RFR: 8353578: Refactor existing usage of internal HKDF impl to use the KDF API [v2]

Valerie Peng valeriep at openjdk.org
Sat Apr 5 19:12:23 UTC 2025


> This PR removes the internal JSSE HKDF impl and changes to use the KDF API for the HKDF support from JCA/JCE providers.
> 
> This is just code refactoring. Known-answer regression test for the internal JSSE HKDF impl is removed as the test vectors are already covered by the HKDF impl in SunJCE provider.
> 
> Thanks in advance for the review~

Valerie Peng has updated the pull request incrementally with one additional commit since the last revision:

  added default deriveData method to SSLKeyDerivation interface and
  refactored code to remove unused AlgorithmParameterSpec argument.

-------------

Changes:
  - all: https://git.openjdk.org/jdk/pull/24393/files
  - new: https://git.openjdk.org/jdk/pull/24393/files/cfa422e4..320c49aa

Webrevs:
 - full: https://webrevs.openjdk.org/?repo=jdk&pr=24393&range=01
 - incr: https://webrevs.openjdk.org/?repo=jdk&pr=24393&range=00-01

  Stats: 222 lines in 15 files changed: 38 ins; 75 del; 109 mod
  Patch: https://git.openjdk.org/jdk/pull/24393.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/24393/head:pull/24393

PR: https://git.openjdk.org/jdk/pull/24393


More information about the security-dev mailing list