RFR: 8331008: Implement JEP 478: Key Derivation Function API (Preview) [v27]

Kevin Driver kdriver at openjdk.org
Wed Sep 11 22:53:07 UTC 2024


On Sun, 8 Sep 2024 16:36:03 GMT, Alan Bateman <alanb at openjdk.org> wrote:

>> Kevin Driver has updated the pull request incrementally with one additional commit since the last revision:
>> 
>>   updated comments around locking mechanism
>
> src/java.base/share/classes/javax/crypto/KDF.java line 53:
> 
>> 51:  * <p>
>> 52:  * The class has two derive methods, {@code deriveKey} and {@code deriveData}.
>> 53:  * The {@code deriveKey} method accepts an algorithm {@code String} and
> 
> It might be clearer to say an algorithm name, or  algorithm name as a String.

@AlanBateman: Resolved in https://github.com/openjdk/jdk/pull/20301/commits/82791ac01fb7f597a7e814403261c7a50e8a08df.

> src/java.base/share/classes/javax/crypto/KDF.java line 96:
> 
>> 94:  * deriveData methods. Therefore, it is recommended not to call the {@code
>> 95:  * getProviderName} or {@code getParameters} methods until after a key
>> 96:  * derivation operation. Once a provider is selected, it cannot be changed.
> 
> If I read this correctly, the first part of this paragraph is repeating the previous paragraph but with different wording, maybe the previous paragraph is left over from a previous iteration?

@AlanBateman: Resolved in https://github.com/openjdk/jdk/pull/20301/commits/82791ac01fb7f597a7e814403261c7a50e8a08df.

> src/java.base/share/classes/javax/crypto/KDF.java line 413:
> 
>> 411:      * @throws InvalidAlgorithmParameterException
>> 412:      *     if no {@code Provider} supports a {@code KDFSpi} implementation for
>> 413:      *     the specified algorithm and parameters
> 
> Can you double check the description of InvalidAlgorithmParameterException? This factory method has a provider parameter so I assume it's that _the_ provider doesn't support the ...

@AlanBateman, @seanjmullan: Resolved in https://github.com/openjdk/jdk/pull/20301/commits/82791ac01fb7f597a7e814403261c7a50e8a08df.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/20301#discussion_r1755773443
PR Review Comment: https://git.openjdk.org/jdk/pull/20301#discussion_r1755774839
PR Review Comment: https://git.openjdk.org/jdk/pull/20301#discussion_r1755775217


More information about the security-dev mailing list