RFR: 8331008: KDF Implementation (Preview) [v28]

Alan Bateman alanb at openjdk.org
Mon May 13 09:31:15 UTC 2024


On Mon, 13 May 2024 03:46:50 GMT, Kevin Driver <kdriver at openjdk.org> wrote:

>> Introduce an API for Key Derivation Functions (KDFs), which are cryptographic algorithms for deriving additional keys from a secret key and other data. See [JEP 478](https://openjdk.org/jeps/478).
>
> Kevin Driver has updated the pull request incrementally with one additional commit since the last revision:
> 
>   re-enable preview annotations

src/java.base/share/classes/javax/crypto/KDF.java line 457:

> 455:      * <p>
> 456:      * The {@code deriveData} method may be called multiple times once a
> 457:      * {@code KDF} object is initialized.

What does "once a KDF object is initialized" mean? The getInstance methods return a KDF that is initialized, are you saying it's possible to KDF that is only partly initialized? Is this about lazy binding to the provider?

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/18924#discussion_r1598158146



More information about the security-dev mailing list