oscerd opened a new pull request, #25851: URL: https://github.com/apache/camel/pull/25851
## Backport of #25825 **Original PR:** #25825 **Original author:** @oscerd **Not a plain cherry-pick.** `PQCProducer` has diverged considerably between `main` and this branch — 214 lines here against main's much larger producer, which additionally carries hybrid-crypto, health-check and metrics fields that do not exist on 4.18. The cherry-pick therefore conflicted on the whole class, so the equivalent change is written directly against this branch's code: * remember the algorithm and provider when the producer creates the `Signature` itself; * build a fresh instance per exchange from those; * when the user configured the instance it cannot be recreated, so it is shared and the caller locks on it. Both the signing and the verification paths are covered, matching #25825. The defect is present on this branch (`private Signature signer` at line 41, `initSign` at 132, `initVerify` at 143). `camel-pqc` builds green on this branch. _Claude Code on behalf of oscerd_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
