84b97b4e0a
feat: add ML-DSA (FIPS 204) support with policy enforcement
...
Introduce ML-DSA (FIPS 204) as a first-class signature algorithm:
- algorithm binding and streaming signature context
- key generation specs/builders and key import specs
- correct handling of pure vs pre-hash (SHA-512) ML-DSA JCA variants
- policy security strength mapping (44/65/87 → 128/192/256)
- comprehensive JUnit streaming sign/verify tests
Signed-off-by: Leo Galambos <lg@hq.egothor.org >
2025-12-25 18:36:35 +01:00
2b4559884f
fix: add SLH-DSA security strength estimation for policy enforcement
...
Extend SecurityStrengthAdvisor to recognize SLH-DSA keys and map their
parameter sets (128/192/256) to NIST security strengths.
This enables CryptoPolicy.minStrength(...) to enforce SLH-DSA profiles
consistently with other PQC algorithms.
Signed-off-by: Leo Galambos <lg@hq.egothor.org >
2025-12-25 17:43:00 +01:00
8f228c7ada
feat: SLH-DSA (FIPS 205) signature algorithm added
...
Signed-off-by: Leo Galambos <lg@hq.egothor.org >
2025-12-25 01:54:24 +01:00
4da4547a46
fix: defensively copy secret and encapsulation before destroy()
...
SecretWithEncapsulation may zeroize internal buffers on destroy().
Create defensive copies of the shared secret and ciphertext using
Arrays.copyOf() before destroying the result object to ensure stable
output.
No cryptographic behavior changes; fixes a potential lifecycle bug.
Signed-off-by: Leo Galambos <lg@hq.egothor.org >
2025-12-24 23:39:32 +01:00
cb363ba2f4
chore: deps upgrade
...
chore: PMD 8.0.0 obsolete rules replaced
Signed-off-by: Leo Galambos <lg@hq.egothor.org >
2025-12-24 22:33:00 +01:00
0b4b4de603
chore: PMD warnings clean-up
...
Signed-off-by: Leo Galambos <lg@hq.egothor.org >
2025-12-24 21:41:44 +01:00
eba163dd21
chore: deprecated applied
...
Signed-off-by: Leo Galambos <lg@hq.egothor.org >
2025-12-07 22:20:08 +01:00
31018235dc
chore: javadoc fixes (format)
...
Signed-off-by: Leo Galambos <lg@hq.egothor.org >
2025-12-07 21:57:50 +01:00
e328a6a103
chore: softprops/action-gh-release wants newline-delimited globs of paths
2025-11-02 14:10:51 +01:00
0114f46907
chore: javadoc upload disabled (workflow)
...
Release / release (push) Successful in 1m5s
Signed-off-by: Leo Galambos <lg@hq.egothor.org >
2025-11-02 14:00:17 +01:00
56eb54bf9e
fix: incorrect (package) javadoc for chacha and cmce
...
Signed-off-by: Leo Galambos <lg@hq.egothor.org >
2025-09-19 02:01:22 +02:00
0c4060774e
fix: comments improved
...
Release / release (push) Successful in 2m35s
Signed-off-by: Leo Galambos <lg@hq.egothor.org >
2025-09-17 00:57:41 +02:00
f3ab7476f2
fix: incorrect comment about key size
2025-09-17 00:47:12 +02:00
2cc988925a
Initial commit (history reset)
2025-09-16 23:14:24 +02:00
