RFR: 8353578: Refactor existing usage of internal HKDF impl to use the KDF API [v3]
Valerie Peng
valeriep at openjdk.org
Fri Apr 11 01:45:11 UTC 2025
> This PR removes the internal JSSE HKDF impl and changes to use the KDF API for the HKDF support from JCA/JCE providers.
>
> This is just code refactoring. Known-answer regression test for the internal JSSE HKDF impl is removed as the test vectors are already covered by the HKDF impl in SunJCE provider.
>
> Thanks in advance for the review~
Valerie Peng has updated the pull request incrementally with one additional commit since the last revision:
address review feedbacks
cleanup interim security values
changed PKCS11 HKDF impl to allow key algorithms starting with "Tls" as generic keys
-------------
Changes:
- all: https://git.openjdk.org/jdk/pull/24393/files
- new: https://git.openjdk.org/jdk/pull/24393/files/320c49aa..eaa0737e
Webrevs:
- full: https://webrevs.openjdk.org/?repo=jdk&pr=24393&range=02
- incr: https://webrevs.openjdk.org/?repo=jdk&pr=24393&range=01-02
Stats: 216 lines in 14 files changed: 115 ins; 27 del; 74 mod
Patch: https://git.openjdk.org/jdk/pull/24393.diff
Fetch: git fetch https://git.openjdk.org/jdk.git pull/24393/head:pull/24393
PR: https://git.openjdk.org/jdk/pull/24393
More information about the security-dev
mailing list