RFR: 8371156: PBKDF2 default values should not be DER encoded
Mark Powers
mpowers at openjdk.org
Thu Nov 6 19:56:25 UTC 2025
[JDK-8371156](https://bugs.openjdk.org/browse/JDK-8371156)
HmacSHA1 is the DEFAULT for PBKDF2. Therefore, it should not be DER encoded.
PBKDF2-params ::= SEQUENCE {
salt CHOICE {
specified OCTET STRING,
otherSource AlgorithmIdentifier {{PBKDF2-SaltSources}}
},
iterationCount INTEGER (1..MAX),
keyLength INTEGER (1..MAX) OPTIONAL,
prf AlgorithmIdentifier {{PBKDF2-PRFs}} DEFAULT algid-hmacWithSHA1
}
-------------
Commit messages:
- IJ comment
- first iteration
Changes: https://git.openjdk.org/jdk/pull/28182/files
Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=28182&range=00
Issue: https://bugs.openjdk.org/browse/JDK-8371156
Stats: 22 lines in 3 files changed: 17 ins; 1 del; 4 mod
Patch: https://git.openjdk.org/jdk/pull/28182.diff
Fetch: git fetch https://git.openjdk.org/jdk.git pull/28182/head:pull/28182
PR: https://git.openjdk.org/jdk/pull/28182
More information about the security-dev
mailing list