RFR: 8357033: Reduce stateless session ticket size [v2]

Artur Barashev abarashev at openjdk.org
Tue May 20 19:12:52 UTC 2025


On Tue, 20 May 2025 19:05:01 GMT, Daniel Jeliński <djelinski at openjdk.org> wrote:

>> Hm.. they are being specified everywhere else in SSL code. So I guess we should pass an empty string to `SecretKeySpec` constructor then?
>
> Before this PR we used a hardcoded algorithm name "TlsMasterSecret" for both the PSK and the master secret. I think we can keep it.

Oh, right, forgot about it.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/25310#discussion_r2098684588


More information about the security-dev mailing list