RFR: 8331008: Implement JEP 478: Key Derivation Function API (Preview) [v38]

Kevin Driver kdriver at openjdk.org
Mon Sep 16 15:12:21 UTC 2024


> Introduce an API for Key Derivation Functions (KDFs), which are cryptographic algorithms for deriving additional keys from a secret key and other data. See [JEP 478](https://openjdk.org/jeps/478).
> 
> Work was begun in [another PR](https://github.com/openjdk/jdk/pull/18924).

Kevin Driver has updated the pull request with a new target base due to a merge or a rebase. The incremental webrev excludes the unrelated changes brought in by the merge/rebase. The pull request contains 45 additional commits since the last revision:

 - Merge remote-tracking branch 'origin/master' into kdf-jep-wip
   # Please enter a commit message to explain why this merge is necessary,
   # especially if it merges an updated upstream into a topic branch.
   #
   # Lines starting with '#' will be ignored, and an empty message aborts
   # the commit.
 - remove unused debug field
 - refine wording on DPS getInstance with params exception
 - latest code review comments for HKDFParameterSpec
 - cleanup of acronyms/abbreviations and additional finalizing
 - remove explicit zeroing in favor of finally blocks
 - clarify KDFSpi spec on certain conditions of KDFParameters input
 - further review comments
 - further review comment changes
 - various review comments
 - ... and 35 more: https://git.openjdk.org/jdk/compare/7769062d...2c1176c0

-------------

Changes:
  - all: https://git.openjdk.org/jdk/pull/20301/files
  - new: https://git.openjdk.org/jdk/pull/20301/files/e9c5f79e..2c1176c0

Webrevs:
 - full: https://webrevs.openjdk.org/?repo=jdk&pr=20301&range=37
 - incr: https://webrevs.openjdk.org/?repo=jdk&pr=20301&range=36-37

  Stats: 21897 lines in 541 files changed: 12677 ins; 5968 del; 3252 mod
  Patch: https://git.openjdk.org/jdk/pull/20301.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/20301/head:pull/20301

PR: https://git.openjdk.org/jdk/pull/20301


More information about the security-dev mailing list