RFR: 8331008: KDF Implementation [v3]

Kevin Driver kdriver at openjdk.org
Thu May 9 20:27:20 UTC 2024


On Thu, 9 May 2024 14:11:44 GMT, Weijun Wang <weijun at openjdk.org> wrote:

>> Kevin Driver has updated the pull request incrementally with one additional commit since the last revision:
>> 
>>   some code review comments
>
> src/java.base/share/classes/javax/crypto/spec/HKDFParameterSpec.java line 40:
> 
>> 38:  * @since 23
>> 39:  */
>> 40: public interface HKDFParameterSpec extends KDFParameterSpec {
> 
> Make it `sealed` and its 3 child `final`.

Done. Please resolve if satisfied.

> src/java.base/share/classes/javax/crypto/spec/HKDFParameterSpec.java line 50:
> 
>> 48:         List<SecretKey> ikms = new ArrayList<>();
>> 49:         List<SecretKey> salts = new ArrayList<>();
>> 50:         SecretKey prk = null;
> 
> No `prk` here. In fact, maybe rename `Builder` to `ExtractBuilder`?

Done. Please resolve if satisfied.

Not renaming, since this builder can technically generate an `ExtractExpand` too.

> src/java.base/share/classes/javax/crypto/spec/HKDFParameterSpec.java line 316:
> 
>> 314:          */
>> 315:         public byte[] info() {
>> 316:             return info;
> 
> return a clone.

Done. Please resolve if satisfied.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/18924#discussion_r1595928811
PR Review Comment: https://git.openjdk.org/jdk/pull/18924#discussion_r1595928890
PR Review Comment: https://git.openjdk.org/jdk/pull/18924#discussion_r1595930025



More information about the security-dev mailing list