RFR: 8331008: KDF Implementation

Sean Mullan mullan at openjdk.org
Thu May 9 15:53:53 UTC 2024


On Tue, 23 Apr 2024 20:42:51 GMT, Kevin Driver <kdriver at openjdk.org> wrote:

> Introduce an API for Key Derivation Functions (KDFs), which are cryptographic algorithms for deriving additional keys from a secret key and other data. See [JEP 478](https://openjdk.org/jeps/478).

src/java.base/share/classes/javax/crypto/KDF.java line 372:

> 370:      *     if the key derivation implementation cannot support additional calls to
> 371:      *     {@code deriveData } or if all {@code DerivationParameterSpec} objects have been
> 372:      *     processed.

I don't think the derive methods should throw `IllegalStateException` - that conflicts with the thread-safe design of the API - perhaps this was leftover from an earlier iteration?

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/18924#discussion_r1595643528



More information about the security-dev mailing list