RFR: 8343232: PKCS#12 KeyStore support for RFC 9879: Use of Password-Based Message Authentication Code 1 (PBMAC1) [v10]
Mark Powers
mpowers at openjdk.org
Thu Oct 2 19:43:58 UTC 2025
On Thu, 2 Oct 2025 18:06:37 GMT, Mark Powers <mpowers at openjdk.org> wrote:
>> src/java.base/share/classes/sun/security/pkcs12/MacData.java line 190:
>>
>>> 188: var skf = SecretKeyFactory.getInstance(
>>> 189: kdfHmac.equals("HmacSHA512") ?
>>> 190: "PBKDF2WithHmacSHA512" : "PBKDF2WithHmacSHA256");
>>
>> The calculation of mac can be consolidated in one method, which is then called by both `processMacData` and `calculateMac`.
>
> fixed
Is this a game of Whac-A-Mole? I already commented that this is fixed.
-------------
PR Review Comment: https://git.openjdk.org/jdk/pull/24429#discussion_r2399883749
More information about the security-dev
mailing list