RFR: 8331008: KDF Implementation [v4]

Weijun Wang weijun at openjdk.org
Fri May 10 02:30:04 UTC 2024


On Fri, 10 May 2024 00:15:32 GMT, Kevin Driver <kdriver at openjdk.org> wrote:

>> Introduce an API for Key Derivation Functions (KDFs), which are cryptographic algorithms for deriving additional keys from a secret key and other data. See [JEP 478](https://openjdk.org/jeps/478).
>
> Kevin Driver has updated the pull request incrementally with one additional commit since the last revision:
> 
>   adding in delayed provider selection

src/java.base/share/classes/com/sun/crypto/provider/SunJCE.java line 467:

> 465:         ps("KDF", "HkdfSHA384",
> 466:                 "com.sun.crypto.provider.HkdfKeyDerivation$HkdfSHA384");
> 467:         ps("KDF", "HkdfSHA512",

In fact I like the old name better. At least I think the `HKDF` should be all capitals. Whether you need the `Hmac` word and what delimiter to use can be discussed.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/18924#discussion_r1596180762



More information about the security-dev mailing list