RFR: 8360564: Implement JEP 524: PEM Encodings of Cryptographic Objects (Second Preview) [v7]
Anthony Scarpino
ascarpino at openjdk.org
Mon Oct 20 22:19:41 UTC 2025
> Hi
>
> Please review the [Second Preview](https://openjdk.org/jeps/8360563) for the PEM API. The most significant changes from [JEP 470](https://openjdk.org/jeps/470) are:
>
> - Renamed the name of `PEMRecord` class to `PEM`.
> - Revised the new `encryptKey` methods of the `EncryptedPrivateKeyInfo` class to accept `DEREncodable` objects rather than just `PrivateKey` objects so that cryptographic objects with public keys, i.e., `KeyPair` and `PKCS8EncodedKeySpec`, can also be encrypted.
> - Enhanced the `PEMEncoder` and `PEMDecoder` classes to support the encryption and decryption of `KeyPair` and `PKCS8EncodedKeySpec` objects.
>
> thanks
>
> Tony
Anthony Scarpino has updated the pull request incrementally with two additional commits since the last revision:
- fix non-pbe
- doc updates, zeroing, fix unencrypted keypair encoding, exception mods
-------------
Changes:
- all: https://git.openjdk.org/jdk/pull/27147/files
- new: https://git.openjdk.org/jdk/pull/27147/files/3e183c5a..2e9332b9
Webrevs:
- full: https://webrevs.openjdk.org/?repo=jdk&pr=27147&range=06
- incr: https://webrevs.openjdk.org/?repo=jdk&pr=27147&range=05-06
Stats: 523 lines in 9 files changed: 175 ins; 132 del; 216 mod
Patch: https://git.openjdk.org/jdk/pull/27147.diff
Fetch: git fetch https://git.openjdk.org/jdk.git pull/27147/head:pull/27147
PR: https://git.openjdk.org/jdk/pull/27147
More information about the security-dev
mailing list