RFR: 8331008: KDF Implementation

Sibabrata Sahoo ssahoo at openjdk.org
Thu May 9 07:31:00 UTC 2024


On Tue, 23 Apr 2024 20:42:51 GMT, Kevin Driver <kdriver at openjdk.org> wrote:

> Introduce an API for Key Derivation Functions (KDFs), which are cryptographic algorithms for deriving additional keys from a secret key and other data. See [JEP 478](https://openjdk.org/jeps/478).

src/java.base/share/classes/com/sun/crypto/provider/HkdfKeyDerivation.java line 306:

> 304: 
> 305:                     bb = Arrays.copyOf(bb, bb.length + workItemBytes.length);
> 306:                     System.arraycopy(workItemBytes, 0, bb, bb.length - workItemBytes.length,

Can it cause IndexOutOfBoundsException at some stage?

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/18924#discussion_r1595075093



More information about the security-dev mailing list