RFR: 8343232: PKCS#12 KeyStore support for RFC 9879: Use of Password-Based Message Authentication Code 1 (PBMAC1) [v10]

Mark Powers mpowers at openjdk.org
Tue Oct 7 20:40:50 UTC 2025


On Sat, 4 Oct 2025 21:22:10 GMT, Mark Powers <mpowers at openjdk.org> wrote:

>> src/java.base/share/classes/sun/security/pkcs12/MacData.java line 186:
>> 
>>> 184:             kdfHmac = macAlgorithm;
>>> 185:             Hmac = macAlgorithm;
>>> 186:         }
>> 
>> Did you consider adding another kdfHmac parameter to the method and passing in the correct values?
>
> This comment appears to apply to an earlier iteration. It is not easy to keep track of all these iterations. I believe the latest iteration fixes this.

fixed

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/24429#discussion_r2411823179


More information about the security-dev mailing list