RFR: 8331008: Implement JEP 478: Key Derivation Function API (Preview) [v27]

Kevin Driver kdriver at openjdk.org
Tue Sep 10 20:13:15 UTC 2024


On Tue, 10 Sep 2024 16:05:07 GMT, Sean Mullan <mullan at openjdk.org> wrote:

>> Kevin Driver has updated the pull request incrementally with one additional commit since the last revision:
>> 
>>   updated comments around locking mechanism
>
> src/java.base/share/classes/java/security/KDFParameters.java line 25:
> 
>> 23:  * questions.
>> 24:  */
>> 25: package java.security;
> 
> This should be in the `javax.crypto` package since it is specific to KDF which is also in the `javax.crypto` package.

@seanjmullan: Refactored to the above package in https://github.com/openjdk/jdk/pull/20301/commits/dc0bd1552ea14adaec4cc8e67d4213826c1b175c.

> src/java.base/share/classes/javax/crypto/KDF.java line 54:
> 
>> 52:  * The class has two derive methods, {@code deriveKey} and {@code deriveData}.
>> 53:  * The {@code deriveKey} method accepts an algorithm {@code String} and
>> 54:  * will return a {@code SecretKey} object with the specified algorithm. The
> 
> Keep wording consistent with next sentence ("returns a byte array").
> 
> s/will return/returns/

@seanjmullan: Addressed in https://github.com/openjdk/jdk/pull/20301/commits/dc0bd1552ea14adaec4cc8e67d4213826c1b175c.

> src/java.base/share/classes/javax/crypto/KDF.java line 94:
> 
>> 92:  * optional {@code KDFParameters} is chosen. This provider may not support
>> 93:  * the key material that is subsequently passed to the deriveKey or
>> 94:  * deriveData methods. Therefore, it is recommended not to call the {@code
> 
> Put @code around deriveKey and deriveData.

@seanjmullan: Addressed in https://github.com/openjdk/jdk/pull/20301/commits/dc0bd1552ea14adaec4cc8e67d4213826c1b175c.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/20301#discussion_r1752662120
PR Review Comment: https://git.openjdk.org/jdk/pull/20301#discussion_r1752660306
PR Review Comment: https://git.openjdk.org/jdk/pull/20301#discussion_r1752660661


More information about the security-dev mailing list