Skip to content

fix(sdk): Lets ML-KEM PQ key encapsulation work#370

Open
dmihalcik-virtru wants to merge 2 commits into
mainfrom
DSPX-2399-java-sdk
Open

fix(sdk): Lets ML-KEM PQ key encapsulation work#370
dmihalcik-virtru wants to merge 2 commits into
mainfrom
DSPX-2399-java-sdk

Conversation

@dmihalcik-virtru

@dmihalcik-virtru dmihalcik-virtru commented May 19, 2026

Copy link
Copy Markdown
Member

Fixes missing cases to unwrap ML-KEM 768 and 1024 post-quantum key encapsulation for the Java SDK as part of the mechanism-mlkem feature.

@coderabbitai

coderabbitai Bot commented May 19, 2026

Copy link
Copy Markdown
Contributor

Warning

Review limit reached

@dmihalcik-virtru, you've reached your PR review limit, so we couldn't start this review.

Next review available in: 4 minutes

Enable usage-based reviews in Billing to review now. Otherwise, wait until the next included review is available.
You're only billed for reviews past your plan's rate limits ($0.25/file).

How can I continue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based reviews.

How do review limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability.

For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window.

Please refer docs for additional details.

Review details
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 7d3b866b-6a2a-4f43-b34d-b3538a46b77a

📥 Commits

Reviewing files that changed from the base of the PR and between cde461a and 0bfd247.

📒 Files selected for processing (2)
  • .github/workflows/update-platform-branch.yaml
  • sdk/src/main/java/io/opentdf/platform/sdk/KeyType.java
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch DSPX-2399-java-sdk

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@github-actions

Copy link
Copy Markdown
Contributor

X-Test Failure Report

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request introduces support for ML-KEM-768 key encapsulation, a post-quantum cryptographic algorithm. Key changes include the addition of the MLKEM768Key type to the KeyType enum, the implementation of the MLKEMEncryption class using Bouncy Castle, and integration within the TDF manifest creation process. Feedback focuses on improving resource management in MLKEMEncryption by using try-with-resources for the PEMParser, optimizing performance through the reuse of a static SecureRandom instance, and adding validation to ensure the generated ciphertext matches the expected length.

Comment thread sdk/src/main/java/io/opentdf/platform/sdk/MLKEMEncryption.java Outdated
Comment thread sdk/src/main/java/io/opentdf/platform/sdk/MLKEMEncryption.java Outdated
Comment thread sdk/src/main/java/io/opentdf/platform/sdk/MLKEMEncryption.java Outdated
@github-actions

Copy link
Copy Markdown
Contributor

X-Test Failure Report

@dmihalcik-virtru dmihalcik-virtru changed the title feat(java-sdk): add ML-KEM-768 post-quantum key encapsulation (DSPX-2399) fix(sdk): Lets ML-KEM PQ key encapsulation work Jun 29, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Signed-off-by: Dave Mihalcik <dmihalcik@virtru.com>
…m-branch.yaml

Signed-off-by: Dave Mihalcik <dmihalcik@virtru.com>
@sonarqubecloud

Copy link
Copy Markdown

@github-actions

Copy link
Copy Markdown
Contributor

@dmihalcik-virtru dmihalcik-virtru marked this pull request as ready for review July 1, 2026 11:45
@dmihalcik-virtru dmihalcik-virtru requested review from a team as code owners July 1, 2026 11:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants