RFR: 8360564: Implement JEP 524: PEM Encodings of Cryptographic Objects (Second Preview) [v8]

Anthony Scarpino ascarpino at openjdk.org
Thu Oct 23 04:14:26 UTC 2025


> Hi
> 
> Please review the [Second Preview](https://openjdk.org/jeps/8360563) for the PEM API.  The most significant changes from [JEP 470](https://openjdk.org/jeps/470) are:
> 
> - Renamed the name of `PEMRecord` class to `PEM`.
> - Revised the new `encryptKey` methods of the `EncryptedPrivateKeyInfo` class to accept `DEREncodable` objects rather than just `PrivateKey` objects so that cryptographic objects with public keys, i.e., `KeyPair` and `PKCS8EncodedKeySpec`, can also be encrypted.
> - Enhanced the `PEMEncoder` and `PEMDecoder` classes to support the encryption and decryption of `KeyPair` and `PKCS8EncodedKeySpec` objects.
> 
> thanks
> 
> Tony

Anthony Scarpino has updated the pull request incrementally with one additional commit since the last revision:

  more doc updates and zeroing

-------------

Changes:
  - all: https://git.openjdk.org/jdk/pull/27147/files
  - new: https://git.openjdk.org/jdk/pull/27147/files/2e9332b9..45f30dd3

Webrevs:
 - full: https://webrevs.openjdk.org/?repo=jdk&pr=27147&range=07
 - incr: https://webrevs.openjdk.org/?repo=jdk&pr=27147&range=06-07

  Stats: 178 lines in 9 files changed: 60 ins; 34 del; 84 mod
  Patch: https://git.openjdk.org/jdk/pull/27147.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/27147/head:pull/27147

PR: https://git.openjdk.org/jdk/pull/27147


More information about the security-dev mailing list