RFR: 8328119: Support HKDF in SunPKCS11 (Preview) [v8]

[Weijun Wang]

On Thu, 19 Dec 2024 22:07:39 GMT, Martin Balao <mbalao at openjdk.org> wrote:

> there will be part of the functionality difficult or impossible to use and untested.

Show me a case that is impossible with this factory. IIUC, the only usage of this factory is to convert a `SecretKeySpec` to a P11 key. Why need this step if your new HKDF and existing HMac impl already accept `SecretKeySpec`?

Do you want to store that key inside the token for a while before feeding it to HKDF?

-------------

PR Comment: https://git.openjdk.org/jdk/pull/22215#issuecomment-2556042204