RFR: 8189441: Define algorithm names for keys derived from KeyAgreement
Weijun Wang
weijun at openjdk.org
Mon Dec 9 17:36:39 UTC 2024
On Mon, 9 Dec 2024 17:26:49 GMT, Weijun Wang <weijun at openjdk.org> wrote:
> Allow `Generic` as an algorithm in the `KeyAgreement::generateSecret(alg)` method.
The comparison of algorithm names was inconsistent, sometimes `equals` and sometimes `equalsIgnoreCase`. This is even more suspicious in the `P11KeyAgreement` where both were used. My understanding is that `equalsIgnoreCase` should always be used because key algorithm has always been case-insensitive. Also, since the "TlsPremasterSecret" algorithm is only used internally, it is always provided with the correct case.
-------------
PR Comment: https://git.openjdk.org/jdk/pull/22650#issuecomment-2528836293
More information about the security-dev
mailing list