CHANGELOG.md

Changelog

0.18.0 (2026-07-27)

Features

• sdk: add comprehensive DPoP (RFC 9449) support (DSPX-3397) (#374) (82ddef1)

Bug Fixes

• sdk: Lets ML-KEM PQ key encapsulation work (#370) (e7278fb)
• sdk: Updates to proto version v0.36.0 (#345) (cde461a)
• sdk: Updates to proto version v0.39.0 (#386) (81c743e)
• upgrade the publish plugin to avoid an error (#384) (f94f507)

0.17.1 (2026-06-24)

Bug Fixes

• we need to publish all three modules (#382) (9a93140)

0.17.0 (2026-06-22)

Features

• sdk: DSPX-3309 add hybrid post-quantum key wrapping for KAS (X-Wing, ECDH+ML-KEM) (#368) (faffa7d)

Bug Fixes

• do not push snapshots (#381) (b761453)
• we deploy from the root (#379) (3b612dd)

0.16.0 (2026-06-22)

⚠ BREAKING CHANGES

• sdk: remove bouncycastle and ayza libraries (#367)

Features

• sdk: remove bouncycastle and ayza libraries (#367) (63b49af)
• verify that BC works with approved_only mode set (#375) (36fd6cf)

Bug Fixes

• main: Update bc module sdk version. (#377) (9b38f82)

0.15.0 (2026-04-29)

Features

• sdk: add shorthand enum constants for policy types (#357) (a1d4651)

0.14.0 (2026-04-21)

Features

• sdk: add ergonomic Resource constructors for authorization (#354) (9e05ca2)

Bug Fixes

• ci: allow release branch scopes in PR title validation (#349) (8020a3b)

0.13.0 (2026-04-09)

Features

• sdk: add EntityIdentifier convenience constructors (#346) (eeb8805)
• sdk: DSPX-2418 add discovery convenience methods (#339) (8de6068)
• sdk: expose SRT signer (#329) (f93d332)

Bug Fixes

• add a default assertion id if one is not specified (#341) (69d6a53)
• docs: DSPX-2409 replace SDK README code example with working code (#336) (0f224a6)
• sdk: Support kas keys with extended EC methods (#344) (982b287)
• sdk: Support RSA4096 Kas keys (#343) (dba9bbf)
• sdk: Updates to proto version v0.16.0 (#308) (4660e27)

0.12.0 (2026-01-15)

⚠ BREAKING CHANGES

• sdk: remove NanoTDF implementation (#321)

Features

• sdk: enhance assertion verification to support jwk and x509 certificates (#322) (251fea2)
• sdk: expose base key (#323) (c370a46)

Bug Fixes

• sdk: remove NanoTDF implementation (#321) (63715d2)

0.11.1 (2025-12-08)

Bug Fixes

• examples: improve logging and setup logic in examples (#316) (2e5660c)

0.11.0 (2025-11-20)

Features

• ci: DSPX-1716 Updating permission for bundled tests (#306) (87ff3e6)

Bug Fixes

• ci: Fix the workflow that updates the proto version (#301) (9bd9ce5)
• main: make examples runnable (#311) (5ede7dd)
• parse hostnames with no ports correctly (#292) (3da5f51)
• sdk: remove reserved and unused proto field (#299) (50b0302)
• we can't parse things like 192.168.1.1:4000 (#294) (dc3142d)

0.10.0 (2025-09-02)

⚠ BREAKING CHANGES

• sdk: add base key and support for key grants in ZTDF (#271)

Features

• ability to set connect-rpc protocol (#285) (47041c5)
• add system metadata assertion (#270) (d235f13)
• expose AuthorizationService v2 (#287) (d1fd106)
• introduce the base key for nano flows (#273) (d337704)
• sdk: add base key and support for key grants in ZTDF (#271) (c3b79db)

Bug Fixes

• ci: Update codeql.yaml to run on all pull requests (#283) (9e318bb)
• create AES-256 keys of the correct length with all curves (#282) (95c20b3)
• sdk: add methods to examine Manifest and Policy (#278) (03d5d41)
• sdk: parse the component sizes (#286) (3b1bb69)

0.9.0 (2025-07-14)

Features

• sdk: Get the algorithm from the KASInfo and not the config (#272) (feff0e8)

Bug Fixes

• sdk: upgrade the platform protocol code (#275) (90eaba1)

0.8.1 (2025-05-29)

Bug Fixes

• ci: use dokka-maven-plugin instead of javadoc-maven-plugin (#262) (ab1e7b1)

0.8.0 (2025-05-27)

⚠ BREAKING CHANGES

• sdk: better control which classes we expose (#254)
• sdk: expose method to build an http client (#256)
• sdk: switch to connect-rpc for GRPC (#244)
• sdk: DSPX-1037 update sdk api (#249)

Features

• Add initial Dependency Review configuration (#252) (ba11d49)
• sdk: add nanotdf plaintext policy (#259) (be9cd94)
• sdk: better control which classes we expose (#254) (e00eeaf)
• sdk: DSPX-1037 update sdk api (#249) (f2e1307)
• sdk: expose method to build an http client (#256) (2cac97c)
• sdk: switch to connect-rpc for GRPC (#244) (ff36a1d)

Bug Fixes

• sdk: add coverage (#258) (e6ad1bc)

0.7.9 (2025-04-28)

Features

• sdk: KAS Allowlist (#245) (e48cdbd)

0.7.8 (2025-04-09)

Bug Fixes

• deal with the extra layer of hex (#236) (7e961c1)

0.7.7 (2025-04-07)

Features

• sdk: EC-wrapped key support for ZTDF (#224) (d062691)

Bug Fixes

• cmdline: Disable failing encryptnano ecdsa (#227) (80ca207)
• cmdline: Enable ec-wrapped cfg (#231) (ee39ed5)
• if a version < 4.3.0 is specified create an old-style TDF (#234) (082a9e7)
• sdk: Fixes nano ECDSA policy binding config (#225) (f3e9fed)
• sdk: Remove temporary ec salt value (#228) (0fe37c6)
• sdk: Set ec-wrapped to new salt value (#230) (d3be28e)
• sdk: Update version information (#232) (f9eeb0d)

0.7.6 (2025-02-06)

Features

• Add assertion verification (#216) (e0f8caf)
• cmdline: assertions cli support (#204) (3325114)
• sdk: Add and expose tamper error types (#187) (b4f95e6)
• sdk: adds Collections API (#212) (1ee1367)

Bug Fixes

• Correct null assertions when deserializing (#211) (b075194)
• incorrect isStreamable serialized name (#210) (32825b0)
• NanoTDF secure key from debug logging and iv conflict risk (#208) (6301d32)
• sdk: deserialize object statement values correctly (#219) (c513e8c)
• sdk: Fuzz testing and protocol fixes (#214) (cf6f932)
• sdk: group splits with empty/missing split IDs together (#217) (0f47702)
• sdk: remove hex encoding (#213) (e076d11)
• sdk: uses offset for ByteBuffer array offset (#209) (0d6e761)
• Use reusable start-additional-kas workflow (#215) (cb6f757)

0.7.5 (2024-10-29)

Features

• Examples module (#202) (ac13a0a)

Bug Fixes

• sdk: option to disable assertion verification (#205) (78d7b66)

0.7.4 (2024-10-24)

Bug Fixes

• sdk: returns the correct string associated with enums (#200) (1dffd35)

Documentation

• JavaDoc (#196) (33c9513)
• minor Java SDK README updates (#193) (e9dc738)

0.7.3 (2024-10-09)

Features

• sdk: deserialize policy objects (#179) (39582f3)

0.7.2 (2024-10-08)

⚠ BREAKING CHANGES

• move to single jar (#160)

Features

• add code to create services for SDK (#35) (28513e6)
• add logging (#49) (9d20647)
• Add NanoTDF E2E Tests (#75) (84f9bd1)
• adds token exchange and general auth (#176) (bb325c4)
• BACK-2316 add a simple method to detect TDFs (#111) (bfbef70)
• build: maven refactor for maven central (#174) (c640773), closes #79
• ci: Add xtest workflow trigger (#96) (bc54b63)
• cmd: Adds command --mime-type opt (#113) (45a2c30)
• cmdline: Adds --ecdsa-binding and help (#164) (ed6e982)
• codegen: Generate and publish Java Proto generated artifacts (#2) (2328fd2)
• core: Add attributes client (#118) (98ba6a9)
• core: Add autoconfigure for key splitting (#120) (7ecbf23)
• core: Adding key cache, tests for specificity (#126) (a149887)
• core: Handle split keys on tdf3 encrypt and decrypt (#109) (943751f)
• core: KID in NanoTDF (#112) (33b5982)
• core: NanoTDF resource locator protocol bit mask (#107) (159d2f1)
• crypto API (#33) (b8295b7)
• lib: add fallback to namespace kas (#166) (4368840)
• NanoTDF Implementation (#46) (6485326)
• PLAT-3087: zip reader-writer (#23) (3eeb626)
• SDK Encrypt (with mocked rewrap) (#45) (d67daa2)
• sdk: add CLI and integration tests (#64) (df20e6d)
• sdk: add mime type. (#108) (6c4a27b)
• sdk: add ssl context (#58) (80246a9)
• sdk: expose GRPC auth service components (#92) (2595cc5)
• sdk: get e2e rewrap working (#52) (fe2c04b)
• sdk: Issue #60 - expose SDK (#61) (ddef62a)
• sdk: provide access tokens dynamically to KAS (#51) (04ca715)
• sdk: the authorization service is needed for use by gateway (#85) (73cac82)
• sdk: update archive support (#47) (29a80a9)
• sdk: Update the assertion support to match go sdk (#117) (f9badb3)
• support key id in ztdf key access object (#84) (862460a)
• update README.md (#142) (198d335)

Bug Fixes

• Align identifier bytes correctly in ResourceLocator (#148) (2efe226)
• core: Add support for certs (#131) (2f98a3a)
• core: Revert "feat(core): Add attributes client" (#124) (3d1ef2b)
• create TDFs larger than a single segment (#65) (e1da325)
• fix pom for release please (#77) (3a3c357)
• Force BC provider use (#76) (1bc9dd9)
• get rid of duplicate channel logic (#59) (1edd666)
• GitHub packages snapshot repo (#178) (713cb2b)
• GPG key and Maven credentials in release workflow (#171) (864e9ce)
• Issue #115 - fix for SSL Context for IDP and plaintext platform (#116) (36a29df)
• make sure we do not deserialize null (#97) (9579c42)
• nano: Store key ids if found (#134) (94c672b)
• passpharse (#169) (8b3cbed)
• policy-binding new structure (#95) (b10a61e)
• sdk: allow SDK to handle protocols in addresses (#70) (97ae8ee)
• sdk: assertion support in tdf3 (#82) (c299dbd)
• sdk: give a test framework test scope (#90) (b99de43)
• sdk: make sdk auto closeable (#63) (c1bbbb4)
• sdk: Mixed split fix (#163) (649dac7)
• ztdf support both base and handling assertions (#128) (5f72e94)

Documentation

• sdk: Adds brief usage code sample (#26) (79215c7)

Miscellaneous Chores

• release 0.6.1 Release-As: 0.6.1 (#135) (09ec548)
• release 0.7.2 (#184) (ea6cf12)

Code Refactoring

• move to single jar (#160) (ba9b2d5)

0.6.1 (2024-08-27)

Features

• update README.md (#142) (198d335)

Bug Fixes

• nano: Store key ids if found (#134) (94c672b)

Miscellaneous Chores

• release 0.6.1 Release-As: 0.6.1 (#135) (09ec548)

0.6.1 (2024-08-26)

Bug Fixes

• core: Add support for certs (#131) (2f98a3a)

Miscellaneous Chores

• release 0.6.1 Release-As: 0.6.1 (#135) (09ec548)

0.6.0 (2024-08-23)

Features

• core: Add autoconfigure for key splitting (#120) (7ecbf23)
• core: Adding key cache, tests for specificity (#126) (a149887)

Bug Fixes

• core: Revert "feat(core): Add attributes client" (#124) (3d1ef2b)
• ztdf support both base and handling assertions (#128) (5f72e94)

0.5.0 (2024-08-19)

Features

• BACK-2316 add a simple method to detect TDFs (#111) (bfbef70)
• cmd: Adds command --mime-type opt (#113) (45a2c30)
• core: Add attributes client (#118) (98ba6a9)
• core: Handle split keys on tdf3 encrypt and decrypt (#109) (943751f)
• core: KID in NanoTDF (#112) (33b5982)
• sdk: Update the assertion support to match go sdk (#117) (f9badb3)

Bug Fixes

• Issue #115 - fix for SSL Context for IDP and plaintext platform (#116) (36a29df)

0.4.0 (2024-08-09)

Features

• ci: Add xtest workflow trigger (#96) (bc54b63)
• core: NanoTDF resource locator protocol bit mask (#107) (159d2f1)
• sdk: add mime type. (#108) (6c4a27b)

Bug Fixes

• make sure we do not deserialize null (#97) (9579c42)
• policy-binding new structure (#95) (b10a61e)

0.3.0 (2024-07-18)

Features

• sdk: expose GRPC auth service components (#92) (2595cc5)

Bug Fixes

• sdk: give a test framework test scope (#90) (b99de43)

0.2.0 (2024-07-15)

Features

• sdk: the authorization service is needed for use by gateway (#85) (73cac82)
• support key id in ztdf key access object (#84) (862460a)

Bug Fixes

• sdk: assertion support in tdf3 (#82) (c299dbd)

Documentation

• sdk: Adds brief usage code sample (#26) (79215c7)

0.1.0 (2024-06-13)

Features

• add code to create services for SDK (#35) (28513e6)
• add logging (#49) (9d20647)
• Add NanoTDF E2E Tests (#75) (84f9bd1)
• codegen: Generate and publish Java Proto generated artifacts (#2) (2328fd2)
• crypto API (#33) (b8295b7)
• NanoTDF Implementation (#46) (6485326)
• PLAT-3087: zip reader-writer (#23) (3eeb626)
• SDK Encrypt (with mocked rewrap) (#45) (d67daa2)
• sdk: add CLI and integration tests (#64) (df20e6d)
• sdk: add ssl context (#58) (80246a9)
• sdk: get e2e rewrap working (#52) (fe2c04b)
• sdk: Issue #60 - expose SDK (#61) (ddef62a)
• sdk: provide access tokens dynamically to KAS (#51) (04ca715)
• sdk: update archive support (#47) (29a80a9)

Bug Fixes

• create TDFs larger than a single segment (#65) (e1da325)
• fix pom for release please (#77) (3a3c357)
• Force BC provider use (#76) (1bc9dd9)
• get rid of duplicate channel logic (#59) (1edd666)
• sdk: allow SDK to handle protocols in addresses (#70) (97ae8ee)
• sdk: make sdk auto closeable (#63) (c1bbbb4)