RFR: 8331008: Implement JEP 478: Key Derivation Function API (Preview) [v11]

Kevin Driver kdriver at openjdk.org
Thu Sep 5 17:48:08 UTC 2024


On Tue, 3 Sep 2024 20:44:01 GMT, Kevin Driver <kdriver at openjdk.org> wrote:

>> It looks like `Arrays.copyOf()` is still called unconditionally?
>
> After relocating the length enforcement to hkdfExpand, as suggested, I did consider this, but I'm not sure what gain this check really provides in practice. Are you concerned about saving the memory allocation or the time it takes to do the actual `copyOf`?

See other reply. Resolving comment to consolidate discussion.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/20301#discussion_r1745939135


More information about the security-dev mailing list