RFR: 8320449: ECDHKeyAgreement should validate parameters before using them [v3]

Sean Mullan mullan at openjdk.org
Tue Jan 16 13:46:22 UTC 2024


On Mon, 15 Jan 2024 03:37:45 GMT, John Jiang <jjiang at openjdk.org> wrote:

>> ECDHKeyAgreement should validate the parameters before assigning them to the fields.
>
> John Jiang has updated the pull request incrementally with one additional commit since the last revision:
> 
>   Not use JUnit

test/jdk/sun/security/ec/ECDHKeyAgreementParamValidation.java line 72:

> 70:                 IllegalStateException.class,
> 71:                 ()->ka.doPhase(kp.getPublic(), true));
> 72:     }

How about also calling `generateSecret` and checking for `IllegalStateException`?

test/jdk/sun/security/ec/ECDHKeyAgreementParamValidation.java line 92:

> 90:                 () -> ka.doPhase(kpP384.getPublic(), true));
> 91: 
> 92:         // Should not generate share key with SECP256R1 private key and SECP384R1 public key

Typo: s/share/shared/

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/17373#discussion_r1453442848
PR Review Comment: https://git.openjdk.org/jdk/pull/17373#discussion_r1453443829



More information about the security-dev mailing list