oscerd opened a new pull request, #24680:
URL: https://github.com/apache/camel/pull/24680

   Backport of #24678 to `camel-4.14.x` (fixVersion **4.14.9**).
   
   `extractSecretKeyFromEncapsulation()` built the restored key with the 
**raw** `PQCSymmetricAlgorithms` enum name instead of the mapped JCE name 
(unlike `extractEncapsulation()`, which maps it correctly).
   
   | Enum name | JCE name | `Cipher.getInstance(<enum name>)` |
   |---|---|---|
   | `DESEDE` | `DESede` | OK (JCA lookup is case-insensitive) |
   | `GOST3412_2015` | `GOST3412-2015` | **`NoSuchAlgorithmException`** |
   
   So for GOST3412_2015 the restored key carried an algorithm label that cannot 
be resolved to a cipher, making it unusable downstream.
   
   **Difference from main:** the hybrid extract path does not exist on this 
branch, so only the standard path is patched. The test is the same (adapted to 
`test.junit5`).
   
   Validated locally: `PQCExtractSecretKeyAlgorithmNameTest` 2/2 green on this 
branch; module build clean, no generated drift.
   
   _Claude Code on behalf of Andrea Cosentino._


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to