RFR: 8343232: PKCS#12 KeyStore support for RFC 9879: Use of Password-Based Message Authentication Code 1 (PBMAC1) [v10]

Mark Powers mpowers at openjdk.org
Thu Oct 2 19:43:58 UTC 2025


On Thu, 2 Oct 2025 18:06:37 GMT, Mark Powers <mpowers at openjdk.org> wrote:

>> src/java.base/share/classes/sun/security/pkcs12/MacData.java line 190:
>> 
>>> 188:         var skf = SecretKeyFactory.getInstance(
>>> 189:                 kdfHmac.equals("HmacSHA512") ?
>>> 190:                 "PBKDF2WithHmacSHA512" : "PBKDF2WithHmacSHA256");
>> 
>> The calculation of mac can be consolidated in one method, which is then called by both `processMacData` and `calculateMac`.
>
> fixed

Is this a game of Whac-A-Mole? I already commented that this is fixed.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/24429#discussion_r2399883749


More information about the security-dev mailing list