RFR: 8341346: Add support for exporting TLS Keying Material [v3]

Bradford Wetmore wetmore at openjdk.org
Thu May 1 19:39:45 UTC 2025


On Thu, 1 May 2025 18:24:19 GMT, Artur Barashev <abarashev at openjdk.org> wrote:

>> Bradford Wetmore has updated the pull request incrementally with one additional commit since the last revision:
>> 
>>   Moved too fast
>
> test/jdk/javax/net/ssl/ExtendedSSLSession/TLSKeyExporters.java line 296:
> 
>> 294:         // Inputs exactly equal.  Use exportKeyMaterialKey()
>> 295:         clientBytes = cessls.exportKeyMaterialKey("hello",
>> 296:                 bytes, 128).getEncoded();
> 
> Should we add tests with EKM material length other than 128?

I have a difference test with 127 vs 128, but can add another equal key size for matching.  Say 40?

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/24976#discussion_r2070707740


More information about the security-dev mailing list