Skip to content

engineGetKeySpec rejects keys from external providers - #1699

Merged
jasonkatonica merged 1 commit into
IBM:mainfrom
johnpeck-us-ibm:PQCKeyTranslate
Aug 20, 2026
Merged

engineGetKeySpec rejects keys from external providers#1699
jasonkatonica merged 1 commit into
IBM:mainfrom
johnpeck-us-ibm:PQCKeyTranslate

Conversation

@johnpeck-us-ibm

@johnpeck-us-ibm johnpeck-us-ibm commented Aug 11, 2026

Copy link
Copy Markdown
Member

Added code to PQCKeyFactory to allow for ML-KEM and ML-DSA generic Alg names for key translation.

Signed-off-by: johnpeck-us-ibm johnpeck@us.ibm.com

@johnpeck-us-ibm johnpeck-us-ibm self-assigned this Aug 11, 2026
@johnpeck-us-ibm
johnpeck-us-ibm marked this pull request as draft August 11, 2026 15:58
johnpeck-us-ibm added a commit to johnpeck-us-ibm/OpenJCEPlus that referenced this pull request Aug 12, 2026
Added code to PQCKeyFactory to allow for ML-KEM and ML-DSA generic Alg
names for key translation.

Signed-off-by: johnpeck-us-ibm <johnpeck@us.ibm.com>
johnpeck-us-ibm added a commit to johnpeck-us-ibm/OpenJCEPlus that referenced this pull request Aug 12, 2026
Added code to PQCKeyFactory to allow for ML-KEM and ML-DSA generic Alg
names for key translation.

Signed-off-by: johnpeck-us-ibm <johnpeck@us.ibm.com>
@johnpeck-us-ibm johnpeck-us-ibm linked an issue Aug 12, 2026 that may be closed by this pull request
@johnpeck-us-ibm
johnpeck-us-ibm marked this pull request as ready for review August 12, 2026 17:45
Comment thread src/main/java/com/ibm/crypto/plus/provider/PQCKeyFactory.java
Comment thread src/test/java/ibm/jceplus/junit/base/BaseTestPQCKeys.java Outdated
Comment thread src/main/java/com/ibm/crypto/plus/provider/PQCKeyFactory.java Outdated
Comment thread src/test/java/ibm/jceplus/junit/base/BaseTestPQCKeys.java Outdated
Comment thread src/test/java/ibm/jceplus/junit/base/BaseTestPQCKeys.java Outdated
Comment thread src/test/java/ibm/jceplus/junit/base/BaseTestPQCKeys.java Outdated
johnpeck-us-ibm added a commit to johnpeck-us-ibm/OpenJCEPlus that referenced this pull request Aug 17, 2026
Added code to PQCKeyFactory to allow for ML-KEM and ML-DSA generic Alg
names for key translation.

Signed-off-by: johnpeck-us-ibm <johnpeck@us.ibm.com>

@jasonkatonica jasonkatonica left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@KostasTsiounis KostasTsiounis left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm not sure why we've added assumeFalse("OpenJCEPlusFIPS".equals(getProviderName()));, given that the test is not extended in the bucket of tests for OpenJCEPlusFIPS. Should they be removed or is there another reason?

Comment thread src/test/java/ibm/jceplus/junit/base/BaseTestPQCKeys.java Outdated
Comment thread src/test/java/ibm/jceplus/junit/base/BaseTestPQCKeys.java Outdated
Comment thread src/test/java/ibm/jceplus/junit/base/BaseTestPQCKeys.java Outdated
Comment thread src/test/java/ibm/jceplus/junit/base/BaseTestPQCKeys.java Outdated
Comment thread src/test/java/ibm/jceplus/junit/base/BaseTestPQCKeys.java Outdated

@JinhangZhang JinhangZhang left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

johnpeck-us-ibm added a commit to johnpeck-us-ibm/OpenJCEPlus that referenced this pull request Aug 18, 2026
Added code to PQCKeyFactory to allow for ML-KEM and ML-DSA generic Alg
names for key translation.

Signed-off-by: johnpeck-us-ibm <johnpeck@us.ibm.com>
@KostasTsiounis

Copy link
Copy Markdown
Member

I'm not sure why we've added assumeFalse("OpenJCEPlusFIPS".equals(getProviderName()));, given that the test is not extended in the bucket of tests for OpenJCEPlusFIPS. Should they be removed or is there another reason?

Can you also remove the assumeFalse("OpenJCEPlusFIPS".equals(getProviderName())); statements, please?

johnpeck-us-ibm added a commit to johnpeck-us-ibm/OpenJCEPlus that referenced this pull request Aug 19, 2026
Added code to PQCKeyFactory to allow for ML-KEM and ML-DSA generic Alg
names for key translation.

Signed-off-by: johnpeck-us-ibm <johnpeck@us.ibm.com>
@johnpeck-us-ibm

Copy link
Copy Markdown
Member Author

I'm not sure why we've added assumeFalse("OpenJCEPlusFIPS".equals(getProviderName()));, given that the test is not extended in the bucket of tests for OpenJCEPlusFIPS. Should they be removed or is there another reason?

Can you also remove the assumeFalse("OpenJCEPlusFIPS".equals(getProviderName())); statements, please?

Done

johnpeck-us-ibm added a commit to johnpeck-us-ibm/OpenJCEPlus that referenced this pull request Aug 19, 2026
Added code to PQCKeyFactory to allow for ML-KEM and ML-DSA generic Alg
names for key translation.

Signed-off-by: johnpeck-us-ibm <johnpeck@us.ibm.com>
Comment thread src/test/java/ibm/jceplus/junit/base/BaseTestPQCKeyInterop.java Outdated
Comment thread src/test/java/ibm/jceplus/junit/base/BaseTestPQCKeyInterop.java Outdated
Added code to PQCKeyFactory to allow for ML-KEM and ML-DSA generic Alg
names for key translation.

Signed-off-by: johnpeck-us-ibm <johnpeck@us.ibm.com>

@KostasTsiounis KostasTsiounis left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@jasonkatonica
jasonkatonica merged commit 0c7d0f7 into IBM:main Aug 20, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

engineGetKeySpec rejects keys from external providers

6 participants