose a base branch
from

gate sdk-pqc-bc runtime dep behind non-fips profile

b3051fc
Select commit
Loading
Failed to load commit list.
Open

feat(sdk): DSPX-3309 add hybrid post-quantum key wrapping for KAS (X-Wing, ECDH+ML-KEM) #368

gate sdk-pqc-bc runtime dep behind non-fips profile
b3051fc
Select commit
Loading
Failed to load commit list.
SonarQubeCloud / SonarCloud Code Analysis failed Jun 5, 2026 in 39s

Quality Gate failed

Failed conditions
D Reliability Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

Annotations

Check warning on line 33 in sdk/src/main/java/io/opentdf/platform/sdk/spi/KemProviders.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use a thread-safe type; adding "volatile" is not enough to make this field thread-safe. 

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ6X9YVt9HIWFEaVVH5k&open=AZ6X9YVt9HIWFEaVVH5k&pullRequest=368

Check warning on line 349 in sdk-pqc-bc/src/main/java/io/opentdf/platform/sdk/pqc/bc/HybridNISTAlgorithm.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Rename this local variable to match the regular expression '^[a-z][a-zA-Z0-9]*$'. 

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ6X9YYV9HIWFEaVVH5m&open=AZ6X9YYV9HIWFEaVVH5m&pullRequest=368

Check failure on line 183 in sdk-pqc-bc/src/main/java/io/opentdf/platform/sdk/pqc/bc/HybridNISTAlgorithm.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Save and re-use this "Random". 

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ6X9YYW9HIWFEaVVH5t&open=AZ6X9YYW9HIWFEaVVH5t&pullRequest=368

Check failure on line 20 in sdk/src/main/java/io/opentdf/platform/sdk/KeyType.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Rename this constant name to match the regular expression '^[A-Z][A-Z0-9]*(_[A-Z0-9]+)*$'. 

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ48jBwiBSDa9FlK_o_2&open=AZ48jBwiBSDa9FlK_o_2&pullRequest=368

Check warning on line 364 in sdk-pqc-bc/src/main/java/io/opentdf/platform/sdk/pqc/bc/HybridNISTAlgorithm.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Rename this local variable to match the regular expression '^[a-z][a-zA-Z0-9]*$'. 

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ6X9YYW9HIWFEaVVH5o&open=AZ6X9YYW9HIWFEaVVH5o&pullRequest=368

Check failure on line 132 in sdk-pqc-bc/src/main/java/io/opentdf/platform/sdk/pqc/bc/HybridNISTAlgorithm.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Save and re-use this "Random". 

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ6X9YYW9HIWFEaVVH5r&open=AZ6X9YYW9HIWFEaVVH5r&pullRequest=368

Check warning on line 365 in sdk-pqc-bc/src/main/java/io/opentdf/platform/sdk/pqc/bc/HybridNISTAlgorithm.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Declare "y1" on a separate line. 

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ6X9YYW9HIWFEaVVH5u&open=AZ6X9YYW9HIWFEaVVH5u&pullRequest=368

Check failure on line 56 in sdk-pqc-bc/src/test/java/io/opentdf/platform/sdk/TDFHybridTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Add a nested comment explaining why this method is empty, throw an UnsupportedOperationException or complete the implementation. 

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ48jBwrBSDa9FlK_o_3&open=AZ48jBwrBSDa9FlK_o_3&pullRequest=368

Check failure on line 121 in sdk-pqc-bc/src/test/java/io/opentdf/platform/sdk/TDFHybridTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Add a nested comment explaining why this method is empty, throw an UnsupportedOperationException or complete the implementation. 

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ48jBwrBSDa9FlK_o_4&open=AZ48jBwrBSDa9FlK_o_4&pullRequest=368

Check warning on line 75 in sdk/src/main/java/io/opentdf/platform/sdk/spi/KemProviders.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Convert this Map to an EnumMap. 

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ6X9YVt9HIWFEaVVH5j&open=AZ6X9YVt9HIWFEaVVH5j&pullRequest=368

Check warning on line 366 in sdk-pqc-bc/src/main/java/io/opentdf/platform/sdk/pqc/bc/HybridNISTAlgorithm.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Declare "y2" on a separate line. 

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ6X9YYW9HIWFEaVVH5v&open=AZ6X9YYW9HIWFEaVVH5v&pullRequest=368

Check warning on line 108 in sdk-pqc-bc/src/main/java/io/opentdf/platform/sdk/pqc/bc/HybridNISTAlgorithm.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Constructor has 9 parameters, which is greater than 7 authorized. 

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ6X9YYW9HIWFEaVVH5q&open=AZ6X9YYW9HIWFEaVVH5q&pullRequest=368

Check warning on line 151 in sdk-pqc-bc/src/main/java/io/opentdf/platform/sdk/pqc/bc/HybridNISTAlgorithm.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

This block of commented-out lines of code should be removed. 

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ6X9YYW9HIWFEaVVH5s&open=AZ6X9YYW9HIWFEaVVH5s&pullRequest=368

Check failure on line 19 in sdk/src/main/java/io/opentdf/platform/sdk/KeyType.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Rename this constant name to match the regular expression '^[A-Z][A-Z0-9]*(_[A-Z0-9]+)*$'. 

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ48jBwiBSDa9FlK_o_1&open=AZ48jBwiBSDa9FlK_o_1&pullRequest=368

Check warning on line 379 in sdk-pqc-bc/src/main/java/io/opentdf/platform/sdk/pqc/bc/HybridNISTAlgorithm.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Rename this local variable to match the regular expression '^[a-z][a-zA-Z0-9]*$'. 

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ6X9YYW9HIWFEaVVH5p&open=AZ6X9YYW9HIWFEaVVH5p&pullRequest=368

Check failure on line 31 in sdk-pqc-bc/src/main/java/io/opentdf/platform/sdk/pqc/bc/BouncyCastleKemProvider.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Add a nested comment explaining why this method is empty, throw an UnsupportedOperationException or complete the implementation. 

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ6X9YYH9HIWFEaVVH5l&open=AZ6X9YYH9HIWFEaVVH5l&pullRequest=368

Check failure on line 18 in sdk/src/main/java/io/opentdf/platform/sdk/KeyType.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Rename this constant name to match the regular expression '^[A-Z][A-Z0-9]*(_[A-Z0-9]+)*$'. 

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ48jBwiBSDa9FlK_o_0&open=AZ48jBwiBSDa9FlK_o_0&pullRequest=368

Check failure on line 91 in sdk/src/main/java/io/opentdf/platform/sdk/TDF.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Rename this constant name to match the regular expression '^[A-Z][A-Z0-9]*(_[A-Z0-9]+)*$'. 

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ48jBv9BSDa9FlK_o_z&open=AZ48jBv9BSDa9FlK_o_z&pullRequest=368

Check warning on line 364 in sdk-pqc-bc/src/main/java/io/opentdf/platform/sdk/pqc/bc/HybridNISTAlgorithm.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Rename this local variable to match the regular expression '^[a-z][a-zA-Z0-9]*$'. 

See more on https://sonarcloud.io/project/issues?id=opentdf_java-sdk&issues=AZ6X9YYV9HIWFEaVVH5n&open=AZ6X9YYV9HIWFEaVVH5n&pullRequest=368
View more details on SonarQubeCloud