RFR: 8331008: Implement JEP 478: Key Derivation Function API (Preview) [v78]

Sean Mullan mullan at openjdk.org
Tue Jun 4 13:00:22 UTC 2024


On Thu, 23 May 2024 15:49:57 GMT, Kevin Driver <kdriver at openjdk.org> wrote:

>> Introduce an API for Key Derivation Functions (KDFs), which are cryptographic algorithms for deriving additional keys from a secret key and other data. See [JEP 478](https://openjdk.org/jeps/478).
>
> Kevin Driver has updated the pull request with a new target base due to a merge or a rebase. The incremental webrev excludes the unrelated changes brought in by the merge/rebase. The pull request contains 98 additional commits since the last revision:
> 
>  - Merge remote-tracking branch 'origin/master' into kdf-jep-wip
>    # Please enter a commit message to explain why this merge is necessary,
>    # especially if it merges an updated upstream into a topic branch.
>    #
>    # Lines starting with '#' will be ignored, and an empty message aborts
>    # the commit.
>  - javadoc formatting
>  - javadoc formatting
>  - remove unused declared exception in impls
>  - throw a ProviderException instead of "eating" an NSAE for Mac
>  - fix edge-case in consolidateKeyMaterial
>  - change thrown exception in engineDeriveKey in impl code
>  - edge case handling in deriveXXX methods and a few javadoc fixes
>  - getInstance javadoc consistency
>  - getInstance javadoc consistency
>  - ... and 88 more: https://git.openjdk.org/jdk/compare/3ee1f70a...ef718cbf

As part of this API, we should also add a KEY_DERIVATION enum to the `java.security.CryptoPrimitive` class.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/18924#issuecomment-2147471151



More information about the security-dev mailing list