RFR: 8331008: KDF Implementation (Preview) [v28]

[Weijun Wang]

On Fri, 10 May 2024 20:55:47 GMT, Kevin Driver <kdriver at openjdk.org> wrote:

>> I agree. Also, if we do want to validate arguments (and I don't know if we need to), then I think the `Extract` constructor should be responsible for doing that, not the `Builder`. Doing it in `Extract` is safer since it is done after the fields are cloned.
>
> Do we think there is a meaningful definition of an extract that has no IKM && no salt values **at the same time**?

This is like encrypting with an empty password. You don't recommend people doing that but it's legal.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/18924#discussion_r1598539985