RFR: 8331008: KDF Implementation

Sibabrata Sahoo ssahoo at openjdk.org
Thu May 9 09:05:53 UTC 2024


On Tue, 23 Apr 2024 20:42:51 GMT, Kevin Driver <kdriver at openjdk.org> wrote:

> Introduce an API for Key Derivation Functions (KDFs), which are cryptographic algorithms for deriving additional keys from a secret key and other data. See [JEP 478](https://openjdk.org/jeps/478).

src/java.base/share/classes/com/sun/crypto/provider/HkdfKeyDerivation.java line 337:

> 335:         hmacObj.init(new SecretKeySpec(salt, "HKDF-Salt"));
> 336: 
> 337:         return hmacObj.doFinal(inputKey.getEncoded());

inputKey can possibly null because consolidateKeyMaterial() returns null when List<SecretKey> keys is null or empty.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/18924#discussion_r1595178690



More information about the security-dev mailing list