RFR: 8189441: Define algorithm names for keys derived from KeyAgreement

Weijun Wang weijun at openjdk.org
Mon Dec 9 17:36:39 UTC 2024


On Mon, 9 Dec 2024 17:26:49 GMT, Weijun Wang <weijun at openjdk.org> wrote:

> Allow `Generic` as an algorithm in the `KeyAgreement::generateSecret(alg)` method.

The comparison of algorithm names was inconsistent, sometimes `equals` and sometimes `equalsIgnoreCase`. This is even more suspicious in the `P11KeyAgreement` where both were used. My understanding is that `equalsIgnoreCase` should always be used because key algorithm has always been case-insensitive. Also, since the "TlsPremasterSecret" algorithm is only used internally, it is always provided with the correct case.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/22650#issuecomment-2528836293


More information about the security-dev mailing list