RFR: 8331008: KDF Implementation

Sean Mullan mullan at openjdk.org
Wed May 8 20:28:00 UTC 2024


On Tue, 23 Apr 2024 20:42:51 GMT, Kevin Driver <kdriver at openjdk.org> wrote:

> Introduce an API for Key Derivation Functions (KDFs), which are cryptographic algorithms for deriving additional keys from a secret key and other data. See [JEP 478](https://openjdk.org/jeps/478).

src/java.base/share/classes/java/security/Provider.java line 1607:

> 1605:         addEngine("SecretKeyFactory",                   false, null);
> 1606:         addEngine("KEM",                                true,  null);
> 1607:         addEngine("KDF",                                true,

For the 2nd argument to be true, the HKDF provider implementation should probably register some additional service attributes as defined in https://docs.oracle.com/en/java/javase/22/docs/specs/security/standard-names.html#service-attributes

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/18924#discussion_r1594586020



More information about the security-dev mailing list